Mitigation Plans

To mitigate the issue, access Cloud One – Endpoint & Workload Security or Deep Security Manager (DSM) and navigate to Computer > Settings > General > Choose whether to use Drivers for System Protection, and set "Select driver mode for protection modules and event generation" to Auto. With this, the agent with Anti-Malware enabled is supposed to be fallback-able to leverage the Linux user-mode functionality for system protections.

The issue will officially be addressed by Deep Security Agent 20 LTS Update in September.

Deep Security Agent (DSA) for Linux "Anti-Malware Engine Offline" error when loading kernel modules

Product / Version includes:

Deep SecurityAll , Cloud One - Endpoint and Workload SecurityAll

Last updated: 2024/08/29

Solution ID: KA-0017607

Category: Troubleshoot , Update

Summary

An issue has been addressed where, if Anti-Malware is enabled in DSA 20.0.1.17380 (20 LTS Update 2024-08-21) for Linux, the required Linux kernel modules may not load into the Linux kernel. This may occur in the following scenarios:

Agent runs on Linux hosts affected by Branch History Injection (BHI) changes.
Agent runs with XDR Endpoint Sensor on the same Linux host.

Mitigation Plans

The issue will officially be addressed by Deep Security Agent 20 LTS Update in September.

Was this article helpful?

Featured

Automation Center

Education Portal

Online Help Center

Service Status

TrendConnect

Deep Security Agent (DSA) for Linux "Anti-Malware Engine Offline" error when loading kernel modules

Mitigation Plans

Deep Security Agent (DSA) for Linux "Anti-Malware Engine Offline" error when loading kernel modules

Product / Version includes:

Summary

Mitigation Plans