Submit a ticketCall us

Don’t fall victim to a ransomware attack
Backups are helpful, but sometimes that’s not enough to protect your business against ransomware. At our live webcast we will discuss how to protect against ransomware attacks with SolarWinds® Patch Manager and how to leverage log data to detect ransomware. Register now for our live webcast.

Home > Success Center > Log & Event Manager (LEM) > Cisco IPS SDEE internal warning: Connection refused

Cisco IPS SDEE internal warning: Connection refused

Updated June 14, 2017

Overview

The following error is displayed when using the Cisco IPS 5+ (SDEE) connector.

Event Name: InternalWarning
EventInfo: Connection timeout InsertionIP: swi-lem Manager: swi-lem DetectionIP:
10.12.2.1 InsertionTime: 14:30:53 Mon Nov 23 2087 DetectionTime: 23:40:53 Tue Nov 23
2087 Severity: 2 ToolAlias: SdeeReader:Device_001 InferenceRule: ProviderSID: FastCenter
normal error ExtraneousInfo: Component: FastCenter:SdeeReader:Device_001 Description:
Connection timeout Detail: java.net.ConnectException: Connection refused StackTrace: 6A 61
76 61 2E 6E 65 74 2E 43 6F 6E 6E 65 63 74 45 78 63 65 70 74 69 6F 6E 3A 20 43 6F 6E 6E 65 63
74 69 6F 6E 20 72 65 66 75 73 65 64 0A 09 61 74 20 6A 61 76 61 2E 6E 65 74 2E 50 6C 61 69 6E
53 6F 63 6B 65 74 49 6D 70 6C 2E 73 6F 63 6B 65 74 43 6F 6E 6E 65 63 74 28 4E 61 74 69 76 65
20 4D 65 74 68 6F 64 29 0A 09 61 74 20 6A 61 76 61 2E 6E 65 74 2E 41 62 73 74 72 61 63 74 50
6C 61 69 6E 53 6F 63 6B 65 74 49 6D 70 6C 2E 64 6F 43 6F 6E 6E 65 63 74 28 55 6E 6B 6E 6F
77 6E 20 53 6F 75 72 63 65 29 0A 09 61 74 2

Environment

LEM 6.3.1 and earlier

Cause 

The connector is unable to communicate with the CISCO IPS 5+ configured. 

Resolution

Review the configuration of the connector and verify the following:

  • There is no firewall or proxy that is blocking the connectivity.
  • Cisco IPS 5+ is not configured to block the connection.

 

Last modified
01:25, 14 Jun 2017

Tags

Classifications

Public