Trend Micro DSM agentless VM clients status keeps changing

Posted on 2013-10-10
Medium Priority
Last Modified: 2014-01-28
I'm using TrendMicro DSM 9.0 as the antivirus solution for our VDI pilot.  We just upgraded the VMware infrastructure from ESX 5.0 to 5.1 U1, along w/ View, vShield Manager, vCenter.

For almost every VM I've upgraded the VMware tools on, I see their status in the DSM Manager as "Anti-Malware Engine Offline" sometimes, and other times most of them switch back to "Online".  For the VM's that have not been upgraded yet, they stay consistently as "Online".  

I've verified the View Agent has been upgraded properly.  I've verified the vShield system driver is running on the VM's.  I'm not sure where to go from here.

Let me know what other details I can provide!

Question by:RhoSysAdmin
  • 2

Accepted Solution

damejen earned 1500 total points
ID: 39721680
I've also had a similar issue with only one of the vm's in our cluster using Trend Micro DSM agent less. All other guests are fine.

I tried uninstalling and re installing the vm tools which worked for a limited time, though the issue is back.

Try re-installing vm tools and make sure you choose complete installation.

Expert Comment

ID: 39815478

If the issue returns or persists then I'd also try this which has permanently resolved my issue:

 Trend micro DSVA uninstall/install

Uninstalling/reinstalling the Filter Driver in Deep Security.


Do the following:

1. From the vCenter, Power-off the Deep Security Virtual Appliance (DSVA).

2. Right-click on the DSVA and delete if from the Disk. Set the ESX on Maintenance Mode.

3. Delete the EPSEC driver. From the vShield Manager console, select the ESX host. Go to Summary tab and uninstall vShield Endpoint

4. Log on to the DSM console and initiate Restore ESX. It will delete all drivers installed and put them in "Unprepared" state.

ESX will be restarted On the DSM console, right-click on VMware Center and initiate Synchronize. Initiate Prepare ESX afterwards

5. Deploy DSVA.
Note: Do not activate the DSVA yet after installation. You need to configure it first.

6.Change the Network Adapter settings to be in the same network as the DSM.

7.Log on to the DSVA console using the Username/Password: dsva.

8. Define the Hostname, IP address, and Timezone.

9. Restart the DSVA console.

10. Log on to the DSM console. Verify that DSVA is now appearing. Right-click on DSVA and then click Activate.

Featured Post

We Need Your Input!

WatchGuard is currently running a beta program for our new macOS Host Sensor for our Threat Detection and Response service. We're looking for more macOS users to help provide insight and feedback to help us make the product even better. Please sign up for our beta program today!

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Operating system developers such as Microsoft (https://www.microsoft.com) and Apple have made incredible strides in virus protection over the past decade. Operating systems come packaged with built in defensive tools such as virus protection and a f…
Ransomware - Defeated! Client opened the wrong email and was attacked by Ransomware. I was able to use file recovery utilities to find shadow copies of the encrypted files and make a complete recovery.
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…

587 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question