Detection Server - Agent Status information not updating after restarting DetectionServerService on Enforce
Article ID: 224898
Data Loss Prevention Network Monitor and Prevent for Email and WebData Loss Prevention
After restarting the Enforce server or the DetectionServerController service, the majority of the detection servers will start reporting agent status updates (eg. Last Update received) immediately. However a proportion of randomly affected detection servers will:
Show as connected in the Enforce console
Deploy policies and report incidents but...
Will report no agent status updates at all, even after some hours
Restarting the affected detection servers' service will cause the agent status to update immediately and report normally thereafter
Release : 15.5, 15.7, 15.8
Often there is more that one factor contributing to this issue.
If the agent polling interval in the agent configuration advanced settings has been reduced from the default 15 minutes this can contribute to the issue - reapplying the default may resolve the problem
In some cases, increasing the accepttimeout to 120,000 in the communication.properties configuration file on the detection servers can help
Network latency on remote sites
A hotfix based on 15.8 MP1 (15.8.00103.01003) has been made available for this issue which will increase the default timeouts for handshake negotiations