Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Anti-Malware Engine temporarily shows offline while VMware vsepflt.sys driver is being loaded

    • Updated:
    • 26 Nov 2019
    • Product/Version:
    • Deep Security 10.0
    • Deep Security 11.0
    • Deep Security 12.0
    • Platform:
    • N/A
Summary

The Anti-Malware Engine may temporarily be in "Offline" status while the virtual machine VMware vsepflt.sys driver is being loaded and multiple machines are powered on at the same time. The issue occurs on multiple machines. It can be a timing issue wherein an action is not required.

Details
Public

VMware vsepflt.sys driver is used by Deep Security Anti-Malware feature. When a virtual machine (VM) is powered off, Deep Security Manager (DSM) will receive the status including the "Driver Offline" status. Once the VM is powered on again, Deep Security Virtual Appliance sends heartbeat to report the agent status. However, when the vsepflt.sys driver is not yet loaded, Deep Security Manager may receive the "Driver Offline" status. By default, the agent sends heartbeats to DSM every 10 minutes. If the driver is loaded in the next heartbeat, the engine's offline status would be back to online. In this case, no action is required.

You can also trigger the Check Status button to get the status immediately. If the driver is already loaded, the Anti-Malware engine status will show online.

If the status of Anti-Malware remains offline, check if the driver has been loaded.

  1. On the virtual machine, open cmd.exe with administrator permission.
  2. Run the "fltmc" command and verify if the vsepflt driver exists.

  3. If vsepflt is not yet loaded, run the "fltmc load vsepflt" command to manually load the driver.
Premium
Internal
Rating:
Category:
Troubleshoot
Solution Id:
000155810
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.