Compliance scan fails

I have SCVMM 2012 R2 running on Windows Server 2012 R2; the host servers are 2012 R2 as well. I have established a baseline and done compliance scans without issue in the past. However, I have now added additional items into the baseline and
now, after a long timeout period, get the following when I try to do a compliance scan on any host.
Error (2931)
VMM is unable to complete the request. The connection to the VMM agent on the virtualization server (host.domain.com) was lost.
Unknown error (0x80338029)
Recommended Action
Ensure that the Windows Remote Management (WS-Management) service and the VMM agent are installed and running and that a firewall is not blocking HTTPS traffic.
This can also happen due to DNS issues. Try and see if the server (host.domain.com) is reachable over the network and can be looked up in DNS. You can ping the virtualization server from VMM management server and make sure that the IP address returned
matches the IP address locally obtained from the virtualization server.
If the error still persists, restart the virtualization server, and then try the operation again.
The firewall is disabled on the SCVMM server and the host servers. I have verified there are no DNS issues and that WS-Management is running. I have rebooted all servers. I have even removed the baseline and created an entirely
new baseline, but always get the same error. Anyone seen this issue?

Hi Kristian,
Yes, UR1 and the SQL script have both been applied.
Yes, Hyper-V Management Server Service has been restarted (indeed the host itself has been restarted), to no avail. Other hosts in the same cluster work OK..
When I enable and run tracing, this is the last message when it fails
[2]1284.28C4::?2014?-?04?-?13 15:03:11.414 [Microsoft-VirtualMachineManager-Debug]4,4,WsmanAPIWrapper.cs,3426,Exception [System.Runtime.InteropServices.COMException (0x80338029): The WS-Management service cannot complete the operation within the time specified
in OperationTimeout. at WSManAutomation.IWSManSession.Invoke(String actionUri, Object resourceUri, String parameters, Int32 flags) at Microsoft.Carmine.WSManWrappers.MyIWSManSession.Invoke(String
actionUri, Object resourceUri, String parameters, Int32 flags) at Microsoft.Carmine.WSManWrappers.WsmanAPIWrapper.Invoke(String actionUri, WSManUri targetUri, Hashtable parameters, Type returnType, Boolean isCarmineMethod, Boolean forceResponseCast)]
while retrieving underlying WMI error to throw. Got string "<f:WSManFault xmlns:f="http://schemas.microsoft.com/wbem/wsman/1/wsmanfault" Code="2150858793" Machine="myserver-01.mydomain.com"><f:Message>The
WS-Management service cannot complete the operation within the time specified in OperationTimeout. </f:Message></f:WSManFault>",{00000000-0000-0000-0000-000000000000}
I've checked WS-MAN config and comms on and between VMM and the Host and all seems to be OK.
Many thanks,
Dave

Similar Messages

PCI compliance scans failed with Sophos UTM

From one of my training guides

We have a Sophos UTM and use some RED devices at a few remote offices. We have just completed our quarterly PCI compliance scans and we are failing now due to port 3400 accepting SSL RC4 Cipher Suites. I've opened a ticket with Sophos' support to see if they could provide documentation that this is a false positive or provide some other solution. Their response thus far has been advising us to make a feature request @ feature.astaro.org. Obviously not the response we are looking for.My question is has anyone run into something like this before? How did you address the issue?My only thought at this point is to replace the RED devices at the remote offices and utilize another type of vpn. This is not the most desirable option as it means flying someone out to the remote offices and a network restructure. If anyone has some better...
This topic first appeared in the Spiceworks Community

Failing PCI Compliance Scan - SSL Weak...

