
vShield Administration Guide
82 VMware, Inc.
Alarms
AlarmssignalthevCenterServeradministratoraboutvShieldEndpointeventsthatrequireattention.Alarms
areautomaticallycancelledincasethealarmstateisnolongerpresent.
vCenterServeralarmscanbedisplayedwithoutacustomvSphereplug‐in.SeethevCenterServer
AdministrationGuideoneventsandalarms.
Uponregisteringas
avCenterServerextension,thevShieldManagerdefinestherulesthatcreateandremove
alarms,basedoneventscomingfromthethreevShieldEndpointcomponents:SVM,vShieldEndpoint
module,andthinagent.Rulescanbecustomized.Forinstructionsonhowtocustomizerulesforalarms,see
thevCenterServerdocumentation.In
somecases,therearemultiplepossiblecausesforthealarm.Thetables
thatfollowlistthepossiblecausesandthecorrespondingactionsyoumightwanttotakeforremediation.
vShieldEndpointdefinesthreesetsofalarms:
“HostAlarms”onpage 82
“SVMAlarms”onpage 82
“VMAlarms”onpage 83
Host Alarms
HostalarmsaregeneratedbyeventsaffectingthehealthstatusofthevShieldEndpointmodule.
SVM Alarms
SVMalarmsaregeneratedbyeventsaffectingthehealthstatusofthevShieldEndpointmodule.
Table 14-1. Warnings (Marked Yellow)
Possible Cause Action
SVMisregistered,butvShieldEndpoint
moduledoesnotseeanyvirtualmachinesto
protect.Norequestsforprotectionarecoming
fromanyvirtualmachines.Novirtualmachines
arecurrentlyprotected.
Usuallyatransientstateoccurringwhileexistingvirtual
machinesarebeingmovedwithvMotion,orarejustcomingup.
Noactionrequired.
TheESXhosthasnovirtualmachinesyet,oronlyvirtual
machineswithnon‐supportedoperatingsystems.Noaction
required.
CheckthevShieldManagerconsoleforthestatusofthevirtual
machinesthatshouldbeprotectedonthathost.Ifoneormore
haveanerrorstatus,theEndpointthinagentsinthosemachines
maybemalfunctioning.
Table 14-2. Errors (Marked Red)
Possible Cause Action
TheSVMversionisnotcompatiblewiththe
vShieldEndpointmoduleversion.
Installcompatiblecomponents.LookinthevShieldEndpoint
InstallationGuideforcompatibleversionsforvShieldEndpoint
moduleandSVM.
Table 14-3. Red SVM Alarms
Problem Action
ThevShieldMonitorisnotreceivingstatusfrom
theSVM.
EithertherearenetworkissuesbetweenthevShieldMonitorandthe
SVM,ortheSVMisnotoperatingproperly.
TheSVMfailedtoinitialize ContactyoursecurityproviderforhelpwithSVMerrors.
Commenti su questo manuale