Mohammed, your event channel between EC and FM is down an cannot be reestablished by the sensor controller. There are many possible reasons for that but to begin with I would recommend to reboot EC and FM module. Make sure all services are coming up correctly. There is no easy way of resetting the RSA type connections between modules in this scenario. If the connection does not recover after that, you can specify CSF trace options for the sensor for debugging. BTW: if the date stamp is correct in your error message, you may want to fix that first ;-)
Karl Mohammed Atari schrieb: > Dear there, > > > > I get the following error and my Security Fusion will stay offline, any > help please: > > > > Event Type: Error > > Event Source: ISS > > Event Category: EventCollector > > Event ID: 1 > > Date: 24/12/2003 > > Time: 13:22:06 > > User: N/A > > Computer: server1 > > Description: > > (EventCollector_ server1) - Error trying to connect to > SecurityFusionModule@ W.X.Y.Z event source: WSAECONNREFUSED - Connection > refused. > > No connection could be made because the target machine actively refused > it. > > This usually results from trying to connect to a service that is > inactive on > > the foreign host - there is no server application running. [ID=10061] > > > > > > Regards, > > > > Mohammed Atari > > Security Operations Center (SOC) > > Riyad Bank Data Center > > P.O. Box: 13671 > > Riyadh - 11414 > > Tel. +9661-4722750 Ext. 161 > > Fax. +9661-4722750 Fax. 181 > > > > My Bank.... Riyad Bank > > > > > > ************************************************************************************************* > > This email and any files transmitted with it are > confidential and intended solely for the use of the > individual or entity to whom they are addressed. > Please note that any views or opinions presented in this > email are solely those of the author and do not > necessarily represent those of Riyad Bank. > Finally, the recipient should check this email and any > attachments for the presence of any viruses. > Riyad Bank accepts no liability for any damage caused > by any virus / error transmitted by this email. > ************************************************************************************************* > > _______________________________________________ > ISSForum mailing list > [email protected] > > TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to > https://atla-mm1.iss.net/mailman/listinfo/issforum > > To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] > > The ISSForum mailing list is hosted and managed by Internet Security Systems, > 6303 Barfield Road, Atlanta, Georgia, USA 30328. > -- 10 Jahre IT-Security mit BDG - Nutzen Sie unsere langjährige Erfahrung und treffen Sie den Markt bei uns! - Am 28. September 2005 findet das BDG-Sicherheitsforum in Köln statt. Informieren Sie sich unter: http://www.bdg.de/sicherheitsforum.html Treffen Sie am 19. jeden Monats IT-Sicherheits-Experten beim BDG-Security-Point! Informieren Sie sich hier: http://www.bdg.de/security-point ______________________________________________________ BDG GmbH & Co. KG - Make IT safe. Stolberger Str. 307 D-50933 Koeln Tel: +49 (0)221-954231-0 direkt: +49 (0)6126-94433-21 Fax: +49 (0)6126-94433-31 E-Mail: [EMAIL PROTECTED] Web: www.bdg.de ______________________________________________________ _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
