Security Segmentation Report fails with error 'Report generation has taken more than 4 hours'

Products

• VMware vDefend Firewall
• VMware vDefend Firewall with Advanced Threat Prevention

Issue/Introduction

 Security Segmentation Report fails with error  'Report generation has taken more than 4 hours'

Environment

SSP 5.0

Resolution

1. Validate If security-pov-XXXX pod is in running status. 

From SSPI  we can get the details of pov pod using below command. 

    k -n nsx-platform get pods |grep -v pov

        nsxi-platform       security-pov-XXXXX                         1/1     Running            0               7d5h    172.XX.XX.XX     ssp-prd-md-xx-xx-xxx-xx   <none>           <none>

2. Gather the report-name from UI and its JOB ID from  security-pov-XXXX pod to validate the error.

3. Validate the report-job pod status. It should not be on imagePullBackoff or error status. For example >

  k -n nsx-platform get pods |grep -v report 

nsxi-platform       report-job-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx            0/1     ImagePullBackOff   0               5h56m   172.xx.xx.xx     ssp-prd-md-0-hxnxw-flj8s   <none>           <none>
nsxi-platform       report-job-yyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy            0/1     ImagePullBackOff   0               25h     172.xx.xx.xx     ssp-prd-md-0-hxnxw-flj8s   <none>           <none> 

4. Please make number of worker nodes  are 5  in number If you have ATP license.

5. Please contact SSP BROADCOM support team for further assistance based on error.