Remote Agent Handlers intermittently switch status between Active and Inactive in ePolicy Orchestrator 5.10
Last Modified: 2023-07-26 10:48:01 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Remote Agent Handlers intermittently switch status between Active and Inactive in ePolicy Orchestrator 5.10
Technical Articles ID:
KB91178
Last Modified: 2023-07-26 10:48:01 Etc/GMT Environment
ePolicy Orchestrator (ePO) 5.10.0 with or without Update 1 or 2
Problem 1
The Agent Handler (AH) status flips intermittently between Active and Inactive when viewed in the ePO console AH page. Agents randomly show a red status when sending events. Problem 2
The
The
The
System Change
Upgraded or installed ePO 5.10.0.
Cause
AH (Apache) threads that are responsible for updating a value within the SQL database, which is used to track handler activity, are busy processing computer properties.
Solution
This issue is cosmetic. The AHs in question continue to receive and process incoming connections from managed Agents. This issue is resolved in ePolicy Orchestrator 5.10.0 Update 3, which is available from the Product Downloads site. NOTE: You need a valid Grant Number for access. To view other known and resolved issues, see KB90382 - ePolicy Orchestrator 5.10.x Known Issues. WorkaroundWe investigated this issue and a Proof of Concept (POC) Build is currently available to resolve the issue. To obtain the POC Build, log on to the ServicePortal and create a Service Request. Include this article number in the Problem Description field.
Affected ProductsLanguages:This article is available in the following languages: |
|