Grid scanning members timeout after upgrading to 25.1

Products

• Data Loss Prevention Endpoint Prevent

Issue/Introduction

All grid scans are timing out after upgrading to 25.1 

Environment

RHEL/Windows 

25.1 was upgrading from 16.0.x (GA, RU1, RU2)

Cause

In 16.1 release the port changed from 61616 to 39990. 

see:kb160297

 

Resolution

Update firewall rules so the grid members can communicate to grid leader. 

On all the detection servers open new port.

Linux:

firewall-cmd --permanent --add-port=39990/tcp
firewall-cmd --reload

Note: since any detection server can be the grid leader you will have to open the port on every detection server.

Windows:

open powershell

netsh advfirewall firewall add rule name="Grid scanning" dir=in action=allow protocol=TCP localport=39990

Additional Information

Grid scanning has been deprecated in 25.1. It will still continue to work but it will be removed in a future release. High Speed discover scanning is the preferred/supported method for discover scanning.