Policy error found with DCS agent on AIX platform & Web GUI Error found

[Sachin Bangari]

Hello team,

Environment details:

- DCS version: 6.9.2
- Client version: 6.9.0.310
- Server Operating System : Windows Server 2016
- Client operating system: AIX
- Brief Network Architecture: Internal with 172 subnet
- Is it Virtual or physical device: VM
- Elaborate the issue: DCS manager was crashed, and restored on 03-Dec-2022.

Below functions are not working properly upon restore of DCS manager.

Can anyone help us fix the below mentioned issue.

There are two issues found after restoring DCS Server Manager.

1.AIX agents status showing "Policy Error" , and "Feature Enable Pending" 

2. Monitor > Event > All Events > Total number of event; The Web GUI showing an error prompt, saying "An error was encountered while attempting to execute the database query."




Regards,
Sachin

[Shane_NorthStar.io]

The screen capture you shared is broken and doesn't display. When posting to the forum try to include relevant information such as the version of DCS, number of agents installed, features being used (prevention/detection), version of the OS for the agent having the issue, version of the agent, the chain of events leading to the issue, what you did to troubleshoot, etc...

Feature Enable Pending means the system that the agent was installed on needs to be rebooted for the kernel drivers to load. Not sure if you rebooted already and still have a problem. Make sure the system is in a security group that has the NULL policy applied. You could set the agent into debug mode using the sisipsconfig.sh -trace command. Reboot the system. Then run the /opt/Symantec/sdcssagent/IPS/tools/getagentinfo.sh to grab the logs from the agent system for troubleshooting.

With the UMC error message:

Launch the Server Configuration Wizard, on the second page enable trace/debug for the umc valve, server, agent, console, database, rest-api. Reproduce the issue, then run the Collect Server Info script. Review the logs from the bottom and working you way up. That should give you some clue on what is happening.

[Sachin Bangari]

Hello shane,

I have attached the screenshot again and the basic details required.

Kindly assist.



Regards,
Sachin

[Shane_NorthStar.io]

Hello Sachin,

The image is still broken. The next step is to enable debug/trace, reproduce issue, then "Collect Server Info" and review the logs. See what they tell you.