Summary
When deploying policies from Apex Central to Apex One Vulnerability Protection, the following error details can be seen
Policy Error ID 5 (Vulnerability Protection Service: Product communication error).
Apex One: Deployed
Endpoint Sensor Service: Deployed
Application Control Service: Deployed
Vulnerability Protection Service: Product communication error.
Root Cause Analysis
This issue is occurs because Apex Central was not able to send request to Apex One Vulnerability Protection server because of the wrong setting of "HTTP/2".
The error can be seen in the diagnostic.log file of Apex Central, located under ...\Control Manager\WebUI\WebApp\widget\repository\log\:
2020-01-15 17:24:12,144,DEBUG,null,null,[modOSCE IVPProxy][send_policy]In.
2020-01-15 17:24:12,144,DEBUG,null,null,[modOSCE IVPProxy][send_policy]iVP socket timeout: 700
2020-01-15 17:24:12,144,DEBUG,null,null,[modOSCE IVPProxy][send_policy]URL =
https://<FQDN of Apex One Server>/officescan_ivp/command
2020-01-15 17:24:12,144,DEBUG,null,null,[modOSCE IVPProxy][send_policy]param =
{"name":"UpdateClientSettings","clientUIDs":["168a7096-6d25-4d55-9dae-7fa5a7fe953e"],
"policyGUID":"6f0fbbd0-9546-4792-9173-7eee4762fa8b","policyVersion":"2020-01-15 19:24:06","clientSettings":
{"vulnerabilityShieldState":0,"fixedSizePatternMode":1,"ipsRules":{"disabledList":[],
"enabledList":[]},"networkEngineSettings":{"settings.configuration.networkDriverMode":"0",
"settings.configuration.packet.driver.timeoutEstab":"3","settings.configuration.packet.driver.timeoutLastAck":"30",
"settings.configuration.packet.driver.timeoutColdStart":"300","settings.configuration.packet.driver.timeoutUdp":"10",
"settings.configuration.packet.driver.maxConnectionsUdp":"1000000",
"settings.configuration.packet.driver.maxConnectionsTcp":"1000000","settings.configuration.packet.driver.ignorestatus0":"0",
"settings.configuration.packet.driver.ignorestatus1":"0","settings.configuration.packet.driver.ignorestatus2":"0",
"settings.configuration.packet.driver.logRules":"-1"}}}
2020-01-15 17:24:12,144,DEBUG,null,null,[HTTPTALK]Failed error code:92
2020-01-15 17:24:12,144,DEBUG,null,null,[HTTPTALK]Failed reason:HTTP/2 stream 0 was not closed cleanly: HTTP_1_1_REQUIRED (err 13)
2020-01-15 17:24:12,144,DEBUG,null,null,[modOSCE IVPProxy][send_policy]Send() failed,
error message = HTTP/2 stream 0 was not closed cleanly: HTTP_1_1_REQUIRED (err 13)
2020-01-15 17:24:12,144,DEBUG,null,null,[modOSCE IVPProxy][send_policy]Out.
2020-01-15 17:24:12,144,DEBUG,null,null,[modOSCE IVPProxy][proxy_exec]return code = 2
2020-01-15 17:24:12,144,DEBUG,null,null,[modOSCE IVPProxy][proxy_exec]resultDeploy = ,
errCode = 421, errMessage = Connecting to server failed
