Server cannot access Internet and not able to ping

|
  • 488
  • 4

Issue Description

Customer feedback server cannot access Internet and not able to ping by LAN PC after enable Agent.

Handling Process

1. Check micro segmentation policy, found that customer not enable.
2. Disable the Agent, then RDP to the server.
3. Check the latest agent log(Y:\Program Files\Sangfor\EDR\agent\var\log\agent), found that there is micro segment policy push from MGR:
269436064548d7ca95.png
4. Access MGR, go to Response and found that there is 1 server been Isolated 14574606454efb50a2.png

Root Cause

The server been Isolated, so the server connection will be block by Agent.

Solution

Restore the server from Isolated list.
6540360645517841ee.png

Suggestions

Can check with customer why the server been isolated, make sure the server not infected by ransomware else the virus might split across network.
Muhammad Bilal Lv4Posted 06 Jan 2022 16:35
  
Nice Issue Description
faizansami Lv2Posted 19 Jan 2022 13:27
  
Very nice article!
Faisal Lv8Posted 10 Apr 2022 23:19
  
Raza Islam Lv3Posted 22 Jul 2022 15:52
  
Thanks for sharing info.

I want to write a case
Doc ID: 4471
Author: KY
Updated: 2022-01-05 18:39
Version: