Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Replies 15 replies
  • Subscribers 0 subscribers
  • Views 8348 views
  • Users 0 members are here
Options
Suggested

SUM 4.2 and UTM 9.2 not playing nice

gabigdawg
I have 2 home license UTM 9.2's and a Beta 4.2 SUM.  I also have another SUM of prior version.  With the older version, both UTM's connect but the SUM cannot do anything with them.  My SUM 4.2 can only see the local UTM 9.2 .  On the other UTM 9.2 I cannot connect and get the following log:

2014:05:12-16:42:50 TheWall2 device-agent[8002]: Setting update interval for /etc/selfmon.ph from 30 to 30
2014:05:12-16:42:50 TheWall2 device-agent[8002]: Setting update interval for /var/log/reporting/accu/ipsevent.accu from 0 to 0
2014:05:12-16:42:50 TheWall2 device-agent[8002]: Setting update interval for /etc/up2date/up2date_status from 0 to 0
2014:05:12-16:42:50 TheWall2 device-agent[8002]: Setting update interval for /etc/location from 0 to 0
2014:05:12-16:42:50 TheWall2 device-agent[8002]: Initialization complete
2014:05:12-16:42:50 TheWall2 device-agent[8002]: Connecting to SUM
2014:05:12-16:42:50 TheWall2 device-agent[8002]: Creating new SUM connection with id [1]
2014:05:12-16:42:50 TheWall2 device-agent[8002]: Updating SUM IP address for path: acc/server1/server
2014:05:12-16:42:50 TheWall2 device-agent[8002]: [1] Connecting to SUM (ip=xx.xx.***.***, port=4433).
2014:05:12-16:42:50 TheWall2 device-agent[8002]: [1] Using SUM SSL connection.
2014:05:12-16:42:55 TheWall2 device-agent[8002]: [1] SUM connection failure, retrying (ip=xx.xx.***.***, port=4433). SSL-connect: 'IO::Socket::INET6 configuration failed'
2014:05:12-16:43:01 TheWall2 device-agent[8002]: [1] SUM connection failure, retrying (ip=xx.xx.***.***, port=4433). SSL-connect: 'IO::Socket::INET6 configuration failed'
2014:05:12-16:43:02 TheWall2 device-agent[8002]: [1] Connection failed (ip=xx.xx.***.***, port=4433).
2014:05:12-16:43:02 TheWall2 device-agent[8002]: Connection to remote SUM established.
2014:05:12-16:43:02 TheWall2 device-agent[8002]: Init iWatcher dropping file 0 '/etc/raid/status'.
2014:05:12-16:43:02 TheWall2 device-agent[8002]: Starting watchers...
2014:05:12-16:43:02 TheWall2 device-agent[8002]: Starting connection...
2014:05:12-16:43:02 TheWall2 device-agent[8002]: Entering event loop...
2014:05:12-16:43:07 TheWall2 device-agent[8002]: timer2 -> module 1 not executing: denied by role
2014:05:12-16:43:07 TheWall2 device-agent[8002]: timer2 -> module 2 not executing: denied by role
2014:05:12-16:43:07 TheWall2 device-agent[8002]: timer2 -> module 3 not executing: denied by role
2014:05:12-16:43:07 TheWall2 device-agent[8002]: timer2 -> module 4 not executing: denied by role
2014:05:12-16:43:07 TheWall2 device-agent[8002]: timer2 -> module 5 not executing: denied by role
2014:05:12-16:43:07 TheWall2 device-agent[8002]: timer2 -> module 6 not executing: denied by role
2014:05:12-16:43:07 TheWall2 device-agent[8002]: timer2 -> module 7 not executing: denied by role


I have replaced the IP of my SUM with the xx.***.xx.*** but I have verified that it is the correct IP.
Parents
  • 0
    Hi gabigdawg,

    the log file you posted doesn't look right. Did you modified it? Unfortunately there isn't much information in it.

    Could you please verify that your DNAT is working. Log in via ssh to your remote UTM and execute "openssl s_client -connect SUM_HOSTNAME:4433". Replace SUM_HOSTNAME again with the DNS name. Please then post the whole output here.

    Regards,
    Sebastian
Reply
  • 0
    Hi gabigdawg,

    the log file you posted doesn't look right. Did you modified it? Unfortunately there isn't much information in it.

    Could you please verify that your DNAT is working. Log in via ssh to your remote UTM and execute "openssl s_client -connect SUM_HOSTNAME:4433". Replace SUM_HOSTNAME again with the DNS name. Please then post the whole output here.

    Regards,
    Sebastian
Children
No Data
Unfiltered HTML