SIM 4.2 SP2/VPM 1.1.1 default vulnerability scan w2k3 causes system to freeze

[Sean Slattery]

Hi, I am starting to use VPN111 and have noticed that on three different 260/380 G3 w2k3 sp0 servers, whenever I attempt a default vulnerability scan, the system to freeze i.e. I can no longer login locally, by remote desktop, or even access the insight agents home page. A cold reset of the servers allows me to access everything again normally. Any ideas?

[Sean Slattery]

I have had to restart affected servers again following the power cycle in order to access the management agents including vca

[Jennifer_74]

Is the VPM server hanging or the scan targets?

How much memory do you have in your VPM server?

How much disk space do you have on your VPM server?

What other applications are running on the same server?

It sounds like you are running out of resources on your VPM server.

Can you clarify versions for me:
Are you running VPM 1.10 or 1.11?
Are you running W2K3 SP1? (not sure what W2k3 sp0 means)

[Sean Slattery]

The scan targets are hanging.

My SIM/VPM server is a DL360 G3, 2P Xeon 3.06Ghz, with over 20GB available disk space.

I do have two other applications running on this server: McAfee ePolicy Orchestrator 3.5.0 and McAfee Entercept Management Server 5.1.0.

According to PMP, resource availability on the SIM/VPM server is not an issue.

I am running VPM 1.1.1.

The server is Windows 2003 Standard will all updates except SP1 i.e SP0 (zero).

[Bernardo Tagariello]

Could it be, that one security system is sensing a security attack, and "blocks zero-day and known attacks" by locking that system down?

VPM is simply scanning the box for known vulnerabilities. The target, if it has yet another security system, may be sensing this, and defending itself by locking down.

Could this be happening?

tag