dealing with full root partition and trying to override the IPS policy
getting a message 'Unable to communicate with the SDCSS Util Daemon'
need assistance troubleshooting, have not encountered this error before
Solved! Go to Solution.
Second most likely will not do it...
On my 3.1.2 appliance I have such outcomes for this command
ps -ef|grep sdc
root 24167 1 1 Feb17 ? 00:22:57 /opt/Symantec/sdcssagent/IDS/bin/sisidsdaemon
sisips 24251 1 0 Feb17 ? 00:00:19 /opt/Symantec/sdcssagent/IPS/bin/sisipsdaemon
sisips 24259 1 0 Feb17 ? 00:00:00 /opt/Symantec/sdcssagent/IPS/bin/sisipsutildaemon
mine looks the same
maintenance-!> ps -ef|grep sdc
root 5473 1 42 09:26 ? 00:06:40 /opt/Symantec/sdcssagent/IDS/bin/sisidsdaemon
sisips 5598 1 0 09:26 ? 00:00:00 /opt/Symantec/sdcssagent/IPS/bin/sisipsdaemon
sisips 5603 1 0 09:26 ? 00:00:00 /opt/Symantec/sdcssagent/IPS/bin/sisipsutildaemon
mainten+ 36457 35951 0 09:42 pts/0 00:00:00 grep sdc
Symantec Data Center Security Server Policy Override
Unable to communicate with the SDCSS Util Daemon.
Ok try the below steps.
ps -ef | grep -i sdcs
In a environment where it is ok you should get these services running:
on the appliance with the issue, the highlighted one above had stopped running.
to get it running, return to the CLISH and in Support run the following:
Service Restart sisipsutildaemon
you should get this output: - [Info] Restarted sisipsutildaemon service.
now all you need to do is run /opt/Symantec/sdcssagent/IPS/sisipsoverride.sh and the rest is BAU