Administrators sometimes receive the following event notification from InterScan Web Security Virtual Appliance (IWSVA):
The daemon process HTTP was stopped, maybe manually.
The daemon process HTTP was stopped, maybe manually.
If the daemon has been restarted/stopped repeatedly for the same reason in minutes, IWSVA will only report once.
The daemon process FTP was stopped, maybe manually.
If the daemon has been restarted/stopped repeatedly for the same reason in minutes, IWSVA will only report once.
To stop this notification:
- Log on to IWSVA as root via SSH (for example with a SSH shell such as PuTTy).
-
Create a backup of the file intscan.ini:
# cp -ip /etc/iscan/intscan.ini /etc/iscan/intscan.ini.bak
-
Use vi to edit the file intscan.ini:
# vi /etc/iscan/intscan.ini
-
Change "mail_if_daemon_stop" and "mail_if_ftp_stop" parameter from yes to no under the [notification] section.
[notification]
mail_if_daemon_stop=no
mail_if_ftp_stop=no - Save the file and quit.
-
Restart all of the services.
# /etc/iscan/rcIwss restart
Note: This will interrupt the network traffic for a few minutes so plan accordingly.