none
The Microsoft Advanced Threat Analytics Gateway service terminated unexpectedly RRS feed

  • Question

  • The ATA Gateway service keep restating and i get the following in the log:

    2015-05-12 10:24:48.8296 1340 5   28ddf5ea-a0e2-4f69-9d2e-2c8b6a0d3a10 Debug [DirectoryServicesClient] Starting
    2015-05-12 10:24:49.0640 1340 14  28ddf5ea-a0e2-4f69-9d2e-2c8b6a0d3a10 Warn  [DirectoryServicesClient] LDAP search failed [DomainControllerDnsName=XXX.dk BaseDistinguishedName=CN=Sites,CN=Configuration,DC=XXX,DC=dk Scope=Subtree Filter=(&(objectClass=server)(dnsHostName=XXX.dk)) AttributeNames=canonicalName objectClass whenCreated displayName distinguishedName objectGUID isDeleted name objectSID whenChanged dnsHostName serverReference Options=NoResultsWarning]
    2015-05-12 10:24:49.0640 1340 5   00000000-0000-0000-0000-000000000000 Error [DirectoryServicesClient]  System.NullReferenceException: Object reference not set to an instance of an object.
       at Microsoft.Tri.Gateway.Resolution.DirectoryServicesClient.OnStart()
       at Microsoft.Common.Framework.Module.Start()
       at Microsoft.Common.Framework.ModuleManager.OnStart()
       at Microsoft.Common.Framework.Service.<>c__DisplayClass2.<OnStart>b__0()
       at Microsoft.Common.Utils.ExceptionHandler.<>c__DisplayClass1.<Run>b__0()
       at Microsoft.Common.Utils.ExceptionHandler.Run[TResult](Func`1 function, Boolean shouldRethrow)

    Tuesday, May 12, 2015 10:37 AM

Answers

  • oh have forgot to put the intire FQDN name of the Domain Controller i was monitoring in the Port Mirrored Domain Controllers (FQDN) 

    • Marked as answer by Bo_c Tuesday, May 12, 2015 11:05 AM
    Tuesday, May 12, 2015 11:05 AM

All replies

  • oh have forgot to put the intire FQDN name of the Domain Controller i was monitoring in the Port Mirrored Domain Controllers (FQDN) 

    • Marked as answer by Bo_c Tuesday, May 12, 2015 11:05 AM
    Tuesday, May 12, 2015 11:05 AM
  • Hi,

    I have set he FQDN but sometimes the gateway appears to be restarting. There is an eventlog entry:

    The Microsoft Advanced Threat Analytics Gateway service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 5000 milliseconds: Restart the service.

    But without more details and the message appears every day 1-3 times. Does anyone know why this is happening?

    Regards

    • Proposed as answer by M,b Thursday, October 22, 2015 6:21 AM
    Tuesday, October 20, 2015 5:32 AM
  • This cannot be the answer. Wrong!
    Saturday, February 25, 2017 4:27 AM
  • Same issue here. I am using the Lightweight Gateway, and I am facing the same issue.

    [The Microsoft Advanced Threat Analytics Gateway Updater service terminated unexpectedly].

    I totally agree with calorie712 - This cannot be the answer.

    Regards,

    -Charbel

    Sunday, March 19, 2017 1:16 PM
  • What version of .NET Framework is installed on the server? if you are not running at least 4.5.2, you will see the application crash regularly (and you'll be missing security updates since 4.5/4.0 are end of life).

    Have you installed ALL Microsoft Updates on the server? Including KB2919355? You will run into issues if there are missing reliability updates.

    I hope that helps,

    Nash


    Nash Pherson, Senior Systems Consultant
    Now Micro - My Blog Posts
    If you found a bug or want the product to work differently, share your feedback.
    <-- If this post was helpful, please click the up arrow or propose as answer.


    • Edited by NPherson Sunday, March 19, 2017 8:16 PM
    Sunday, March 19, 2017 8:14 PM
  • I hate to say it, but I went through and found two dc's someone hadn't entered in the FQDN (left out the domain) and when I put them in, the service started running.  I don't know if its that, or just the fact it wanted communication from the center.  Strange...

    DB

    Tuesday, April 11, 2017 2:39 PM
  • Check "Microsoft Advanced Threat Analytics Center" services on ATA central server, if this services is stopped you will have the error on gateway server, start the services on Crntral server and it will help. 

    2018-05-27 17:16:09.0038 1036 5   00000000-0000-0000-0000-000000000000 Error [WebClient+<InvokeAsync>d__8`1] System.Net.Http.HttpRequestException: PostAsync failed [requestTypeName=UpdateGatewaySystemProfileRequest] ---> System.Net.Http.HttpRequestException: An error occurred while sending the request. ---> System.Net.WebException: Unable to connect to the remote server ---> System.Net.Sockets.SocketException: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond XXX.XXX.XXX.XXX:443


    Monday, May 28, 2018 6:02 AM