Offload Scan Server assignment fails for a MOVE Multi-Platform client with an IP assignment rule
Technical Articles ID:
KB87391
Last Modified: 10/22/2021
Environment
McAfee Management for Optimized Virtual Environments (MOVE)
McAfee MOVE AntiVirus (AV) Multi-Platform 4.x
McAfee MOVE AV Multi-Platform Offload Scan Server (OSS)
McAfee MOVE AV Multi-Platform Security Virtual Manager (SVM) 4.x
Problem
When you run the command mvadm.exe status at a command prompt on a MOVE AV Multi-Platform client, the SVA/SVM status shows as Connecting and the Protection status shows as Disabled.
Mvagent.log (client) records the following:
DETAIL: curl.c : 378: URL = https://<SVA Manager IP>:8080/commands/ASSIGN_OSS
Message = protocolVersion=1&cmdData={"supportedOssProductVersion":"3.6.1-195","productVersion":"3.6.1-195",
"agentGuid":"{xxxxxx-xxxx-xxxx-xxxx-xxxxxxxx}","osType":"Microsoft Datacenter Edition (build 9200), 64-bit, 8 processor(s)",
"hostName":"<Client hostname>","networkAddresses":[{"ip":"xxx.xxx.xxx.xxx","mask":"xxx.xxx.xxx.x"}],
"prevOssIp":"xxx.xxx.xxx.xxx","ossCurrentState": "INACTIVE","lookupReason":"OSS_REJECT"}
U.13296.9732 ERROR: svc_curl.c : 202: Got 500 HTTP response from broker try again after 5 sec.
But, the OSS is successfully able to register itself with the SVA Manager:
2.2 OSS Details
[/usr/lib/jvm/java-7-openjdk-amd64/jre/bin/java -cp /opt/McAfee/movesvamanager/move-svamanager.jar
com.mcafee.move.broker.jmx.JmxClient ossdetails]
Details of registered offload scan servers:
-----------------------------------------------------
Number of offload scan servers = 1
-----------------------------------------------------
OssDetails [ossGuid=xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx, info=OssInfo:(Updated at OSS registration with SVA Manager)
[productVersion=3.6.1-317, agentGuid={xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxx}, osType=Microsoft Datacenter Edition (build 9200),
64-bit, 4 processor(s), hostName=<OSS hostname>, networkAddresses=[ConnectionVo [ip=xxx.xxx.xxx.xxx, mask=xxx.xxx.xxx.x]],
port=9053, lastDisconnectReason=UNKNOWN, maxNumberOfClients=250, ConnectingIp=<Client IP>],
load=OssLoad:(Updated periodically) [numberOfClients=251, cpuUsage=-1, ramUsage=-1, maxNumberOfClients=250],
FastHeartBeatTime=YYYY-MM-DD hh:mm:ss,SSS]
-----------------------------------------------------
The SVAManager log (server) records the following:
|
INFO
|
AssignOssHandler
|
- received OSS_ASSIGN command from client ip : <Client IP> |
|
DEBUG
|
AssignOssHandler
|
- command data for OSS_ASSIGN = {"supportedOssProductVersion":"3.6.1-195","productVersion":
"3.6.1-195","agentGuid":"{xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxx}","osType":
"Microsoft Datacenter Edition (build 9200), 64-bit, 8 processor(s)","hostName":"<Client hostname>",
"networkAddresses":[{"ip":"<ClientP>","mask":"xxx.xxx.xxx.xxx"}],"prevOssIp":"xxx.xxx.xxx.xxx",
"ossCurrentState":"ACTIVE","lookupReason":"OSS_REJECT"} |
|
DEBUG
|
ClientAssignmentEngineImpl
|
- Searching for a suitable OSS for client : [connectingIp=<Client IP>, clientInfoVo=ClientInfoVo
[supportedOssProductVersion=3.6.1-195, productVersion=3.6.1-195,
agentGuid={xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxx}, osType=Microsoft Datacenter Edition (build 9200),
64-bit, 8 processor(s), hostName=<Client hostname>, networkAddresses=[ConnectionVo [ip=<Client IP>,
mask=xxx.xxx.xxx.x]], prevOssIp=<Prev. OSS IP>7, lookupReason=OSS_REJECT] |
| DEBUG |
TagFilter |
- no Tag rules found to perform filtering in Tag mapping filter |
|
DEBUG
|
TagFilter
|
- Requesting tag fetch for agentguid {xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxx} |
|
DEBUG
|
TagFilter
|
- Returning empty oss list as filter is configured not to allow OSS assignment if endpoint doesn't have any tags defined above in 'Client Tags'] |
|
INFO
|
ClientAssignmentEngineImpl
|
- No OSS found for client : <Client IP> for filter : tagMappingFilter |
| DEBUG |
ClientAssignmentEngineImpl |
- No suitable OSS found for client : <Client IP> returning null |
| WARN |
AssignOssHandler |
- Unable to assign OSS for client: ClientInfoVo [supportedOssProductVersion=3.6.1-195,
productVersion=3.6.1-195, agentGuid={xxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxx},
osType=Microsoft Datacenter Edition (build 9200), 64-bit, 8 processor(s),
hostname=host_name, networkAddresses=[ConnectionVo [ip=<Client IP>,
mask=xxx.xxx.xxx.x]], prevOssIp=<Prev. OSS IP>, lookupReason=OSS_REJECT] |
Cause
The Mvagent.log error Got 500 HTTP response from broker try again after 5 sec is recorded on the client when the SVM manager is not able to register SVM for one of the following reasons:
- No SVM is registered in ePolicy Orchestrator to connect to the client.
- A Tag/IP assignment rule that is not applicable to the client. And, the Assign SVM if no rule is defined for the above client checkbox is not selected.
Solution
Make sure that the SVM is present and is in a running state. Then enable the option Assign SVM if no rule is defined for the above client under Tag Assignment Rules.
For more information, see the MOVE Multi-Platform Product Guide.
|
