search cancel

Storage accounts import successfully and show as protected in the Cloud Workload Protection for Storage console, but items are not tagged with scan tags.

book

Article ID: 203477

calendar_today

Updated On:

Products

Cloud Workload Protection for Storage

Issue/Introduction

Storage accounts import successfully and show as protected in the Cloud Workload Protection for Storage (CWP:s) console, but items are not tagged with scan tags.
In addition, the Protection Unit (PU) may fail health checks every 10 minutes.

In the spe-azure-protection-adapter-service.log, located in /usr/local/spe/spe-azure-protection-adapter-service/logs directory on the PU the following error is logged:

[main] ERROR QueueAdmin:222 - Failed to declare queue: SPE_EVENT_RESPONSE
[main] ERROR RabbitmqMessagePublisher:76 - Failed to declare queue: SPE_EVENT_RESPONSE
[main] ERROR ServiceHost:27 - Failed to initialize application context: Error creating bean with name 'adapter': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: com.symantec.spe.s3.adapter.interfaces.ScanHandler com.symantec.spe.s3.adapter.Adapter.scanHandler; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'SPEScanHandler': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.symantec.spe.s3.adapter.interfaces.DispositionHandler com.symantec.spe.s3.scanner.SPEScanHandler.dispositionHandler; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'azureDispositionHandler': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.symantec.spe.s3.adapter.Reporter com.symantec.spe.azure.disposition.AzureDispositionHandler.reporter; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'reporter': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: com.symantec.spe.reporting.interfaces.EventReporterFacade com.symantec.spe.s3.adapter.Reporter.eventReporterFacade; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'eventReporterFacadeImpl' defined in URL [jar:file:/usr/local/symantec/spe/spe-azure-protection-adapter-service/lib/spe-reporting-fx-1.0.0.493-SNAPSHOT.jar!/com/symantec/spe/reporting/implementations/EventReporterFacadeImpl.class]: Invocation of init method failed; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'rabbitMqViolationEventReporter' defined in class path resource [servicehost-context.xml]: Invocation of init method failed; nested exception is com.symantec.spe.messagequeue.client.exceptions.MessageQueueException: Publisher initialization failed, check if message queue configuration is valid.
 [main] ERROR ServiceHost:29 - Exception Stack Trace: 
org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'adapter': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: com.symantec.spe.s3.adapter.interfaces.ScanHandler com.symantec.spe.s3.adapter.Adapter.scanHandler; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'SPEScanHandler': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.symantec.spe.s3.adapter.interfaces.DispositionHandler com.symantec.spe.s3.scanner.SPEScanHandler.dispositionHandler; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'azureDispositionHandler': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.symantec.spe.s3.adapter.Reporter com.symantec.spe.azure.disposition.AzureDispositionHandler.reporter; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'reporter': Injection of autowired dependencies failed; nested exception is org.springframework.beans.factory.BeanCreationException: Could not autowire field: com.symantec.spe.reporting.interfaces.EventReporterFacade com.symantec.spe.s3.adapter.Reporter.eventReporterFacade; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'eventReporterFacadeImpl' defined in URL [jar:file:/usr/local/symantec/spe/spe-azure-protection-adapter-service/lib/spe-reporting-fx-1.0.0.493-SNAPSHOT.jar!/com/symantec/spe/reporting/implementations/EventReporterFacadeImpl.class]: Invocation of init method failed; nested exception is org.springframework.beans.factory.BeanCreationException: Error creating bean with name 'rabbitMqViolationEventReporter' defined in class path resource [servicehost-context.xml]: Invocation of init method failed; nested exception is com.symantec.spe.messagequeue.client.exceptions.MessageQueueException: Publisher initialization failed, check if message queue configuration is valid.

Environment

Cloud Workload Protection for Storage deployed to Microsoft Azure with separate CU and PU instances

Cause

Network rules defined in the Virtual Network associated with the Resource group used by CWP:s do not allow communication between the Controller Unit (CU) and Protection Unit (PU).

Resolution

Configure the network rules associated with the Virtual Network configured for the CWP:s resource group to allow full network access between the CU and PU.