Hello,
I currently use the WRVS4400n v2 (latest update) for my small business. I store and transmit data that contains credit card information and need to be PCI compliant. Regardless of which settings I change on the router, like turning off remote management, I keep failing the scan. ControlScan uses Nessus and the results are below (2 vulnerabilities).
I did some research and spent some time with Cisco Sales Chat and they recommended a ASA5500 only to realize that it too had the same vulnerabilities. I did more research and it seemed that the SA520w (I need wireless) would do it but I found a thread on this forum saying that a client who had the SA520w did not pass the scan failed due to SSL vulerability (need v3+ ?). The thread is at https://supportforums.cisco.com/thread./2060512
Question: What router/appliance should I use to be PCI compliant? Three has to be something, we're talking, this is Cisco.
Thank you in advance for your help,
Christophe
Threat ID: 126928
Details:
IP Address: XX.XXX.X.XXX
Host: XX.XXX.X.XXX
Path:
THREAT REFERENCE
Summary:
SSL Weak Cipher Suites Supported
Risk: High (3)
Type: Nessus
Port: 60443
Protocol: TCP
Threat ID: 126928
Information From Target:
Here is the list of weak SSL ciphers supported by the remote server :
Low Strength Ciphers (< 56-bit key)
SSLv2
EXP-RC2-CBC-MD5            Kx=RSA(512)   Au=RSA     Enc=RC2(40)      Mac=MD5    export
EXP-RC4-MD5                Kx=RSA(512)   Au=RSA     Enc=RC4(40)      Mac=MD5    export
The fields above are :
{OpenSSL ciphername}
Kx={key exchange}
Au={authentication}
Enc={symmetric encryption method}
Mac={message authentication code}
{export flag}
Solution:
Reconfigure the affected application if possible to avoid use of weak
ciphers.Details:
The remote host supports the use of SSL ciphers that offer either weak encryption or no encryption at all.
Threat ID: 142873
Details:
IP Address: XX.XXX.X.XXX
Host: XX.XXX.X.XXX
Path:
THREAT REFERENCE
Summary:
SSL Medium Strength Cipher Suites Supported
Risk: High (3)
Type: Nessus
Port: 60443
Protocol: TCP
Threat ID: 142873
Information From Target:
Here are the medium strength SSL ciphers supported by the remote server :
Medium Strength Ciphers (>= 56-bit and < 112-bit key)
SSLv2
DES-CBC-MD5                Kx=RSA        Au=RSA     Enc=DES(56)      Mac=MD5
SSLv3
DES-CBC-SHA                Kx=RSA        Au=RSA     Enc=DES(56)      Mac=SHA1
TLSv1
DES-CBC-SHA                Kx=RSA        Au=RSA     Enc=DES(56)      Mac=SHA1
The fields above are :
{OpenSSL ciphername}
Kx={key exchange}
Au={authentication}
Enc={symmetric encryption method}
Mac={message authentication code}
{export flag}
Solution:
Reconfigure the affected application if possible to avoid use of
medium strength ciphers.Details:
The remote host supports the use of SSL ciphers that offer medium strength encryption, which we currently regard as those with key lengths at least 56 bits and less than 112 bits.

Chris,
As i understand right now none of the Small Business router are PCI compliance ever since PCI 3.0 was released. How you overcome this; you'll need to forward any ports you are failing on to a ghost IP.. Ghost ip (any ip address that isn 't being used) If you are using those ports , then you will lose that service as the router isn't PCI 3.0 compliant.
Jason
I do believe the ASA5505 are PCI 3.0 Compliant.

PCI scan fails, claiming MS10-070 vulnerability

We have a site running on Azure Websites that's failing a PCI compliance scan by Trustwave because they claim that the server does not have the patches applied for the MS10-070 padding oracle vulnerability.
Their "evidence" for this is that the resource tokens (query string d values) from webresource.axd and scriptresource.axd calls, when decoded from base64 back to binary, have a block size of 8 bytes (number of bytes in the token is always divisible
by 8). Apparently on patched systems the tokens are supposed to end up with something other than an 8-byte block size though I can't find the evidence for claiming this.
I understand the vulnerability had nothing to do with the length of the tokens but existed because the server would throw an exception and return an error code when fed bad padding data. They are not testing to see if this happens; they're just looking at the
token length.
I have these questions:
1. Is there something from Microsoft that I can give to them to assure them that the Azure Website platform is not running without this critical software patch from 4 years ago? The site is configured to use .NET 4.5.
2. What is the basis for their test using block length of the token? Can anyone explain why it is or isn't a valid test? I've checked with some in-house Web servers that are definitely patched and they return tokens with 8-byte blocks as well.

