Recommendation scan failure (protocol error) to Deep Security Agent (DSA) under NGINX proxy

Product / Version includes:

Deep Security All

Last updated: 2025/05/08

Solution ID: KA-0012878

Category: Troubleshoot

Summary

On some environments with NGINX as proxy server, DSA recommendation scan may fail if the NGINX proxy timeout is reached before the recommendation scan finishes.

Investigating the agent logs, you should see the agent start the recommendation scan but receives a connection termination after 60 seconds:

#Received GetHostMetaData command for recommendation scan
YYYY-MM-DD 00:00:00.000000 [+0000]: [Cmd/5] | Received command GetHostMetaData
 
#timeout after 60s
YYYY-MM-DD 00:01:00.000000 [+0000]: [dsa.Heartbeat/5] | Terminating processing for connection with peer at address 'agents-001.workload..cloudone.trendmicro.com' port 443

To fix the issue, increase the timeout on NGINX proxy by adding/changing the following parameters under HTTP body:

Before adding these parameters, it is suggested to test it on a non-production environment first. Please evaluate carefully if you can add these changes on your production. It is recommended to contact NGINX support for verification.

keepalive_timeout        300;
proxy_connect_timeout    300;
proxy_read_timeout       300;
proxy_send_timeout       300;
client_body_timeout      3600s;

Make sure as well to reload NGINX proxy configuration, using the following command:

nginx -s reload

Was this article helpful?

Featured

Automation Center

Education Portal

Online Help Center

Service Status

TrendConnect

Recommendation scan failure (protocol error) to Deep Security Agent (DSA) under NGINX proxy

Recommendation scan failure (protocol error) to Deep Security Agent (DSA) under NGINX proxy

Product / Version includes:

Summary