Agent configuration package too large | Warning |
- To resolve, delete some db and log files, and reduce the rules assigned.
- As a workaround, customer can ignore this alert. Go to Network Engine > Advanced Network Engine Settings and unselect Generate an Alert when Agent configuration package exceeds maximum size.
|
- DSA debug log
- DSM debug log
|
Anti-Malware Component Update Failed | Warning | Check whether the AM license is expired or not. Confirm whether the agent can connect to relay. |
- DSA/VM diagnostic package
- DSR diagnostic package
- DSM diagnostic package
|
Anti-Malware Engine Offline | Critical | Check this article: Troubleshooting guidelines for common Deep Security issues. | N/A |
Anti-Malware protection is absent or out of date | Warning | Performing a security update will fix this alert. When the security update is finished, go to Computer > Update and it should show "Up-to-date". |
- DSA/VM diagnostic package
- DSR diagnostic package
- DSM diagnostic package
|
Application Type Misconfiguration | Warning | Refer to this article: "There are one or more Application Type conflicts on this Computer..." appears in DPI Events when updating the Deep Security Agent (DSA). | N/A |
Communications Problem Detected | Warning | Test the connection between DSA (4118) and DSM (4120) using telnet. Ensure that DSA and DSM can resolve its hostname. |
- DSA and DSM diagnostic package
- Wireshark package during reproduce
|
Computer Reboot Required | Warning | When there is any change on the driver-related level, request a machine OS reboot for the changes to take effect. | N/A |
Connection to Filter Driver Failure | Critical | N/A |
- ESXi bundle log
- DSVA diagnostic package
|
Firewall Engine Offline | Critical | Follow this article: Intrusion Prevention and Firewall engines appear offline after upgrading Deep Security |
- ESXi bundle log
- DSVA diagnostic package
- DSA diagnostic package
|
Integrity Monitoring Engine Offline | Critical | Follow this article:
| N/A |
Integrity Monitoring information collection has been delayed | Warning | Check this article: “Integrity Monitoring information collection has been delayed” appears in Deep Security. | N/A |
Intrusion Prevention Engine Offline | Critical | Follow this article: Intrusion Prevention and Firewall engines appear offline after upgrading Deep Security |
- ESXi bundle log
- DSVA diagnostic package
- DSA diagnostic package
|
Log Inspection Engine Offline | Critical | Remove the rules one by one to narrow down the issue. |
- DSA debug log
- DSM debug log
|
Relay Update Service Unavailable | Critical | Follow this article: The Deep Security Relay (DSR) Agent generates an alert "Relay Update Service Unavailable" after its own update. | N/A |
Scheduled Malware Scan Failure (Agent/Appliance configuration error) | N/A | To resolve the issue:
- Check if DSA's malware configuration contains any invalid char in exclusion list.
- Check if there is any third-party AV product installed on DSA.
|
- DSM diagnostic package
- DSA diagnostic package
|
Scheduled Malware Scan Failure (Unable to communicate with Agent/Appliance) | N/A | To resolve the issue:
- Check the communication port.
- Check if the DSA service is running or not.
|
- DSM diagnostic package
- DSA diagnostic package
- DSA Wireshark log
|
Security Update: Pattern Update on Agent/Appliance Failed. | N/A | To resolve the issue:
- Check if DSA package is installed into DSM.
- Check if there is a valid Relay group for this DSA.
- Confirm the connection and 4122 port of DSR
|
- DSM diagnostic package
- DSA diagnostic package
|
Send Policy Failed (Internal Server Error) | Critical | Reset and reactive the DSA. It is also recommended to upgrade to the latest version. |
- DSA debug log
- DSM debug log
|
Software Update: Integrity Monitoring Module Installation Failed | N/A | To resolve the issue:
- Check if DSA package is installed into DSM.
- Check if there is a valid Relay group for this DSA.
- Confirm the connection and 4122 port of DSR.
|
- DSM diagnostic package
- DSA diagnostic package
|
Software Update: Intrusion Prevention Module Installation Failed | N/A | To resolve the issue:
- Check if DSA package is installed into DSM.
- Check if there is a valid Relay group for this DSA.
- Confirm the connection and 4122 port of DSR.
- If it is Linux OS, check if this kernel is kernel support list.
|
- DSM diagnostic package
- DSA diagnostic package
|
Software Update: Log Inspection Module Installation Failed | N/A | To resolve the issue:
- Check if DSA package is installed into DSM.
- Check if there is a valid Relay group for this DSA.
- Confirm the connection and 4122 port of DSR.
|
- DSM diagnostic package
- DSA diagnostic package
|
Software Update: Web Reputation Module Installation Failed | N/A | To resolve the issue:
- Check if DSA package is installed into DSM.
- Check if there is a valid Relay group for this DSA.
- Confirm the connection and 4122 port of DSR.
|
- DSM diagnostic package
- DSA diagnostic package
|
Unable to Upgrade the Agent Software | Warning | N/A |
- DSA diagnostic package
- DSM diagnostic package
|
Virtual Machine Interfaces Out of Sync | Warning | Follow this article: “Interface out of sync” appears in the Deep Security Manager (DSM) console. | N/A |