At random intervals we get notifications that some of our servers (and each time it's different servers) have Download Insight component that's malfunctioning, it also shows that the Intrusion Prevention component is malfunctioning as well.
We're using SEPM Version 12.1.1000.157 RU1
I've done some research and it seems that between those two components, if the one fails the other does as well.
We have Download Insight configured at Level 5 for all servers BUT we don't have Intrusion Prevention enabled because we already have a physical IPS device connected to our domain, and Best Practise suggests you only have one device configured.
So I need to compile a RCA as to why the Download Insight/Intrusion Prevention components malfunctioning so regularly at random times on random servers?
I know how to fix the problem, I need to know what might cause this and obviously how we can prevent it?
Thank you