NSX 4.1.1 - NSX IDS/IPS Policy is Failed Suddenly with [Error Code = '9001', Error Message = 'Distributed MPS config connection failure.', Affected Entities = '[]'.]

[Haikal Shiddiq]

Hi All,

Just want to ask, anyone have an experience with the NSX IDS/IPS issue when the policy has been setup and running more than 3 months but suddenly there are the same error code [Error Code = '9001', Error Message = 'Distributed MPS config connection failure.', Affected Entities = '[]'.] and the IDS/IPS Dashboard is still showing the last traffic result?

This is the strange issue. I was also changing the mode from Detect & Prevent to Detect Only, but after 20 seconds the status is going back to Failed again.

Any help is very helpful of this one. The renewal license is still in process, so i'm opened this thread for the discussion.

Thanks & Regards,
Haikal

[Frank Tucker]

Hello,

Check Internet Connection: Ensure that your NSX Manager has a stable internet connection. Sometimes, connectivity issues can cause such errors.   Official Website

Verify License Status: Since your renewal license is in process, make sure that the current license is still valid. An expired license can lead to such issues.
Firewall Rules: Ensure that the Distributed Firewall (DFW) is not blocking any traffic that IDS/IPS needs to monitor. If traffic is blocked by a DFW rule, IDS/IPS might not function correctly.
Signature Updates: Check if the IDS/IPS signatures are up to date. Sometimes, outdated signatures can cause the system to fail.

Best Regards
franktucker907