Dr.Web Server Detection Service

When using this type of connection, the client does not know the address of Dr.Web Server beforehand. Each time before establishing a connection, the client searches through the network for Dr.Web Server. To find it, the client sends a broadcast query and waits for a response containing the Dr.Web Server address. After receiving the response, the client establishes a connection to Dr.Web Server.

For this to work, Dr.Web Server must listen for such queries.

There are several ways to set up such a connection. The most important thing is to match the Dr.Web Server search method on the client side with the Dr.Web Server response part.

By default, Dr.Web Enterprise Security Suite uses the Multicast over UDP mode:

1.Dr.Web Server is registered in a multicast group with an address specified in the Dr.Web Server settings.

2.Dr.Web Agents, when searching for Dr.Web Server, send multicast queries to the group address specified in step 1.

By default, Dr.Web Server listens for any queries coming to udp/231.0.0.1:2193 (similarly to direct connections).

You can set this parameter in the Dr.Web Server settings: Administration → Dr.Web Server configuration → Network → Transport → TCP/IP. Empty value instructs to use the default address indicated above.