Views:
AlertPriorityActionLog
Agent configuration package too largeWarning
  • To resolve, delete some db and log files, and reduce the rules assigned.
  • As a workaround, customer can ignore this alert. Go to Network Engine > Advanced Network Engine Settings and unselect Generate an Alert when Agent configuration package exceeds maximum size.
  • DSA debug log
  • DSM debug log
Anti-Malware Component Update FailedWarningCheck whether the AM license is expired or not. Confirm whether the agent can connect to relay.
  • DSA/VM diagnostic package
  • DSR diagnostic package
  • DSM diagnostic package
Anti-Malware Engine OfflineCriticalCheck this article: Troubleshooting guidelines for common Deep Security issues.N/A
Anti-Malware protection is absent or out of dateWarningPerforming a security update will fix this alert. When the security update is finished, go to Computer > Update and it should show "Up-to-date".
  • DSA/VM diagnostic package
  • DSR diagnostic package
  • DSM diagnostic package
Application Type MisconfigurationWarningRefer to this article: "There are one or more Application Type conflicts on this Computer..." appears in DPI Events when updating the Deep Security Agent (DSA).N/A
Communications Problem DetectedWarningTest the connection between DSA (4118) and DSM (4120) using telnet. Ensure that DSA and DSM can resolve its hostname.
  • DSA and DSM diagnostic package
  • Wireshark package during reproduce
Computer Reboot RequiredWarningWhen there is any change on the driver-related level, request a machine OS reboot for the changes to take effect.N/A
Connection to Filter Driver FailureCriticalN/A
  • ESXi bundle log
  • DSVA diagnostic package
Firewall Engine OfflineCriticalFollow this article: Intrusion Prevention and Firewall engines appear offline after upgrading Deep Security
  • ESXi bundle log
  • DSVA diagnostic package
  • DSA diagnostic package
Integrity Monitoring Engine OfflineCriticalFollow this article:
Follow this article: "Integrity Monitoring Engine Offline" and other errors appear after activating a virtual machine
N/A
Integrity Monitoring information collection has been delayedWarningCheck this article: “Integrity Monitoring information collection has been delayed” appears in Deep Security.N/A
Intrusion Prevention Engine OfflineCriticalFollow this article: Intrusion Prevention and Firewall engines appear offline after upgrading Deep Security
  • ESXi bundle log
  • DSVA diagnostic package
  • DSA diagnostic package
Log Inspection Engine OfflineCriticalRemove the rules one by one to narrow down the issue.
  • DSA debug log
  • DSM debug log
Relay Update Service UnavailableCriticalFollow this article: The Deep Security Relay (DSR) Agent generates an alert "Relay Update Service Unavailable" after its own update.N/A
Scheduled Malware Scan Failure (Agent/Appliance configuration error)N/ATo resolve the issue:
  1. Check if DSA's malware configuration contains any invalid char in exclusion list.
  2. Check if there is any third-party AV product installed on DSA.
  • DSM diagnostic package
  • DSA diagnostic package
Scheduled Malware Scan Failure (Unable to communicate with Agent/Appliance)N/ATo resolve the issue:
  1. Check the communication port.
  2. Check if the DSA service is running or not.
  • DSM diagnostic package
  • DSA diagnostic package
  • DSA Wireshark log
Security Update: Pattern Update on Agent/Appliance Failed.N/ATo resolve the issue:
  1. Check if DSA package is installed into DSM.
  2. Check if there is a valid Relay group for this DSA.
  3. Confirm the connection and 4122 port of DSR
  • DSM diagnostic package
  • DSA diagnostic package
Send Policy Failed (Internal Server Error)CriticalReset and reactive the DSA. It is also recommended to upgrade to the latest version.
  • DSA debug log
  • DSM debug log
Software Update: Integrity Monitoring Module Installation FailedN/ATo resolve the issue:
  1. Check if DSA package is installed into DSM.
  2. Check if there is a valid Relay group for this DSA.
  3. Confirm the connection and 4122 port of DSR.
  • DSM diagnostic package
  • DSA diagnostic package
Software Update: Intrusion Prevention Module Installation FailedN/ATo resolve the issue:
  1. Check if DSA package is installed into DSM.
  2. Check if there is a valid Relay group for this DSA.
  3. Confirm the connection and 4122 port of DSR.
  4. If it is Linux OS, check if this kernel is kernel support list.
  • DSM diagnostic package
  • DSA diagnostic package
Software Update: Log Inspection Module Installation FailedN/ATo resolve the issue:
  1. Check if DSA package is installed into DSM.
  2. Check if there is a valid Relay group for this DSA.
  3. Confirm the connection and 4122 port of DSR.
  • DSM diagnostic package
  • DSA diagnostic package
Software Update: Web Reputation Module Installation FailedN/ATo resolve the issue:
  1. Check if DSA package is installed into DSM.
  2. Check if there is a valid Relay group for this DSA.
  3. Confirm the connection and 4122 port of DSR.
  • DSM diagnostic package
  • DSA diagnostic package
Unable to Upgrade the Agent SoftwareWarningN/A
  • DSA diagnostic package
  • DSM diagnostic package
Virtual Machine Interfaces Out of SyncWarningFollow this article: “Interface out of sync” appears in the Deep Security Manager (DSM) console.N/A
Comments (0)