Configure ESM Server Settings Using the DB Configuration
The DB Configuration Tool is a command-line interface
(CLI) that provides an alternative to managing basic server settings through
the ESM Console. Examples of settings that you can change include
the ninja mode password, active directory caching, and number of
logs included in the ESM Tech Support file. For the full list, see Customizable
ESM Server Settings.
You can access the DB Configuration
Tool using a Microsoft MS-DOS command prompt that you run as an
administrator. The DB Configuration Tool is located in the Server
folder on the ESM Server.
All commands you run using
the DB Configuration Tool are case sensitive.
Open a command prompt as an administrator in either
of two ways:
, and then select
and, in the
but do not
, yet. Then, to open the CLI command
window as an administrator, press
Navigate to the folder that contains the DB Configuration
cd C:\Program Files\Palo Alto Networks\Endpoint Security Manager\Server
) Configure or change any of the ESM
Server settings, as needed. For usage guidelines and default values,
ESM Server Settings. For example, to specify the allowable
grace period, in seconds, for an endpoint that is not responding
(range is 300 to 86,400; default is 4200):
For example, a value of 300 means that
if the ESM Server does not receive any communication from the endpoint
within five minutes (300 seconds), the Endpoint Security Manager
reports the endpoint status as disconnected.