cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1546
Views
5
Helpful
1
Replies

what if SMA goes down

engahmedsaied
Level 1
Level 1

Hello all,

 

I would like to know if SMA goes down or connection from ESAs to SMA goes down

 

What will happen to reports, logs, quarantine…?

 

Logs can be stored locally automatically if SMA goes down?! Current status of local logs is disabled 

 

Can we have centralized log enabled and local logs enabled but logs and quarantine goes to local if SMA is down?! But in normal behavior goes to SMA?

 

 

Thanks.

 

1 Reply 1

dmccabej
Cisco Employee
Cisco Employee

Hello,

 

What logs are you referring to? Can you elaborate?

 

If the ESA is unable to connect over to the SMA then items will start to queue up on the ESA until it's able to successfully connect back over.

 

1) Quarantine(s) - Items will stay and will continue to queue up in the delivery queue on the ESA. These items are held indefinitely until the connection is re-established. 

2) Tracking - ESA will hold roughly up to 3 hours of tracking information by default.

3) Reporting - ESA will hold roughly up to 24 hours of reporting information by default.

 

The tracking and reporting times are rough estimates based on the default settings, but can also be modified if need be. 

 

Thanks!

-Dennis M.