CSP agents stay in status "update pending" when trying to apply a policy

Products

• Critical System Protection

Issue/Introduction

The Symantec Critical System Protection agents stay "update pending" status when trying to apply a policy

Environment

Critical System Protection

All versions

Cause

"Detect Duplicate Agent" SQL Query is taking too long to complete

Resolution

Solution:

1. Ensure, detect duplicate agent setting is disabled:

2. Check if sisipsconfig tool can be executed on an agent, if IPS policy is enabled on agents, then either apply a null policy or update the policy with
appropriate settings to run the tool

3. Force register the agents, command -> sisipsconfig -forcereg

4. This should re-register the agent to Default Security Group (it should be in the Prevention tab, under Asset Groups\Policy

5. Delete the agents from their initial group (the group in which they are not receiving the policy)

6. Move the agents from the Default Security Group to their original group and the agents should receive the policy

7. You can then reenable the "Detect duplicate agent registration" setting