Hi Rahulk,
'Sm_AgentApi_IsProtectedEx' returned '-1'.
Generally, the error meaning -
The Sm_AgentApi_IsProtectedEx,
'Sm_AgentApi_AuthorizeEx', 'Sm_AgentApi_LoginEx' and 'Sm_AgentApi_LogoutEx'
are function call of agents.
Those functions having -1 or -2 error code return:
-1 means that it has failed to communicate with the Policy Server
-1 is a failure in the isProtected call.
Typically we will see this if there is a mis-match around the EncryptAgentName parameter of the Agent
protecting the resource, and the Agent serving the FCC. When the FCC processes the credentials, it performs an isProtected call, and if it
received an encrypted agentname, but is not decrypting, then the Agent will send the Policy Server the un-encrypted encrypted agentname, which
the Policy Server will not be able to locate, so the isProtected call fails.
You can check the request that is sent to the Policy Server in the Profiler output, and check the attributes being sent.
-2 means Request timeout
We need to have the Policy Server log and Policy server trace if enabled else but I am positive that something from the WebAgent is not able reach a resource or taking longer time to get a response from the Application.