AMP Status Disconnected

[itguy1024]

Greetings!

I'm having issues with one server in particular where AMP is disconnected and states it can't connect to the internet.
In the SFC.exe.log file I can see these errors, assuming this is the problem. I have monitored the traffic leaving the server and I'm not seeing any blocks or denies.

ERROR: [AMPKIT-WIN][http_client.c@1051]: async request failed (Couldn't connect to server) to https://enrolment.amp.cisco.com/domains

ERROR: [AMPKIT-WIN][http_client.c@1011]: GET request https://enrolment.amp.cisco.com/domains failed (7): Couldn't connect to server (Failed to connect to enrolment.amp.cisco.com port 443: Timed out)

ERROR: [AMPKIT-WIN][http_client.c@1051]: async request failed (Couldn't connect to server) to https://mgmt.amp.cisco.com/health/

Version: 7.3.13.20165

[itguy1024]

Any thoughts?

[Troja007]

Hello @itguy1024,
just to figure out if there is a local defect with with policy file, you can do the following.

1. Download the policy.xml file from a policy
2. Stop the connector service and replace the file in the installation directory of the connector
3. Start the Secure Endpoint service

Greetings,
Thorsten

[itguy1024]

@Troja007thanks for the suggestions. I tried that but unfortunately it did not help.

[Chekol Retta]

Hi itguy1024

Have you found any solution for the issue. I am experiencing the same issue. 

Thanks 

[jmarcel2]

Only thing that helped us with this problem was to upgrade connectors to 7.5.1, all olders version still have problems. After upgrade to 7.5.1 we havent noticed any disconnected service on those machines, other servers with olders versions are still hit by disconnect problem

BR

Marcel

[mallaith]

Hi, 

Make sure AMP is not opened by another user on the same server. If there is more than one user session 

Stop AMP Service

End AMP process run by the other user.

Start AMP service again.

This worked with me on some Windows servers.

[Troja007]

Hello @itguy1024,
two things I just wanted to mention, as there is no info that the issue is solve.

• What is the output of the connectivity tool? any Errors shown there?
• There might be an issue if a specific RootCA is missing.

Greetings, Thorsten