Jump to content


My Immunet Agent Is Offline; What Do I Do?

Agent Disconnected Sourcefire Greyed Out Problem Offline Not Responding Multi-User

  • Please log in to reply
3 replies to this topic

#1 Francis


    Sourcefire Administrator

  • Administrators
  • 75 posts

Posted 26 March 2013 - 04:43 PM

Question: My Immunet console is displaying a message saying, "Disconnected" and the "Scan Now" and "Settings" buttons are greyed out.
Attached File  AgentDisconnected.png   368.05KB   22 downloads

Clicking on the "Scan Now" button gives me the following error:
Attached File  AgentFailure.png   14.23KB   36 downloads

How do I resolve this issue?

Answer: Let me start with a brief explanation of what's going on. Immunet is mainly composed of two applications:

agent.exe - the engine that handles connecting to the cloud and detections
iptray.exe - the User Interface you see and interact with (aka the Immunet Console)

The above issue occurs when something causes the connection between these two applications to be interrupted. This also means that even though you might see the disconnection message your agent might still be running and actively protecting you (you can check this by going into the Task Manager, you'll have to select the "show processes from all users" option if applicable, and locating the agent.exe; if it's there then it's probably running correctly).

So, what can cause this interruption between the agent and the tray processes?

1) Logging in with multiple users.
If you log into and try to open the Immunet Console in more than one profile on your computer, then multiple instances of the iptray.exe get instantiated and all try to connect to the agent.exe at once. Unfortunately, the agent.exe can only handle a single connection at a time. This is a known bug that has yet to be resolved, however, manually closing the iptray.exe processes from the Task Manager or just restarting your computer will fix the issue.

2) Corrupted configuration files.
We have services running that stop other processes or users from tampering with our files, by things do go wrong on occasion. The way to clear out these files is to trigger a full uninstall of the application. You can start the uninstaller through Add or Remove Programs on Windows XP or through Programs and Features for Vista and 7. The entry is called Immunet 3.0. After the uninstaller completes, you will see the following message:
Attached File  FullUninstall.png   9.92KB   26 downloads

Selecting the No option will tell Immunet to clean up all of the local configuration, policy, .db files and logs. This also means you will be erasing your quarantine history. After Immunet has finished uninstalling, re-install and the corrupted files will now have been replaced.

3) Firewalls.
If your computer has a firewall (or multiple) it may be blocking our agent's connection to our cloud server. In order to make sure traffic is getting through, ensure that ports 53, 80, 443 and 32137 are all open.

4) Other Anti-Virus programs.
It possible that another AV product has quarantined parts of our service. In order to stop this from happening, add an exclusion into these other AVs (if you're not sure how to setup an exclusion a quick Google search should help you out) for Immunet's program directory (by default at the location C:\Program Files\Immunet).

5) Oudated version.
Make sure you're up to date with the latest version of Immunet. Many issues people experience with Immunet have already been addressed in it's latest version. Unfortunately for non-english users, our language pack builds are very far behind. This means that using one of the versions will still offer you the latest and up-to-date protection, but you will probably run into a lot more problems (like this one) as well as not being able to take advantage of our newest features. I regret to say that currently, our only workaround is to install the product in English.
  • Bobby K likes this

#2 Bobby K

Bobby K


  • Members
  • Pip
  • 1 posts

Posted 11 July 2013 - 12:06 AM

Sounds like a legitimate response.

#3 kramercat



  • Members
  • Pip
  • 3 posts

Posted 27 January 2017 - 07:06 PM

I tried to uninstall Immunet and I got the message "unable to unistall program." Then I tried the option of an message to uninstall with an app from sourcefire - and that failed too. I have Windows 10 on my computer. 

#4 ritchie58


    Staff Member

  • Moderators
  • 2,038 posts
  • LocationEarth

Posted 28 January 2017 - 05:15 AM

Hello kramercat, sorry to hear you're having uninstall problems. It would have been better if you posted this in the Support (Issues & Defects) section of the forum. However, a recent topic in the Support section may be helpful for you too, so give it a look. http://support.immun...stuck-in-limbo/

Best wishes, Ritchie...

* Immunet Global Forum Moderator *

Also tagged with one or more of these keywords: Agent, Disconnected, Sourcefire, Greyed Out, Problem, Offline, Not Responding, Multi-User

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users