Data Center Security

 View Only

 Linux DCS agent stopped getting AMD definitions

Sankarasubramanian Hariharaputhiran's profile image
Sankarasubramanian Hariharaputhiran posted Nov 02, 2020 08:25 AM
Dear Team,

We have DCS agent (6.8.2.757) installed on 100+ RHEL servers and configured to get AMD updates from LUA.

Some servers are not getting updated with latest definitions. ( port 7070 is open )

Can someone help on this ?


Many thanks
Robocop's profile image
Broadcom Employee Robocop posted Nov 24, 2020 02:49 AM

Please check the following files

 Ensure the AntiMalware.ini file has the internal LUA details

/opt/Symantec/sdcssagent/AMD/system/AntiMalware.ini

 Check lux.log file

/opt/Symantec/sdcssagent/AMD/stargate/logs/lux.log (It will have all LUA connection attempt details, you'll be able to see whether the Agent is trying to connect to LUA at all and what the return code is.)

 If no Internal LUA information. Restart the sisamdagent

systemctl restart sisamdagent