5.1

SSL VPN does Not Work
Procedure
1 Ensure that SSL VPN and Load Balancer are not configured on the same host.
2 Verify that the SSL VPN service is enabled.
3 Verify that the server settings have been specified to enable SSL on a vShield Edge interface.
4 Ensure that the external authentication server is reachable.
Troubleshoot vShield Endpoint Issues
This section provides details on how to troubleshoot vShield Endpoint operational issues.
Thin Agent Logging
vShield Endpoint thin agent logging is done inside the protected virtual machines. Two registry values are
read at boot time from the windows registry. They are polled again periodically.
The two registry values, log_dest and log_level are located in the following registry locations:
n
HKLM\System\CurrentControlSet\Services\vsepflt\Parameters\log_dest
n
HKLM\System\CurrentControlSet\Services\vsepflt\Parameters\log_level
Both are DWORD bit masks that can be any combination of the following values:
Table 16-1. Thin Agent Logging
DWORD Value Description
log_dest 0x1
0x2
WINDBLOG
Requires debug mode
VMWARE_LOG
Log file is stored in the root
directory of the virtual
machine
log_level 0x1
0x2
0x4
0x8
0x10
AUDIT
ERROR
WARN
INFO
DEBUG
By default, the values in release builds are set to VMWARE_LOG and AUDIT. You can Or the values together.
For more on monitoring vShield Endpoint health, see Chapter 14, “vShield Endpoint Events and Alarms,” on
page 173.
Component Version Compatibility
The SVM version and the thin agent version must be compatible.
To retrieve version numbers for the various components, do the following:
n
SVM: For partner SVMs, refer to the instructions from the from the anti-virus solution provider. For the
vShield Data Security virtual machine, log in to the vShield Manager and select the virtual machine from
the inventory. The Summary tab displays the build number.
n
GVM: Right-click on the properties of the driver files to get the build number. The path to the driver is
C:\WINDOWS\system32\drivers\vsepflt.sys.
Chapter 16 Troubleshooting
VMware, Inc. 225