Skip to main content
NetApp Knowledge Base

Data Infrastructure Insights Workload Security data collector: External fpolicy server terminated

  1. Last updated
  2. Save as PDF
Views:
2,536
Visibility:
Public
Votes:
0
Category:
data-infrastructure-insights
Specialty:
ds_dii
Last Updated:

Applies to

  • Workload Security (Formerly Cloud Secure)
  • Data collector
  • Cloud Secure agent

Issue

  • The Workload Security data collector is in error state:

Connector is in error state. Service name: audit. Reason for failure: External fpolicy server terminated.

  • The EMS errors on ONTAP provided error:

No local lif present to connect to FPolicy server

Node failed to establish a connection with the FPolicy server "10.10.10.10" of policy "Cloud Secure" for Vserver VS1 (reason: "TCP Connection to FPolicy server failed.

  • FPOLICY-MLOG-TXT.GZ :

[ERROR] [prod] [63af5117-e179-4f3d-97e1-209c7579a7d6] [d95e7bc7-3db2-41eb-becd-8b64299e6552] [SVM_ID - d95e7bc7-3db2-41eb-becd-8b64299e6552] [4000231] [datasource-AuditManager] - Fpolicy configuration has a non-retriable error. Stopping the file screen worker and marking audit service as failure.

[ERROR] [prod] [63af5117-e179-4f3d-97e1-209c7579a7d6] [d95e7bc7-3db2-41eb-becd-8b64299e6552] [SVM_ID - d95e7bc7-3db2-41eb-becd-8b64299e6552] [4000231] [datasource-AppManager] - Service audit failed with reason: External fpolicy server terminated.

  • Network Check errors seen during the Test Connection :

Network Checks:
Fpolicy Server: Missing Permission: vserver fpolicy
Features (User does not have permissions):
Snapshot: Missing Permission: volume snapshot
Ems: Missing Permission: event catalog, event filter, event notification, event notification destination, security certificate
Access Denied: Missing Permission: vserver fpolicy
Persistent Store: Missing Permission: vserver fpolicy, job show
Protobuf: Missing Permission: vserver fpolicy
Ontap ARP: Missing Permission: security anti-ransomware volume, volume
User Blocking: Missing Permission: vserver export-policy rule, set, vserver cifs session, vserver services access-check authentication

  • Fpolicy.png

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.