Rebooting Network Security Manager

[wohlebnt_HZA]

What are the implications when rebooting the Network Security Manager? Will sensors continue to process threats without interruption? I have not found this information in the documentation or google searchers and I urgently need this info for updating the java cacerts as any impact on IPS functionality requires an in-depth change process in my organization.

[fkazi04 · Accepted solution]

Hi @wohlebnt_HZA 

On restarting the manager services the connection to the Sensor i.e. alert/log channels will be disconnected. The sensor inspects the traffic and has no impact and the detection alerts will be stored in the buffer of the Sensor.

As the manager service is resumed the channel will be re-established automatically and the alerts stored on the Sensor buffer will be sent to the manager.

I understand you are updating Java certificates because of root certificate expiry. It is not mandatory to replace the certificate unless you come across any issue with signature set download in the manager i.e. automatic signature download or you are using Version 10 of the NSM and have registration issue.

I hope this answer your question.