Submit a ticketCall us

Announcing NPM 12.2
With NPM 12.2 you can monitor your Cisco ASA firewalls, to monitor VPN tunnels for basic visibility and troubleshooting tunnels. NPM 12.2 also uses the SolarWinds Orion Installer so you can easily install and upgrade one or more Orion Platform products simultaneously.
See new features and improvements.

Home > Success Center > Patch Manager > Patch Manager agents and NAT'ed addresses

Patch Manager agents and NAT'ed addresses

Table of contents
Created by Matthew Lamb, last modified by MindTouch on Jun 23, 2016

Views: 26 Votes: 0 Revisions: 3


This article provides relevant information pertaining to agents applied on servers where the address is NAT'ed


Patch Manager 2.0 and later


When it comes to agents within Patch Manager, it stores the IP address with which it is going to communicate with the agent. This information can be wrapped up in the installer or when applied remotely from the Patch Manager server and is placed in the configuration of the agent on the client and in the Patch Manager database.


When it comes to clients that are behind an NAT or are utilizing another form of internal\public IP addresses, Patch Manager will have difficulty with communicating to the agent. Three possible outcomes can come about with this scenario:


Client behind the NAT\Patch Manager in front of it:

With the client behind the NAT and Patch Manager in front of it, Patch Manager will need to utilise the public address rather than the private address unless there is a rule or configuration in place to allow communication directly with the private. If Patch Manager however is made to use the public IP address, then the recorded IP in the configuration of the agent on the client will register as the public IP, not the private. Communication should still be possible, but you may experience some issues with status and reported information for the agent itself on that device.


Client behind the NAT with Patch Manager and wanting to use the Private IP:

Nothing different occurs in this scenario and works as it should. All communication remains internal and IP\agent information remains the same.


Client behind the NAT with Patch Manager and wanting to use the Public IP:

Patch Manager will communicate off the private IP address and will keep the agent configuration with the private address as well. Altering this however to show the public IP address is possible, but any updates to the agent or modifications will revert the IP back to its original, submitted IP address. This is by design to insure IP information is kept with the information in the database and cannot be altered.



Last modified
01:15, 23 Jun 2016