Normally, Event ID 3303 and 2085 indicate that there is a rule assigned, which needs a depending additional rule to work. The rule which causes the error is also written in the event logs:

Description: Error compiling configuration:
65: note: adding preset log policy 0
65: note: adding preset log policy 1
65: note: adding preset log policy 2
65: note: adding preset log policy 3
65: note: adding preset log policy 4
65: note: adding preset log policy 5
65: note: adding preset log policy 6
65: note: adding preset log policy 27
17469: error: dynamic port DNS:dport is referenced but not defined (apptype not applied)
1 errors during parsing

To resolve the issue, reset the DSVA security profile and clear recommendations. To do this:

1. Go to the Deep Security Manager (DSM) web console.
2. Click Computers.
3. Right-click the target computer.
4. Select Actions > Assign Policy.
5. On the Assign Policy box, select None > Ok.
6. Manually enable new rules in the security profile and check if the DSVA is able to complete the update successfully.

If issue persists, export a copy of the security profile used that caused the update error and contact contact Trend Micro Technical Support .