Forum Discussion
Azure ATP sensor update and communication error
- Feb 03, 2020
Michele D'Angelantonio 2.107 will be deployed in the coming days.
So just so I understand it better - it's not always crashing, but from time to time it crashes, and when it does, it's with this error?
How many total failures since first installed?
I would advise to open a support ticket for this.
Since we haven't seen it before, we will need to collect more data to analyze.
Also, another thing you can try , is that if you currently work with the default winpcap driver, you can replace it with npcap and see if it resolves the issue.
See this for instructions:
you can follow it even of not using nic teaming.
Just make sure to use version
https://nmap.org/npcap/dist/npcap-0.9984.exeAs we currently have compatibility issues with the newer version which we haven't fixed yet.
Thank you..
However, you may try steps mentioned below:-
1. Stop and disable both the ATP sensor and updater services on DC
2. Update the NPCAP version to 0.9988(latest one) without uninstalling the existing version.
3. Reboot the server.
4. Start both the sensor services and changed the startup type to automatic.
Please update if you this resolves your issue.
- scuttbeaumontcoukFeb 01, 2021Copper Contributor
No. I think I figured out what the situation was. When I first downloaded the sensor, I then regenerated the access code. because it was not taking the original code (which was my fault as I did not copy the full string). I should have then downloaded a new sensor package which I did not do.
I therefore regenerated the access code and then downloaded the sensor. this has worked. I have tested this theory out on another server and it seems that you cannot regenerate the access code without then downloading a new sensor package. Anyway, I am good. everything is up and running thank you. Vishal_Sharma_4224
- Vishal_Sharma_4224Sep 17, 2020Microsoft
CyrilDBV Are you still facing the same issue? Sorry for the delay here.
- CyrilDBVJul 15, 2020Copper ContributorHi Vishal,
Same issue as Michele, ATP sensors were installed last year and working fine. Don't know since when but now they are down and impossible to start up (7031). updated NPCAP as described but in my cas it didn't helped.
If you have any other idea i'm taking it.
Thanks,
Cyril - Vishal_Sharma_4224Apr 29, 2020Microsoft
Yes, please install version 0.9984 in the first place..
Then try steps below in sequential manner:-
- Stop and disable both the ATP sensor and updater services on DC.
- Update the NPCAP version to 0.9988 without uninstalling the existing version(0.9984) it will do it own its own.
- Reboot the server
- Start both the sensor services and change the startup type to automatic.
- Michele D'AngelantonioApr 29, 2020Copper Contributorjust for confirmation: I have to install 0.9984 *instead of* 0.9988, right?
- Vishal_Sharma_4224Apr 29, 2020Microsoft
I 'd suggest you to install npcap version 0.9984 in the first place and then carry out those steps.
As npcap 0.9984 is the current supported version we have.
You can download version 0.9984 from here.
https://nmap.org/npcap/dist/npcap-0.9984.exePlease keep me posted on the progress.