ALERT: Some images may not load properly within the Knowledge Base Article. If you see a broken image, please right-click and select 'Open image in a new tab'. We apologize for this inconvenience.

SpanVA is disconnected


Article ID: 172229


Updated On:


CASB Security Standard CASB Security Premium CASB Security Advanced CASB Audit CASB Gateway CASB Gateway Advanced


  • SpanVA is not connected to CloudSOC.
  • SpanVA disconnected.
  • SpanVA says DISCONNECTED with a red dot
  • Data source is not processing

401 API Error from SpanVA Diagnostics Tab


When a SpanVA is provisioned, a token is assigned to the SysAdmin that provisioned the SpanVA. This user must remain active with SysAdmin privileges for the SpanVA to function. The SpanVA fails to a Disconnected state if the user is removed, deactivated, or loses SysAdmin privileges. 

SysAdmin user is removed.


  • If the user is deactivated, reactivate the user account and restart the SpanVA. The SpanVA then returns to Alive status.
  • If the user loses SysAdmin privileges, promote the user back to SysAdmin and restart the SpanVA. The SpanVA then returns to Alive status.
  • If the user is deleted, the token is lost, and a new SysAdmin must be provisioned to the SpanVA. Please contact support and provide the following details:
    • Your tenant ID
    • Email of the old SysAdmin that was removed
    • Email of a new SysAdmin to assign
    • The SpanVA name
    • The SpanVA ID