For details on cookie usage on our site, read our Privacy Policy
Traps, Verdict Changed - No connection to Any
- LIVEcommunity
- Discussions
- Cloud Delivered Security Services
- Endpoint (Traps) Discussions
- Re: Traps, Verdict Changed - No connection to Any
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
- Mark as New
- Subscribe to RSS Feed
- Permalink
01-09-2018 11:19 PM - edited 01-10-2018 02:51 AM
Hi!
From time to time I see that I cannont contact or download WildFire reports due to connection issues.
In addition I get a lot of these logs: Verdict Changed - No connection to Any
As far as I have been able to figure out this is a log that describes that connection with WildFire has been down.
Is this correct?
And if so, how can I remedy this issue?
I would also like to set up some polling in order to monitor the link to wildfire.
Any suggestions?
Thx
The log in question:
Log Event: Verdict Changed - No connection to Any
Description: Hash Verdict has Changed from No connection
Hash: 7652170841ad03c3f488e15733a02abaf4dd586360e2baeec5bdfe5cb2b1dfad
Previous Verdict: No Connection
New Verdict: Unknown
Accepted Solutions
- Mark as New
- Subscribe to RSS Feed
- Permalink
01-17-2018 05:49 AM
Hi @trondk,
This is basically telling you that the connection has been restored to WildFire. Its a pure connection issue with either ESM to WildFire or Agent to ESM Server.
You need to check your internet connection from ESM Server to WildFire or your internal connectivity between the agent and ESM Server using.
As per my knowledge there is no feature on Traps that can monitor the connection status but you can have 3rd party tool to help you.
Sharief
- Mark as New
- Subscribe to RSS Feed
- Permalink
01-17-2018 05:49 AM
Hi @trondk,
This is basically telling you that the connection has been restored to WildFire. Its a pure connection issue with either ESM to WildFire or Agent to ESM Server.
You need to check your internet connection from ESM Server to WildFire or your internal connectivity between the agent and ESM Server using.
As per my knowledge there is no feature on Traps that can monitor the connection status but you can have 3rd party tool to help you.
Sharief
- Mark as New
- Subscribe to RSS Feed
- Permalink
01-17-2018 10:17 AM
Thank you very much for your input!
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
