Detection server not able to connect to Enforce after reboot

book

Article ID: 209048

calendar_today

Updated On:

Products

Data Loss Prevention Network Monitor and Prevent for Email and Web

Issue/Introduction

You are unable to connect a detection server with Enforce server after rebooting it. You've already tried:

  • Restarting the DetectionServerController service on the Enforce server
  • Restarting the Detection server service on the detection server to no avail.

Cause

In this instance there was as software corruption after Windows patching was applied.

The boxmonitor_operational_0.log on the affected detection server showed that sub-services (Filereader/Aggregator etc) do not start and no message such as the one below is seen:

  Detection Server status changed from STARTING to ALL_RUNNING

Environment

Release :

Component :

Resolution

In this instance the detection server was reinstalled.

  1. Remove the detection server from the Enforce console
  2. Use Add/Remove programs on the detection server to uninstall it
  3. Reinstall detection server from source MSI
  4. Re-add the detection server to the Enforce console.