SpanVA Auto Directory Sync (DSS) failing

Products

• CASB Securlet SAAS
• CASB Security Advanced
• CASB Security Premium
• CASB Security Standard

Issue/Introduction

An expected CloudSOC Directory Sync (Profile1) did not happen as scheduled

Please check your SpanVA for any issues with communications to the Directory Service or CloudSOC

Note: If manual DSS Sync works - then issue may be around DSS Auto-Sync service

Resolution

Ensure SpanVA VM RAM is set to 16 GB, 4 CPUs, and SpanVA is allowed in Client firewall rules correctly per this Tech Doc:

https://techdocs.broadcom.com/us/en/symantec-security-software/information-security/symantec-cloudsoc/cloud/spanva-home/spanva-auth-cloudsoc/import-spanva/spanva-system-requirements.html

Check that SpanVA / Diagnostics Tab / Generate Diagnostics is showing all checks Green  - if not - fix any local configs causing failures

Ensure SpanVA has good network connectivity by IP and DNS to the Directory Server

If you changed, fixed anything, check if DSS Auto-Sync starts working again. Possibly reboot SpanVA

Monitor CloudSOC / Settings / CloudSOC SpanVA / Details "Utilization" to ensure Disk utilization is not growing abnormally fast

If Auto-Sync fails again Copy/Paste out the failures that you see in SpanVA/Monitoring, DSS logs and create a new Support case

Include details like whether tokenization is enabled, is IP to User being used, is WMI enabled, is disk filling up, are datasource logs getting processed

Client can normally do manual DSS Sync periodically as a workaround until having a session with Audit Engineering