Detection servers in an Unknown state in the Enforce console after an upgrade

Products

• Data Loss Prevention Network Prevent for Email
• Data Loss Prevention Endpoint Discover
• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Enforce
• Data Loss Prevention Core Package
• Data Loss Prevention
• Data Loss Prevention Network Discover
• Data Loss Prevention Network Monitor and Prevent for Email
• Data Loss Prevention Network Monitor and Prevent for Email and Web
• Data Loss Prevention Network Protect

Issue/Introduction

DLP Detector after upgrade (or install) doesn't communicate with Enforce server.
The Detector server shows on DLP console (UI) with status Unknown.

File: debug/BoxMonitor0.log

Date: 12/27/2018 7:37:51 PM

Class: com.vontu.communication.transport.ServerChannelManager

Method: <init>

Level: SEVERE

Message:  failed to init server channel channel manager

java.net.BindException: Cannot assign requested address: bind

at sun.nio.ch.Net.bind0(Native Method)

at sun.nio.ch.Net.bind(Net.java:433)

at sun.nio.ch.Net.bind(Net.java:425)

Environment

DLP 15.x and above 

Cause

The Communication.properties configuration file is configured with a serverbindname=IPAddress. The host to IP address mapping is not configured at the server C:\Windows\System32\Drivers\etc\hosts file, and java.net.PlainSocketImpl.socketBind(Native Method) is configured to bind the tcp port 8100 to a host that doesn't exist in the hosts file.

Resolution

Update the Communication.properties under the C:\SymantecDLP\Protect\config directory and try one of the following resolutions:

1. Verify that the serverbindname= has the correct value for the local network IP address of the network adapter you expect the Enforce server to connect to. (Note: This should NOT have the Enforce IP address). If the value is incorrect then update with the correct IP and then save the file and restart the detection server services.

2. Comment out the serverbindname=IPAddress line as shown below.