VMware Cloud Community
trailx
Enthusiast
Enthusiast

vShield Data security: Scan in progress but nothing

Hi,

Why :smileycry:

I tried to make a scan with data security but it seems impossible.

ESXi 5.1, vCenter 5.1, vSM 5.1, Data Security 5.1 are on the same network. (ping ok, nslookup ok)

Everything is green in Endpoint Status. (ESXi->vShield-> Endpoint->Endpoint status). I have 2 SVM, one based on VMware and another based on TrendMicro

endpoint.png

When I launch a scan, I have Scan in progress and nothing else (no events in VM or ESXi, no CPU activity on appliance data security).

I created a rule with specific pattern detection (Regulations and standards to detect) and my VM to scan has vmware tools with endpoint driver and is power on

If i create a new rule (participating areas) based on resource pool, the number of VM is detected but still nothing, Current Scan Status = In progress and no

activity, no events

data_security.png

In scan status all VM are in Scan not Started

Any help would be very appreciate Smiley Wink

Ce message a été modifié par : trailx

--- If you found this information useful, please consider awarding points for "Correct" or "Helpful". Thanks!
3 Replies
trailx
Enthusiast
Enthusiast

I think, I missed something. I installed a new infrastructure with only one network for ESXi, vCenter, vCD, VCNS without Trendmicro.

Still the same problem, everything is green, scan started but never stopped even if there was only 2 or 3 VM with Endpoint.

Endpoint was install on each host of my cluster...

--- If you found this information useful, please consider awarding points for "Correct" or "Helpful". Thanks!
0 Kudos
chunchitng
Enthusiast
Enthusiast

Hi. Did you manage to fix the problem? I am configuring the data security on NSX6.2.1 (vSphere 6.0), I have exactly the same problem as you.

0 Kudos
vRon
Contributor
Contributor

I'd assume, missing time synchronization between ESXi and NSX-Manager is the root-cause.

Had that once, fixed it correcting correct ntp-time-source to nsx-manager and all esxi-hosts.

0 Kudos