Varonis FPolicy disconnecting repeatedly due to Varonis engine not listening properly to it's configured port
Applies to
ONTAP 9
Issue
- Frequent EMS/Event log entry sequence:
Mon Jan 04 12:09:45 EST [example: fpolicy: fpolicy.server.connectError:error]: Node failed to establish a connection with the FPolicy server '10.1.1.101' (reason: 'Connection to FPolicy server is broken(EPIPE) received.').
Mon Jan 04 12:09:45 EST [example: fpolicy: fpolicy.server.disconnect:warning]: Connection to the Fpolicy server '10.1.1.101' is broken ( reason: 'FPolicy server is removed from external engine.' ).
Mon Jan 04 13:06:11 EST [example: fpolicy: fpolicy.server.disconnect:warning]: Connection to the Fpolicy server '10.1.1.101' is broken ( reason: 'FPolicy server is removed from external engine.' ).
Mon Jan 04 13:06:36 EST [example: fpolicy: fpolicy.server.connectError:error]: Node failed to establish a connection with the FPolicy server '10.1.1.101' (reason: 'Select Timed out.').
- Packet traces between Fpolicy server and SVM confirm: Fpolicy server is abruptly terminating TCP connections.
- Varonis is listening on port 2002 on the FPolicy server
C:\> netstat -an Active Connections Proto Local Address Foreign Address State TCP 0.0.0.0:135 0.0.0.0:0 LISTENING TCP 0.0.0.0:445 0.0.0.0:0 LISTENING TCP 0.0.0.0:2002 0.0.0.0:0 LISTENING