Access of a malfunctioning server to a data storage facility is blocked.
Characteristics such as IAmAlive signals from a server are monitored and
when out of profile a malfunction is indicated and data access of that
server is inhibited. Characteristics continue to be monitored for a
return from the malfunction. The system can be used in a resilient
cluster of servers to shut out a malfunctioning server and enable its
recovery to be indicated so as to enable readmittance to the cluster.