Skip to main content

MSP License Out of Compliance in Proxy Environments

Symptom

One or more of the following issues may be present in your environment:

  • Netwrix Auditor displays the following message at startup:

    Your Netwrix Auditor license is currently out of compliance.
    For information, see the Licenses page in Settings.
  • The System Health log shows Event ID 2222 with an error similar to:

    Unable to connect to the remote server. Check your firewall settings
    to allow access to https://license.nwxcorp.com
  • Trace logs show connection failures to 54.89.181.210:443 (or other Netwrix-owned IPs).

Cause

Call.Home.exe — the executable responsible for syncing license usage with the Netwrix MSP portal — does not automatically inherit system proxy settings. In environments with a default proxy configured, Call.Home.exe cannot reach the Netwrix licensing servers unless explicitly configured.

Two additional factors can also block license sync:

  • The <CustomInstanceIdentificator> tag in MSP.xml is empty (no company name specified).
  • The MSPStartDelayerEnabled registry value, when not equal to false, delays Call.Home.exe execution.

Resolution

Step 1 — Create a Proxy Configuration File for Call.Home.exe

  • In the Auditor installation folder under \Netwrix Auditor\Administrative Console\, create a file named Netwrix.CallHome.config.

  • Add the following content, replacing the proxy address with your environment's proxy:

<configuration>
<system.net>
<defaultProxy>
<proxy proxyaddress="http://<your-proxy>:<port>"
usesystemdefault="True" autoDetect="False" />
</defaultProxy>
</system.net>
</configuration>

Step 2 — Add the Company Name to MSP.xml

Open \Netwrix Auditor\Administrative Console\MSP.xml and add your organization name between the <CustomInstanceIdentificator> tags:

<CustomInstanceIdentificator>YourCompanyName</CustomInstanceIdentificator>

Step 3 — Set the Registry Value to Allow Immediate Execution

In the registry, navigate to:

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Netwrix Auditor\Management Console

Create or update the String Value:

  • Name: MSPStartDelayerEnabled
  • Value: false

Step 4 — Run Call.Home.exe Manually to Force a Sync

From the Administrative Console folder, run Call.Home.exe manually. Confirm that license usage updates correctly in both the MSP portal and the Auditor console.

Proxy Allowlist

Add the following URLs and IPs to your proxy server's allowlist (port 443):

URL / IPNotes
https://license.nwxcorp.com/Primary licensing endpoint
https://stats.netwrix.com/Statistics endpoint
3.228.101.61Netwrix-controlled IP
44.195.254.5Netwrix-controlled IP
54.89.181.210Netwrix-controlled IP
54.152.202.196Netwrix-controlled IP

NOTE: These IPs are all Netwrix-controlled (subdomains of netwrix.com / nwxcorp.com). The licensing service may try multiple IPs sequentially — whitelist all of them.

Verification

After completing the steps above:

  1. Browse to https://license.nwxcorp.com from the Auditor server — a white/blank page is expected behavior (the page is intentionally blank).
  2. License sync does not happen in real time; it runs on a periodic schedule. Confirm the Licenses page in Settings reflects the correct count within a few days.
  3. To force an immediate sync, re-run Call.Home.exe manually as described in Step 4.