Resolving connectivity issues in Microsoft Cluster Environments when using a Deep Security Agent (DSA)

To resolve the issue:

1. Unbind the passive (first) node using bindview.
   1. Select All Services from the Show Bindings For drop-down menu and expand the branches under the Agent Trend Micro Lightweight Filter Driver.
   2. Search for the binding path to MS cluster virtual adapter.
   3. Right-click the binding path and disable it.
   4. Test if the Deep Security Agent (DSA) can communicate with Deep Security Manager (DSM) by running an Eicar test.
2. Failover the cluster to the passive (first) node.
3. Uninstall the DSA from the former active (second) node.
    

   This step will disable the network connection for up to one minute.
4. Reboot the server. The new passive (second) node should be able to join the cluster.
5. Install the DSA on the second node.
6. Create a customize firewall rule allowing incoming TCP/UDP port listed on 3343 and 49152-65535, and assign it to the target DSA. These ports are required for MS Cluster Service to allow multi-node communication between the MS Cluster Management Server and cluster nodes.
   You may change the Source IP value to Incoming Traffic instead of Any.

   

The nodes should now be working normally. For more information, refer to this Microsoft article: Service overview and network port requirements for Windows.