I am getting in touch with Trustwave to figure out how their scanner checks for this patch and will follow up here when we hear from them. FYI, this is not the only one showing a false positive on their scans. (https://social.msdn.microsoft.com/Forums/en-US/75d25599-442b-44b5-a22c-cd2965aa2727/pci-compliance-azure-websites-cve20146321?forum=windowsazurewebsitespreview&prof=required)

Virus scan failed Error on deploying a web application having a jar file for calling the applet on the jsp page

Hi,
I have an applet application that i want to deploy on the Oracle cloud.
So i have created a jar file for the applet application and i am using this jar to call the applet on a jsp page.
But when i am delpoying my application on the java cloud, its giving me the below error:
2014-10-28 03:16:41 CDT: Starting action "Virus Scan"
2014-10-28 03:16:41 CDT: Virus Scan started
2014-10-28 03:16:49 CDT: ----------------------------------------------------------------------
2014-10-28 03:16:49 CDT: File Scanned: "Application7.ear".
2014-10-28 03:16:49 CDT: File Size: "106698122".
2014-10-28 03:16:49 CDT: File Status: "INFECTED".
2014-10-28 03:16:49 CDT: ----------------------------------------------------------------------
2014-10-28 03:16:49 CDT: Virus scan failed.
2014-10-28 03:16:49 CDT: "Virus Scan" complete: status FAILED
Can't we deploy any application having applet or swing component's onto the cloud?
Or do we need to request for any extra permissions for the same?
Thanks,
Manoj

I don't see applets mentioned in the supported features nor in the unsupported features so not sure if they are supported you would likely need to contact the operations team to confirm.
Jani Rautiainen
Fusion Applications Developer Relations
https://blogs.oracle.com/fadevrel/

Scanning failed

i am using a kodak i40 scanner. when i scan a document in (150dpi, grayscale, simplex) thru kodak's scan validation tool, it works great.
when i switch to acrobate 8.1.2 pro, it get one of two messages: scanning failed or file cannot be found. the page feeds thru ok, pauses 3 - 4 seconds, then the error messages. I've tried this with both hiding and using the scanners native interface. \
I've tested scanning directly into adobe photoshop also. no problems.
this seems isolated to acrobate 8 professional. i purchased full pro edition. i was using acrobat 5.0 without any problems, with this scanner.
I am using the same setup with a panasonic KV-S1025C and no problems. I prefer the i40 for a number of reasons, depending on the job, so reverting everything to the panasonic is not desired.
any suggestions?
roxylee

I had found your step 1 in a thread online before my post on this forum. It did allow the install to continue, but at the end of the process I could not connect to the printer.
After using the MS Fix-it in step 2, the install was successful.
Thank you!
moreamused

Scan failed message kodak i40 acrobat 8.0

Ive just purchased Acrobat 8.0. I was using acrobat 5.0 with a Kodak i40 scanner. Scanning directly into acrobat with 5.0 was no problem.
Since uninstalling 5.0 and installeing 8.0 (and rebooting in between), acrobat gives me a scan failed error message, without any details or links.
Kodak supplies a test scan validation program and that works fine, the scans are successful within that program.
Ive downloaded the latest drivers for the scanner, both software and firmware and successfully installed. Ive done a repair reinstall of Acrobat 8.0. None of the steps has had an affect. Kodak tells me its an acrobat problem because the scanner is working fine with the validation tool that they supply.
Any suggestions?
Thanks for the help.
roxylee

The Kodak i40 was QA'd for Acrobat 8 -- do you have all the latest updates? Have you tried the suggestions in the Troubleshooting scanner issues (Acrobat 8 on Windows) at:http://kb.adobe.com/selfservice/viewContent.do?externalId=325262&sliceId=2
One suggestion you might try first is to create a new user account since you've successfully scanned into Acrobat before. Your user account may have since been corrupted, causing problems when you scan. Create a new user account with administrative privileges, and then log into Windows using the new account.

