Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

  • Malware Protection
  • FIM
  • IDS
  • Filebeat (for Linux)
  • Winlogbeat (for Windows)
  • Vulnerability Scanning

...

Excerpt Include
ESLP:Protection dashboard (snippet)
ESLP:Protection dashboard (snippet)
nopaneltrue

...

Note

To learn how to send a support ticket, see Support Tickets.

...

Excerpt Include
ESLP:Troubleshoot logging score (snippet)
ESLP:Troubleshoot logging score (snippet)
nopaneltrue

...

Excerpt Include
ESLP:Troubleshoot Malware Protection scores (snippet)
ESLP:Troubleshoot Malware Protection scores (snippet)
nopaneltrue

...

Excerpt Include
ESLP:Troubleshoot FIM score (snippet)
ESLP:Troubleshoot FIM score (snippet)
nopaneltrue

...

Intrusion Detection System (IDS)

Issue:   IDS has not provided a heartbeat in the past 4 hours

Expand
titleStep 1: Verify the status of the agent

DescriptionCommand
WindowsVerify that the service is running
gsv -displayname *trend*
LinuxVerify that the service is running
ps_axu | grep ds_agent

...

Expand
titleStep 3: Manually heartbeat the agent
Windows
Code Block
PS C:\Users\Administrator> & "C:\Program Files\Trend Micro\Deep Security Agent\dsa_control.cmd" -m
HTTP Status: 200 - OK
Response:
Manager contact has been scheduled to occur in the next few seconds.
Linux
Code Block
/opt/ds_agent/dsa_control -m


...

Vulnerability Scanning

Issue: If IR Agent is not installed

...

Expand
titleStep 2: Check connectivity of the agent
PortDestination
443/tcp (IR Agent)
Note

* The agent will perform a lookup to the applicable DNS entry, which may resolve to one of multiple Amazon Web Services based subnets. As a result, if your firewall does not support outbound filtering by domain name, then you may need to open all outbound traffic to 443/tcp to accommodate this service.


...

Anchor
Export Protection screen data
Export Protection screen data
Export Protection screen data

Excerpt Include
ESLP:Export Protection screen (snippet)
ESLP:Export Protection screen (snippet)
nopaneltrue

...