Issue with releasing / approving quarantine incidents
search cancel

Issue with releasing / approving quarantine incidents

book

Article ID: 276071

calendar_today

Updated On:

Products

Messaging Gateway

Issue/Introduction

Experienced a delay when releasing / approving a quarantine incident.

Resolution

The approval and release of quarantine incidents occurs between a control center and scanners through port 41015.

To determine the cause of the issue, capture packets using the tcpdump command in the control center command line.
Then in a pcap file we need to track streams on port 41015.

You can also specify port 41015 while running the command:

tcpdump --port 41015

The most common reason for issues when dealing with quarantine incidents is network settings.

The tcpdump results are included in a diagnostics package in extras folder.

Additional Information