Overview scan failed to complete on HP 8610

I am using MAC OS-X Yosemite 10.10.2. Printer works great. Scanning is sporatic. Works one minute and not the next. Software is updated for both operting system and printer. A message appears "Overview scan failed to complete". The printer is set to scan to computer. It was working fine this morning and now I can't get it to scan. I have unplugged and restarted the computer and printer numerous times. What is the issue? Using Officejet Pro 8610 All in One. There is no issue with the internet.

Hello @CIngram!
Thanks for posting on the HP Forums!
I should be able to provide some suggestions that may help resolve the scanning issue! Is the printer connected Wi-Fi? I can see you have power cycled the printer and computer but if the printer is connected Wi-Fi its signal travels through the router. I recommend power cycling the router too.
You should also ensure scan to computer is still enabled on the Mac. You can check this in the HP Utility. To locate the HP Utility click on the Spotlight (Magnifying glass) in the top right corner of the Mac. Type HP Utility and it should show up as one if the first options. Within HP Utility should be an option "Manage scan to computer". Select that and ensure it is enabled.
If you are still getting the issue then I suggest uninstalling the HP Software. After the software is uninstalled I recommend performing a "repair disk permissions" on your Mac. A repair disk permissions is a utility built in the Mac operating system designed to locate and resolve issues or errors. After the repair disk permission is complete restart your Mac computer and re-install the software.
To uninstall the HP Software click here: Uninstalling HP Software
To perform a repair disk permission click here: Repair Disk Permissions
To Download the HP software click here: HP Officejet 8610 Software and Driver
Once the install is complete I recommend checking for software updates on the Mac. To check for software updates click the "apple" icon at the to left and click on "app store". In the app store you can click the "updates" icon at the top of the window. Install and Hp or printer updates. After any updates you should restart the computer.
If you are still getting the issue then you can use Image Capture and initiate the scan from the Mac. Image Capture is an application in the mac that allows you to scan. To get Image Capture click on the Spotlight (Magnifying glass) in the top right corner of the Mac. Type Image Capture and it should show up as one if the first options. Select it and in the window select your printer on the left side. It may be located under shared. Once your printer is selected you should get scan options on the right side. I recommend using Image Capture because you get a lot more settings and options for scanning.
Thanks again for posting on the HP Forums and let me know how it goes!
Cbert
I work on behalf of HP.
Please click “Accept as Solution” if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos, Thumbs Up" at the bottom of this post to say “Thanks” for helping!

Overview Scan failed to complete

Suddenly I can no longer scan and get a prompt that says 'The overview scan failed to complete'. I rarely use my scanner and have had a couple of updates that may have blocked my ability to scan as I was having no problem a few weeks ago. No problem printing. Suggestions?

Hello , Welcome to the HP Support Forums!
I understand that you are no longer able to scan from your HP Officejet 6600 e-All-in-One Printer to your Mac OS X 10.9 computer. I would like to assist you today with resolving this issue. Can I please have you follow the steps below to correct any software or driver conflicts that a computer update may have caused. Step 1: Reset the Print System: To start, I am going to have you Reset the Print System on your Mac as it is important that we have a nice clean slate to work with for troubleshooting. Please click here for instructions on how to perform the Reset. When the website opens follow the steps under 'Resetting the printing system in OS X Lion' as the steps are the same for your Mac OS X 10.9 Operating System. This Reset will remove every printer from your Mac. However, it does not uninstall the printers. Therefore, should you use other printers on this Mac, once the Reset is complete simply ensure that the printers are connected via a USB Cable or Network connected and (+) Add them back in. Do not add your HP Officejet back in at this time. Once the reset is complete, please proceed to the next step. Step 2: Uninstall Drivers and Software: Next, please click here for steps on how to properly uninstall your printer. Once the site opens select the dropdown for 'Mac OS X v10.6, OS X v10.7, OS X v10.8, and OS X v10.9' and follow the steps to complete the uninstall process. Once the uninstall is complete, please continue on. Step 3: Verify and Repair your Disk Permissions on the Mac:
Open Macintosh HD and go to ApplicationsGo to the Utilities FolderOpen the Disk UtilitySelect the Hard Drive volume you are using (usually on the left)Select Verify Disk PermissionsOnce that process is done, select Repair Disk Permissions Step 4: Check for Apple Updates: Go to AppleSelect System PreferencesSelect Software UpdateClick Update NowInstall your available updatesRestart your computer Step 5: Install Device: Please click here to download the latest drivers for your OfficejetOnce the website opens please select the Download button on the top leftOnce the download is complete please follow the onscreen instructions to reinstall your printer Once your printer has been successfully reinstalled, please test the scanning function again. Please respond to this post with the result of your troubleshooting. Best of luck!

