TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
Hello Dixon, I have seen this problem before with System Scanner and the cause is usually that the Console name used to generate the certificates is different to the Console name used to configure the agent when installed. An example might be use of fully qualified domain name for the certificate "console.iss.net" and just the Console system name "Console" used to configure System Scanner. I cannot recall if the names are case sensitive so it may be worth checking that as well. If that does not correct the problem for you I suggest you contact ISS Technical Support who I am sure will be able to resolve the problem for you. I noticed that Christian Sandberg [[EMAIL PROTECTED]] posted the following the ISS Forum on the 8th August this year. > >After a couple of days of investigating I discovered the following: > >When the SS Console creates the SSL keys it sometimes use the consoles Netbios >"shortname" with caps letters (like "SSCONSOLE") as common name for the certificate. >Therefore you have to use this name as the primary console when you install the client. >It seems like the certificate validation code on all the unix clients use a case >sensitive string match. I had the same problems with a Solaris installation. Make also >sure that the AIX machine is able to do a DNS lookup of the console netbios name (should >be the same as the DNS name without the DNS domain). The easiest way to ensure this is >to make an entry in the hosts file on the AIX machine like "192.168.1.54 SSCONSOLE". > The DNS name lookup that Christian suggested is also a very good test to try. I hope this helps All the best Nick ----- Nick Connor, Product Manager - Desktop and Server Protection Solutions Internet Security Systems Tel: +44 118 959 3813 ------------------------------------------------ Internet Security Systems - The Power to Protect ================================================ -----Original Message----- From: Dixon Camacho [mailto:[EMAIL PROTECTED]] Sent: Monday, October 01, 2001 9:30 PM To: issforum Subject: System Scanner problem !! TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ---------------------------------------------------------------------------- Hi all, I already installed the Solaris 2.7 System Scanner agent (Version 4.0), but when I tried to add it to the console I receive the following messages: _______________________________________________________________ POLL OF (HOST)FAILED CERTIFICATE INSTALLED SUCCESSFULLY, BUT SSL CONNECTION FAILED _______________________________________________________________ NOTE: The Agent and the console are in the same network segment. Lot of thanks !! Dixon
