MacOS edpa agent status not updating in Enforce UI.

Products

• Data Loss Prevention Core Package

Issue/Introduction

The MacOS edpa agents are not updating their status in the Enforce UI

In the Aggregator logs.

java.lang.IllegalArgumentException: Unknown AgentStatusAttribute
    at com.symantec.dlp.monitorcommunication.applicationreplicators.AgentStatusAttributes.fromAttributeId(AgentStatusAttributes.java:102)
    at com.symantec.dlp.applications.subsystems.attributes.AgentAttributeValuesDispatcherSubsystem.onReceived(AgentAttributeValuesDispatcherSubsystem.java:217)
    at com.symantec.dlp.communications.aclayer.impl.HomogeneousIdMultiDataBufferSubscriberImpl$HomogeneousMultiDataBufferSubscriberDataAcceptor.notifyDataBufferAcceptor(HomogeneousIdMultiDataBufferSubscriberImpl.java:485)
    at com.symantec.dlp.communications.aclayer.impl.HomogeneousIdMultiDataBufferSubscriberImpl$HomogeneousMultiDataBufferSubscriberDataAcceptor.onReplicationComplete(HomogeneousIdMultiDataBufferSubscriberImpl.java:458)
    at com.symantec.dlp.communications.commlayer.impl.ReplicatorSlave.processReplicationComplete(ReplicatorSlave.java:690)
    at com.symantec.dlp.communications.commlayer.impl.ReplicatorSlave.processDataMessage(ReplicatorSlave.java:466)
    at com.symantec.dlp.communications.commlayer.impl.ReplicatorSlave.onMessageReceived(ReplicatorSlave.java:381)
    at com.symantec.dlp.communications.commlayer.impl.protocol.DataMessage.dispatch(DataMessage.java:64)
    at com.symantec.dlp.communications.commlayer.impl.ReplicatorSlave.onReceivedDataBuffer(ReplicatorSlave.java:345)
    at com.symantec.dlp.communications.commlayer.impl.DataConnectionImpl.processInboundDataFrame(DataConnectionImpl.java:1193)
    at com.symantec.dlp.communications.commlayer.impl.DataConnectionImpl.handleInboundDataForReplicators(DataConnectionImpl.java:1115)
    at com.symantec.dlp.communications.commlayer.impl.DataConnectionImpl.doService(DataConnectionImpl.java:590)
    at com.symantec.dlp.communications.commlayer.impl.DataConnectionImpl.run(DataConnectionImpl.java:516)
    at com.symantec.dlp.util.concurrent.DeadlineTaskQueue$DeadlineTask.run(DeadlineTaskQueue.java:254)
    at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1149)
    at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:624)
    at java.lang.Thread.run(Thread.java:748)

Environment

Enforce 16.x 

edpa 16.x 

Cause

The agent is a higher version than is supported by 16.0 GA release 

When enforce/detection servers on 16.0 GA and edpa agents are on 16.0 RU1 or RU2. This is not supported. 

The edpa to detection server communication is not forward compatable. The agent version has to be N, or N - 1. For example 16.0 GA agents can report to 16.0 RU1 or RU2 detection servers. 16.0 RU1 or above agents cannot report to a lower version of Enforce\Detection servers.

Resolution

Downgrade the agents to a supported version 

16.0 GA agents can report to 16.0GA servers or upgrade Enforce/Detection servers to match agent version support.