Tech Tool Deluxe 'Surface Scan Failed-'

Surface scan repeatedly failing, no recent change to iBook settings, I suspect that this problem may have been caused by m-audio software, however I believe it has been properly uninstalled. Advice?
Error message reads;
'Surface Scan Failed - 212 errors
The Surface Scan test will scan the disk for bad blocks.
Media defects cause this test to fail. You should consider backing up the device, reformatting the media, replacing the data, and then testing again.'
I am unsure as what this report is prompting me to do. What does the term 'media' mean in this context? Which data should I be trying to replace?
Please forward any tips on how to resolve this issue.
<Post Relocated by Moderator>

When I use the disk utility application the volume passes verification, is this contrary to Tech Tools or are they analyzing different elements of the drive?
Yes, different, DU is just basically checking part of the drive, where Directory info is stored & such.
Laptop drives are generally a lot shorter lived than regular drives, which now seem to last 3 to 5 tears.
Although these errors are present it doesn't seem to be effecting my day to day running of things at the moment...
There's a Train Wreck coming up ahead though, you can avoid it, or wait 'till it hits!
Not certain which iBook G4 you have, but here's some ideas on HD replacements...
http://eshop.macsales.com/MyOWC/Upgrades.cfm?sort=pop&model=198&type=DataStorage&TI=5904&shoupgrds=ShowUpgrades

Surface Scan Fail (TechTool Deluxe)

I thought my problem was fixed, but apparently not... my PowerBook works when I first boot it up, but as I use it for a while (or close it and re-open it), things start freezing. Sometimes it can't find my AirPort connection, either.
Anyway, I ran the TechTool Deluxe that came with AppleCare, and it said the Surface Scan Failed:
"Media defects cause this test to fail. You should consider backing up the device, reformatting the media, replacing the data, and then testing again."
Joeuu helped me over in another thread, and I've already archived and installed from the discs, but now that I've backed up all my important files, should I consider erasing and installing? Is that what that message means? Or should I try something else?
Thanks in advance!

Good that you have AppleCare still.
Do you by any chance have .Mac and auto synch? Or any networking going on?
1. Call and get a case number.
2. Be patient as they will probably ask you to do things you have already done. Take copious notes as to what we have done and what they ask you to do.
3. Don't be afraid to ask for a higher level of tech if you get frustrated.
4. Decide how long you can be without your Book. The fact that it is portable, they will send you a box to use to ship to them.
Will not hurt to do an erase and install, I'm still wondering why logging in as a new user helped greatly, albeit only for a while--leaned to the software side.
Hang Tough!
Joe

4630 Scan Failed to complete error - OS X Yosemite

I bought the 4630 about a month ago and have tried scanning on 3 different Macs running OSX 10.10.1. The first scan after initial set up works. After that, I get either "The overview scan failed to complete" if the Details window is open or "The scanner failed to complete the scan" if the Details window is hidden. I've tried re-installing the 4630 dozens of times. I just downloaded the last HP software for it. Please help.

