MSP License Out of Compliance in Proxy Environments
Symptom
One or more of the following issues may be present in your environment:
-
Netwrix Auditor displays the following message at startup:
Your Netwrix Auditor license is currently out of compliance.For information, see the Licenses page in Settings. -
The System Health log shows Event ID 2222 with an error similar to:
Unable to connect to the remote server. Check your firewall settingsto allow access to https://license.nwxcorp.com -
Trace logs show connection failures to
54.89.181.210:443(or other Netwrix-owned IPs).
Cause
Call.Home.exe — the executable responsible for syncing license usage with the Netwrix MSP portal — does not automatically inherit system proxy settings. In environments with a default proxy configured, Call.Home.exe cannot reach the Netwrix licensing servers unless explicitly configured.
Two additional factors can also block license sync:
- The
<CustomInstanceIdentificator>tag in MSP.xml is empty (no company name specified). - The
MSPStartDelayerEnabledregistry value, when not equal tofalse, delays Call.Home.exe execution.
Resolution
Step 1 — Create a Proxy Configuration File for Call.Home.exe
-
In the Auditor installation folder under
\Netwrix Auditor\Administrative Console\, create a file namedNetwrix.CallHome.config. -
Add the following content, replacing the proxy address with your environment's proxy:
<configuration>
<system.net>
<defaultProxy>
<proxy proxyaddress="http://<your-proxy>:<port>"
usesystemdefault="True" autoDetect="False" />
</defaultProxy>
</system.net>
</configuration>
Step 2 — Add the Company Name to MSP.xml
Open \Netwrix Auditor\Administrative Console\MSP.xml and add your organization name between the <CustomInstanceIdentificator> tags:
<CustomInstanceIdentificator>YourCompanyName</CustomInstanceIdentificator>
Step 3 — Set the Registry Value to Allow Immediate Execution
In the registry, navigate to:
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Netwrix Auditor\Management Console
Create or update the String Value:
- Name:
MSPStartDelayerEnabled - Value:
false
Step 4 — Run Call.Home.exe Manually to Force a Sync
From the Administrative Console folder, run Call.Home.exe manually. Confirm that license usage updates correctly in both the MSP portal and the Auditor console.
Proxy Allowlist
Add the following URLs and IPs to your proxy server's allowlist (port 443):
| URL / IP | Notes |
|---|---|
https://license.nwxcorp.com/ | Primary licensing endpoint |
https://stats.netwrix.com/ | Statistics endpoint |
3.228.101.61 | Netwrix-controlled IP |
44.195.254.5 | Netwrix-controlled IP |
54.89.181.210 | Netwrix-controlled IP |
54.152.202.196 | Netwrix-controlled IP |
NOTE: These IPs are all Netwrix-controlled (subdomains of
netwrix.com/nwxcorp.com). The licensing service may try multiple IPs sequentially — whitelist all of them.
Verification
After completing the steps above:
- Browse to
https://license.nwxcorp.comfrom the Auditor server — a white/blank page is expected behavior (the page is intentionally blank). - License sync does not happen in real time; it runs on a periodic schedule. Confirm the Licenses page in Settings reflects the correct count within a few days.
- To force an immediate sync, re-run Call.Home.exe manually as described in Step 4.