Baremetal Server local delete alert

Products

• VMware vDefend Firewall
• VMware vDefend Firewall with Advanced Threat Prevention
• SSP

Issue/Introduction

An alarm with the description "Agents in baremetal server {{ .ObjID }} - {{ .ResourceID }} locally deleted." is observed on the SSP UI

Environment

vDefend SSP >=5.1

Cause

Agents in the Baremetal Server that enforce vdefend security have been removed from the server

Resolution

Force offboard Baremetal server from SSP and if required onboard the Baremetal Server.

• • Steps 
    • Force offboarding a baremetal server can be done either via API or UI. 
    • From API 
      • https://<ingressUrl>/baremetal/servers/<serverId>?force=true
    • From UI, 
      • Go to System > Bare Metal Servers
      • In Inventory Select "Force Offboard Server"