Service Status Down alarm remains open for Malware Prevention Service VM on NSX Manager

Products

• VMware vDefend Firewall
• VMware vDefend Firewall with Advanced Threat Prevention

Issue/Introduction

Service Status Down alarm remains open for Malware Prevention Service VM on NSX Manager.

On alarms tab on NSX Manager, user will be able to see following alarm

Service NSX_LASTLINE_RAPID is not running on <tn-fqdn-name>.

Environment

Issue happens with NSX 4.2.0.x and SSP 5.0. This issue will not be seen if NSX 4.2.0.x used with NAPP.

Cause

Issue happens because NSX Manager 4.2.0.x is unable to connect to SSP kafka client to read health status messages sent from Malware Prevention SVM deployed on every host as well as from Edge gateway.

Resolution

There is no workaround for this issue. Issue is fixed in NSX 4.2.1.