You receive the “InterScan Web Security Virtual Appliance HTTP Daemon Restart/Stop Notification” message from the IWSVA server with the following description:
The daemon process HTTP was restarted by IWSVA because of no-response for a long time. If the daemon has been restarted/stopped repeatedly for the same reason in 60 minutes, IWSVA will only report once.
When you check the IWSVA svc_monitor log, it shows the following information:
10:36:10.073 <INF><0:14285:14288>Http daemon child process  thread [21507:6] has not respond longer than timeout, so kill it with signal . @<check_http_daemon> @@<notification.cpp:751> 10:36:10.073 <INF><0:14285:14288> HTTP daemon is restarting for the same reason too frequently,report only once. @<MailDaemonNotification> @@<notification.cpp:672>
The notification message appears because the IWSVA scan daemon stops unexpectedly while receiving data from the authentication daemon.
To resolve this issue, apply Service Pack 1 Patch 2. This will improve the communication between the scan daemon and authentication daemon, which will enable successful data transfer.