Debugging Control Manager (TMCM) registration issues in InterScan Web Security Virtual Appliance (IWSVA)

- Updated:
- 11 Aug 2017
- Product/Version:
- InterScan Web Security Virtual Appliance 5.6
- InterScan Web Security Virtual Appliance 6.0
- InterScan Web Security Virtual Appliance 6.5
- Platform:
- N/A N/A

Summary

Enable TMCM registration debugging to collect files needed by Trend Micro Technical Support for further analysis.

Details

To enable debugging:

Connect to IWSVA directly or via SSH (for example via Putty) as "root".
Open the ../var/iwss/ISAGENT_MCP/Product.ini file.
Set the value of “Level” to “3”.
Save and close the file.
Restart the agent using the "/usr/iwss/S99ISagent restart" command.
Capture packets going to TMCM using tcpdump:
tcpdump -s0 -w iwsva.cap host
Register IWSVA to TMCM.
Stop packet capture by pressing CTRL + C.
Collect the following files:
- iwsva.cap - located where the tcpdump command was issued
- ../var/iwss/ISAGENT_MCP/EntityMain.log file
- ../var/iwss/ISAGENT_MCP/Product.ini file
- ../var/iwss/ISAGENT_MCP/Agent.ini file

Rating:

Category:

Troubleshoot

Solution Id:

1095243

Feedback

Did this article help you?

Thank you for your feedback!

What was the problem with this article?

The image(s) in the article did not display properly.

The article did not provide detailed procedure.

The article is hard to understand and follow.

The video did not play properly.

The article did not resolve my issue.

Others. Please specify.

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:

We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

Thanks for voting.

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:

We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.