Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

App Control: App Control Agent shows "Cannot connect to user agent"

App Control: App Control Agent shows "Cannot connect to user agent"

Environment

  • App Control Agent: All Supported Versions
  • Microsoft Windows: All Supported Versions

Symptoms

  • Agent not showing Connected in Assets > Computers.
  • Agent driver or kernel filter driver is not running
  • Attempting to use dascli commands returns error:
    Cannot connect to user agent.

Cause

This message is returned when the Agent service is not currently running. In some instances this could be due to another software program injecting itself into the Agent and not allowing the service to fully start.

Resolution

Typically this can be resolved with a reboot of the endpoint. However, if this does not work:
  1. Verify Agent Exclusions are in place for any other security product.
  2. Click Start > Run > services.msc > Ok and locate the service, Carbon Black App Control Agent.
  3. Verify the Startup Type is set to Automatic and verify the status is Running.

Additional Notes

  • By default the Agent service has the start type "auto" and the Agent driver has the start type "boot".
    sc config parity start= auto
    sc config paritydriver start= boot
  • The following administrative Windows commands can be used:
    Verify service status: sc query parity
    Verify driver status: sc query paritydriver
    Verify paritydriver is loaded: fltmc
    Verify paritydriver instances: fltmc instances
    

Related Content


Labels (1)
Was this article helpful? Yes No
0% helpful (0/1)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
2561
Contributors