[1.800] Can't access Webadmin on managed ASG [NOTABUG]

Hi all,

I configured a user, which has under Managment - Access Control
these rights (look at the attachment).

When I logged an to the Gateway Manager and try to start a Webadmin Session nothing happens.

Regards,
Fred

Update:

Everytime I click Webadmin under Gateway Manager I get this in the ACC Live Log of the ASG:

2008:07:31-20:52:59 (none) device-agent[2549]: 2549 single 164 main::__ANON__ (SI)* (su) process caught USR1 -> PID=2549 -> @_=null -> $!='Interrupted system call'. 
2008:07:31-20:54:31 (none) device-agent[2549]: 2549 single 164 main::__ANON__ (SI)* (su) process caught USR1 -> PID=2549 -> @_=null -> $!='Interrupted system call'. 
2008:07:31-20:55:05 (none) device-agent[2549]: 2549 single 164 main::__ANON__ (SI)* (su) process caught USR1 -> PID=2549 -> @_=null -> $!='Interrupted system call'.

0 Thorsten Zachmann over 16 years ago

Hello,

The browser tries to connect to the ASG using its public IP address. If this IP is behind a NAT then this will fail.
You can see in the status bar to which IP the brower tries to connect.

If it is not possible to connect via this IP you can configure to use a different SSO Mode in Management >> Registration. Change it to use the Agent IP when your ACC is in the same network as you ASG. Alternativly you can use Hostname or specify URL to use.

As a short information the log messages you see are expected and don't show any error.

Thorsten
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 mhofer over 16 years ago in reply to Thorsten Zachmann

Hi,

ok now it works, but I must the Agent IP because the public IP is not updated. I'm using dyndns for my public IP maybe this is the problem?

Regards,
Fred
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Thorsten Zachmann over 16 years ago in reply to mhofer

Hello,

the public IP is only updated when a GeoIP lookup is triggered. So if the device just reconnected this is not the case. It should however be possible to use the hostname to connect.

Thorsten
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BrucekConvergent over 16 years ago in reply to Thorsten Zachmann

It might be a good idea to add an option that can be configured for any particular managed ASG that tells ACC that we want to use the internal IP to manage the device, in the event we don't want to use the public IP... some of us manage environments where this would be advantageous.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Thorsten Zachmann over 16 years ago in reply to BrucekConvergent

Hello,

the option is in Management >> Registration there you can set the SSO Mode to either:

Agent IP
Hostname
Public IP
Manual URL

Thorsten
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 BrucekConvergent over 16 years ago in reply to Thorsten Zachmann

Thanks Thorsten, I didn't notice that... that'll work!

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel