Kaspersky Industrial CyberSecurity for Networks

An error occurs when enabling a monitoring point

March 22, 2024

ID 193180

Problem

After the monitoring point switches to the Enabled mode, the Error status is displayed. As a result, the node associated with this monitoring point is displayed in the Operation disrupted status. The list of notifications about application operating issues also shows a message regarding disrupted operation due to detected issues at the monitoring point.

Solution

The Error status of the monitoring point may be associated with an unsupported operational state of a network interface. For successful completion of a scan when a monitoring point is enabled, the network interface must have the UP operational state. If the network interface is in a different operational state (for example, UNKNOWN), the application assigns the Error status to the monitoring point because of possible problems when receiving or processing network packets.

You can use the ip link command to check the current operational state of a network interface on a node computer. Information about the current operational state is displayed in the string containing the name of the interface in the following format: state <state>. The most likely operational states on a problematic network interface are as follows:

  • DOWN. In this case, you can switch the interface to the UP operational state by using the following command:

    sudo ip link set <interface name> up

  • UNKNOWN. This operational state may be due to an incorrectly added interface. For example, network interfaces that were added by default on a VMware virtual machine may operate in the UNKNOWN state. In this case, it is recommended to re-add (create) a network interface with the correct settings by using the corresponding resources for managing network interfaces.

When the network interface switches to the UP operational state, check the status of the monitoring point added to this network interface. If the monitoring point is still displayed as having the Error status, disable and then re-enable this monitoring point.

Did you find this article helpful?
What can we do better?
Thank you for your feedback! You're helping us improve.
Thank you for your feedback! You're helping us improve.