Home > Storage > PowerScale (Isilon) > Product Documentation > Storage (general) > Dell PowerScale: Common AntiVirus Agent Solution > All CAVA Servers Offline
This situation often means that the cluster cannot contact any CEE server at all. This could be due to a firewall blocking the TCP connection on port 12228 or it could be that the CAVA service is not running.
CAVA listens on TCP port 12228 for incoming requests from clients. Use the following methods to check the connectivity.
From a cluster node that has an IP address in the network pool assigned previously, run the following telnet command to try to connect to the CAVA server:
telnet <CAVA_IP> 12228
Enter any character such as the ‘.’ (period) and press enter. If there is no response, the port may be blocked by a firewall, or the CAVA service may not be running.
A listening CAVA server should respond in a manner similar to the following:
If telnet is not available and Python is available, the following short script can also test for an open port:
python -c "x='<CAVA_IP>'; from socket import *; import sys; s=socket(AF_INET,SOCK_STREAM); s.settimeout(2); s.connect((x,12228)); sys.stdout.write('CAVA port is open\n')"
An open port will print “CAVA port is open”:
A closed port will return a socket.timeout error:
If port 12228 is unreachable, check firewall settings in the network between the cluster and the CAVA server. Use the traceroute command to see all the hops in the network path to the CAVA server.
In this case, the cluster can contact a CEE server and can receive the CEE and DTD versions from the CAVA server.
This validates that PowerScale can send heartbeat messages to CAVA and get responses back. This means that there are no firewall ports in the path and that the CAVA service is at least installed and responding to port 12228.
There are several issues that could be potential issues in this situation.
Double check that the service is using a user account and that the password is correct.
On the Windows server, verify that the user is in the local administrator group. On a Domain Controller, the user normally needs to be in the Domain Administrators group.
You can detect this case by looking into the Event viewer and seeing an entry similar to the following:
CAVA service user account does not have the proper permissions on the PowerScale cluster
Use the following CLI command to verify that the Service user account is in the AvVendor role:
# isi auth roles members list AvVendor –zone=AvVendor