net_connect probe is red and in non responding state

Products

• DX Unified Infrastructure Management (Nimsoft / UIM)

Issue/Introduction

netconnect probe is red in color. Max. restarts error message in log. Version is 3.36.

nc: net_connect version 3.36, Sep 10 2018
nc: Nimsoft Corporation
Controller: Max. restarts reached for probe 'net_connect' (command = net_connect.exe)

Cause

- VMware Carbon Black security / Anti-virus

Environment

Release : 9.0.2

Component : UIM NET CONNECT

controller v7.97 HF8

Resolution

Checked Windows Application event log and found that one of the programs/operations run by net_connect was being blocked and Carbon Black was throwing an Informational Event. :

EventData 
   CbDefense 
   The application C:\Program Files (x86)\Nimsoft Infrastructure\probes\network\net_connect\net_connect.exe invoked the application C:\Program Files (x86)\Nimsoft Infrastructure\probes\network\net_connect\cfg_ipLong_migrate.exe. The operation was blocked and the application terminated by Confer

 

 

Customer will make a change request/ask the security/AV team to create an exception for all of the programs / entire NImsoft installation directory, which in this case/installation is-> C:\Program Files (x86)\Nimsoft Infrastructure

Why Carbon Black categorizes this blocking as Informational and not at least a Warning is somewhat misleading in my opinion, but I've seen this happen before with Carbon Black/CbDefense.