NXProxy not working on Silent Install

[contouredsolutions]

I just on-boarded a new customer and I am currently trying to get their remote users on NXFilter. I setup a cloud based NXFilter instance which is working well. I have one user that I manually installed NXProxy on and theirs works just fine. However, I attempted to push NXFilter as silent install using the following commands:

Command: c:\windows\temp\nxproxy-1.1.9-win.exe /verysilent /server=SERVERIP /token=MYTOKEN
nxproxy-1.1.9-win.exe install completed in 13 seconds

Where SERVERIP is my NXFilter instance and MYTOKEN is the token for the user. The software appears to be installed as I can see the service is running, but when I ping sites that should be blocked, they are still resolving. The server IP and client token I entered is definitely correct and the policy is working correctly elsewhere. What else can I try?

[support200]

See if it can change your user computer's DNS settings. It's basically a DNS server and it needs to redirect DNS traffic to itself. So, it changes system DNS settings to point 127.0.0.1. To verify it, run Nslookup on CMD and see the current DNS server.

If it doesn't have enough permission, it can't change the settings and if there's GPO like rule to lock DNS settings then it also fails.

[support200]

You also can check its log file in C:\Program Files (x86)\nxproxy\log.

[contouredsolutions]

See if it can change your user computer's DNS settings. It's basically a DNS server and it needs to redirect DNS traffic to itself. So, it changes system DNS settings to point 127.0.0.1. To verify it, run Nslookup on CMD and see the current DNS server.

If it doesn't have enough permission, it can't change the settings and if there's GPO like rule to lock DNS settings then it also fails.

NSLOOKUP is showing the local DNS server as default. This PC is not joined to a domain. What permissions might prevent this from being changed?

[support200]

You need to find out with which permission its service running. The account running NxProxy service might be different from the normal installation.

[contouredsolutions]

You need to find out with which permission its service running. The account running NxProxy service might be different from the normal installation.

It's running as the local system account, like the other services. Should I try something else?

[support200]

Did you look into its log file? But maybe it's just about not updating DNS settings.

What's the purpose of using NxProxy? If it's for local network then you just can change DNS settings to point 127.0.0.1 with a script as you don't need to change its DNS settings.

If it's for small number of roaming laptops, you can install it manually. For may laptops, we need to find out the reason for not updating DNS settings.

[contouredsolutions]

Did you look into its log file? But maybe it's just about not updating DNS settings.

What's the purpose of using NxProxy? If it's for local network then you just can change DNS settings to point 127.0.0.1 with a script as you don't need to change its DNS settings.

If it's for small number of roaming laptops, you can install it manually. For may laptops, we need to find out the reason for not updating DNS settings.

NXProxy is for roaming laptops. The number is relatively small, I was just trying to make the NXProxy install script-able like the other tools in our security stack.

[support200]

If you don't want to install it manually, you can try to run a script to change system DNS to 127.0.0.1 at startup time. We also have a script for that under NxProxy directory. it's C:\Program Files (x86)\nxproxy\bin/chgdns.vbs.