Dr.Web Server Detection Service

In this connection scheme, a client does not know the Dr.Web Server address beforehand. Each time before establishing a connection, the client searches through the network for Dr.Web Server. To find it, the client sends a broadcast query and waits for a respond that would include the Dr.Web Server address. After the client gets the response, it establishes a connection to Dr.Web Server.

For this scheme to work, Dr.Web Server must listen for such queries.

There are several ways to set up this scheme. It is most important that the Dr.Web Server search method on the client side is matched with the Dr.Web Server response part.

The Multicast over UDP mode is used by default in Dr.Web Enterprise Security Suite:

1.Dr.Web Server is registered in a multicast group with an address specified in the Dr.Web Server settings.

2.The Agents, when searching for Dr.Web Server, send multicast queries to the group address specified at step 1.

By default, Dr.Web Server listens for any queries coming to udp/231.0.0.1:2193 (similarly to direct connections).

You can set this parameter in the Dr.Web Server settings: Administration → Dr.Web Server configuration → Network → Transport → TCP/IP. Empty value instructs to use the default address mentioned above.