Category published:  Mcafee/Trellix TIE/ATD/ATP | Sandbox - Advanced Threat Protection   Click on the Category button to get more articles regarding that product.

Trellix/MCAFEE ATD: Sandbox stays at STATUS BAD

Posted by admin on 27.09.2020


Trellix/MCAFEE ATD: Sandbox stays at STATUS BAD

We just had a case where an MCAFEE ATD-3000 Sandbox was staying at the Status BAD.

A person hat submitted a file to analyse with XVIEW (Look into the Sandbox) and did shutdown the VM after that analyse.

NO > Rebuild of the VM’s did not solve

NO > Reboot of the Sandbox did not solve

Logon to Sandbox with SSH and PORT 2222 not 22 (Logon with cliadmin)

CLI: reboot active

Logon to Sandbox with SSH and PORT 2222 not 22 (Logon with cliadmin)

CLI: removeSampleInWaiting

After this the FILE in the queue which may generated the error did disappear and the status went back to “GOOD”

Found in Doku file: ATD_3.6.2_Product_Guide_revA.pdf


 Category published:  Mcafee/Trellix TIE/ATD/ATP | Sandbox - Advanced Threat Protection   Click on the Category button to get more articles regarding that product.