Run show endpointintelligence details CLI command.
In Packet processing stats, check session failures as shown.
[Packet processing stats]
Total packets received : 17065
Total packets sent : 790
Total metadata flows : 16201
Total GTI file reputation requests : 6
Total GTI file reputation responses : 0
Total Sysinfo packets received : 789
Total keepalives received : 790
Total keepalives sent : 790
Total malformed packets : 0
Total unsupported packets : 0
Total packet send failures due to session not available : 0
Total connections : 46
Total active connections : 22
Total connection timeouts : 1
Total sessions : 23
Total session failures : 1
Total session failures due to certificate mismatch : 1
Total session failures due to timeouts : 1
Total session failures due to certificate mismatch indicates that McAfee EIA is not able to talk to NTBA and that endpoints are using a different ePO certificate from what is available in NTBA. To resolve this, push the latest ePO certificate to NTBA using the Manager interface.