Hello @JohnGillen , and thanks for posting on the HP Forums!
I can see you're experiencing scan issues. I'd love to help with that!
I have a few steps I'd recommend:
I would suggest deleting the printer from your print system, using this document: Uninstalling the Printer Software.
Once you have deleted it, I would suggest verifying and repairing the disk permissions: About Disk Utility's Repair Disk Permissions feature.
I would also suggest running your Apple updates: OS X: Updating OS X and Mac App Store apps
After the updates, I would recommend reinstalling the printer: HP Officejet 4630 e-All-in-One Printer series Full Feature Software and Drivers.
Good luck and please let me know how it goes!
Please click “Accept as Solution " if you feel my post solved your issue, it will help others find the solution.
Click the “Kudos, Thumbs Up" on the right to say “Thanks" for helping!
Jamieson
I work on behalf of HP
"Remember, I'm pulling for you, we're all in this together!" - Red Green.

Airport utility scans fail.

After airport extreme 7.6 firmware upgrade, airport utility scans fail and can't see my airport extreme or airport express. Both of these airports are working, have green lights, have internet access and also iTunes streaming. I'm willing to to downgrade to 7.5.2 but installer also does not see either airport.

I have had the same kind of problem.
My main connection to Internet is through my Time Capsule, I also have an Airport Extreme which is used to extend my wireless network to have better coverage, and to have a printer connected.
It seems that the Airport Extreme goes into sleep mode and thus cannot be seen from Airport Tools - the only way for me was to power off power on and then wait for it to turn up in Airport tools.
The reason for going into sleep ?? But I only used it wireless, and the with a printer on a network port. I then connected my Mac Mini by cable to one port and that seemed to do the trick :-) meaning som traffic on the ethernet ports - a connected printer does nothing, just sits waiting for print....
Also found that there is something spooky with the NTP service from time.apple.com - not properly responding when pinged - changed to other NTP service.
Apple - go fix! 7.6.1 is dearly wanted

Canon Pixma MP470 all in one scanner printer "scan fail"

I found earlier posts that described similar problems as mine, they were marked as answered. I continue to have problems even tho I have followed earlier instructions from other members i.e. PAHU.
I am trying to use a Canon MP470 printer connected by USB cable to my iMac. I don't use it much and it has worked unreliably in the past. Today all scans fail except one which to me would mean that I have installed the correct driver for OSX 10.6. I am not sure if I have deleted the old preset and created a new preset for the new driver correctly. I hate to say it but I am a little unsure how to go about this. I don't remember having as much trouble before I upgraded to OS 10.6.3.
If anyone has some suggestions or instructions, I sure would appreciate them.

Okay, the Presets in this post did refer to the Printer preset. The poster had a black and white preset they had created with a previous OS and was trying to use it on Snow Leopard, which did not work because the printer driver was different on the new OS. This does not apply to the scanner portion of your MP470.
As for checking the scanner driver version, this is not an easy task. But the new driver installation typically overwrites the previous version. If you are not sure which driver install you did last, I suggest you run this v13.9 installer again. to ensure it is what you are using.
I would also suggest you have MP Navigator v2.04 or later installed, as earlier versions may not be that compatible with Snow Leopard. Again, running the newest version of MP Navigator installer should overwrite an older version.
If you have the latest MP Navigator and it is still not scanning correctly then please reply. At least you now know about Image Capture so if you did find that MP Nav stopped working, you are not totally stumped
Pahu

Upgrade firmware for PCI compliance scan

I have a WRT54G ver. 5 wireless router running ver. 1.02.0 firmware. I'm anticipating a PCI compliance scan which my bank requires since I transmit credit card numbers from here for my online business. I'm wondering if I should upgrade to the latest firmware version (1.02.6) before the scan. The router is working fine and I'm a great believer in not fixing things if they aren't broken. Does the upgrade make security improvements (which I should have) or just fix problems (which I don't have)?

If the router is upgraded with latest firmware...it resolve many problem.So if you get some time you may upgrade the firmare .

Compliance scan fails

Similar Messages

Maybe you are looking for