McAfee M4050 Troubleshooting Guide - Page 67

Technical Support

Page 67 highlights

McAfee® Network Security Platform 6.0 System Fault Messages Fault Severity Scheduled realtime update from Update Server to Manager failed Error Description/Cause Action Unable to make scheduled update This fault clears when a of Manager signature sets. This signature update is applied fault can indicate-for example, successfully. problems with network connectivity between the Update Server and the Manager or between the Manager and the Sensor; invalid update sets; or update sets that were not properly signed. Scheduled update from Manager to Sensor failed Error Sensor is in bad Error health Sensor reports an anti-virus dat file error Error Sensor reports that the packet log channel is down Error Unable to make scheduled update of Sensor. This fault can indicate- for example, problems with network connectivity between the Manager and the Sensor, incompatibility between the update set and the Manager software, compilation problems with the signature update set, or invalid update set. This fault clears when an update is sent to Sensor successfully. This fault occurs with any type of If this fault persists, McAfee Sensor software failure, and usually recommends that you occurs in conjunction with a execute a logstat from the 'Software error' fault. Sensor CLI twice (1 minute apart), then perform a Diagnostic Trace and submit the trace file to McAfee Technical Support for troubleshooting. The Sensor has detected an error on av-dat file segment Ensure that the Sensor is online and in good health. The Manager will make another attempt to push the file to the Sensor. This fault is cleared when the av-dat file is successfully pushed to the Sensor. Sensor reports Pktlog channel between the EMS and Sensor is DOWN, but the EMS detects that the link(socket) is up. This inconsistency may cause by channel heartbeat timeout. The Sensor will typically recover on its own. If you are receiving alerts and your Sensor is otherwise functioning normally, you can ignore this message. Check to see if trust is established between the Sensor and Manager, by issuing a show command in the Sensor CLI. 58

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95

McAfee® Network Security Platform 6.0
System Fault Messages
58
Fault
Severity
Description/Cause
Action
Scheduled real-
time update from
Update Server to
Manager failed
Error
Unable to make scheduled update
of Manager signature sets. This
fault can indicate—for example,
problems with network connectivity
between the Update Server and the
Manager or between the Manager
and the Sensor; invalid update sets;
or update sets that were not
properly signed.
This fault clears when a
signature update is applied
successfully.
Scheduled
update from
Manager to
Sensor failed
Error
Unable to make scheduled update
of Sensor. This fault can indicate—
for example, problems with network
connectivity between the Manager
and the Sensor, incompatibility
between the update set and the
Manager software, compilation
problems with the signature update
set, or invalid update set.
This fault clears when an
update is sent to Sensor
successfully.
Sensor is in bad
health
Error
This fault occurs with any type of
Sensor software failure, and usually
occurs in conjunction with a
‘Software error’ fault.
If this fault persists, McAfee
recommends that you
execute a
logstat
from the
Sensor CLI twice (1 minute
apart), then perform a
Diagnostic Trace and submit
the trace file to McAfee
Technical Support for
troubleshooting.
Sensor reports
an anti-virus dat
file error
Error
The Sensor has detected an error
on av-dat file segment
Ensure that the Sensor is
online and in good health.
The Manager will make
another attempt to push the
file to the Sensor.
This fault is cleared when the
av-dat file is successfully
pushed to the Sensor.
Sensor reports
that the packet
log channel is
down
Error
Sensor reports Pktlog channel
between the EMS and Sensor is
DOWN, but the EMS detects that
the link(socket) is up.
This
inconsistency may cause by
channel heartbeat
timeout.
The Sensor will typically
recover on its own. If you are
receiving alerts and your
Sensor is otherwise
functioning normally, you can
ignore this message. Check
to see if trust is established
between the Sensor and
Manager, by issuing a show
command in the Sensor CLI.