Compression Service failed to connect to the Netwrix Auditor server via endpoint.

This article provides solution if you see the "Compression Service failed to connect to the Netwrix Auditor server via endpoint" error.
Email It to Me Print this Page
Symptoms You have a monitoring plan for auditing Windows Server with enabled Network Traffic Compression option.
The Windows Server Compression Service runs on the target server.
When you run data collection, the following error appears in the Netwrix Auditor System Health log:
Compression Service failed to connect to the Netwrix Auditor server via endpoint demolabwks:9011 ​
Cause Review the possible causes:
  • The 9011 port is closed for inbound connections on the computer where Netwrix Auditor Server resides.
  • Netwrix Auditor Server Host Name cannot be resolved in DNS.
Resolution  
CauseResolution
The 9011 port is closed for inbound connectionsRefer to Netwrix Auditor Online help center for detailed instructions on how to configure Windows firewall inbound connections rules on the computer where Netwrix Auditor Server resides: https://helpcenter.netwrix.com/Configure_IT_Infrastructure/Windows_Server/WS_Firewall_Rules.html
DNS server cannot resolve Netwrix Auditor Server Host NameUpdate Netwrix Auditor configuration by editing the "Configuration.xml" file. 
Perform the following steps:

On the computer where Netwrix Auditor is installed:
  1. Close Netwrix Auditor.
  2. Navigate to Start -> Windows Administrative Tools -> Services and stop the following Netwrix Auditor Services:
  • Netwrix Auditor for Windows Server Audit Service
  • Netwrix Auditor Configuration Server Service
  • Netwrix Auditor Core Service
  1. Navigate to %programdata%\Netwrix Auditor\AuditCore\ConfigServer\ and open the Configuration.xml file.
  2. Find your monitoring plan in the configuration file:
<a n="Name" t="2" v="<your_Windows_Server_monitoring_plan_name>"/>
Note: If you have several monitoring plans for Windows Server, specify the Netwrix Auditor Server host name for the problem one.
  1. Locate the <n n="WSAConfiguration"> node and add the following:
<n n="AgentFineTuning">
<a n="NaHostName" t="2" v="192.168.0.10"/>
</n>

where 192.168.0.10 is the IP address or Server Name of your Netwrix Auditor Server.
  1. Start the services you have stopped on the step 2:
  • Netwrix Auditor Core Service​​
  • Netwrix Auditor Configuration Server Service
  • Netwrix Auditor for Windows Server Audit Service
  1. Start Netwrix Auditor and navigate to your monitoring plan for auditing Windows Server. 
  2. Click Update under Monitoring plan section.
  3. Wait until data collection completes.
On the computer where Windows Server Compression Service is installed:
  1. Navigate to Start -> Windows Administrative Tools -> Services and restart the Netwrix Auditor for Windows Server Compression Service.
Note: This is only required if you use Netwrix Auditor 9.0 Update 1 and older.
Was this information helpful?