Symantec Messaging Gateway for Service Provider (SMG-SP) 10.5: subm-config returns "Network error occurred, Failed connect to aztec.brightmail.com:443" errors when proxy is enabled with bmiconfig.xml

Products

• Messaging Gateway for Service Providers

Issue/Introduction

Symantec Messaging Gateway for Service Provider (hereafter "SMG-SP") 10.5 was configured to use the proxy server.Connecting to the Brightmail servers (aztec.brightmail.com:443) with the subm-config command fails with the following error:

# ./subm-config provisioning -configure -c /opt/symantec/smg-sp/Scanner/etc/bmiconfig.xml

Do you want to Provision the Submitter ID [y/n]: y
Network error occurred, Failed connect to aztec.brightmail.com:443; Connection timed out (0), check your network connection settings, check your proxy settings (if applicable), and check to ensure that port 443 (HTTPS) is open through any relevant firewalls.

 

On the same host, you could have registered the license file and can download the latest spam rulesets successfully on the same host through the proxy server set tin the brightmail.xml:

# sh /opt/symantec/smg-sp/Scanner/sbin/register.sh -l /opt/symantec/xxxxxxxx.slf -c /opt/symantec/smg-sp/Scanner/etc/bmiconfig.xml
Registration Successful.
You may now continue.

 

Network error occurred, Failed connect to aztec.brightmail.com:443; Connection timed out (0), check your network connection settings, check your proxy settings (if applicable), and check to ensure that port 443 (HTTPS) is open through any relevant firewalls.

Cause

subm-config command does not use the proxy settings information in the brightmail.xml.

Resolution

Symantec is aware of this issue and will update this document when a solution becomes available. It is not necessary to log a support case on this issue. Please subscribe to this article to be notified of any updates.

Applies To

• proxy-enabled in bmiconfig.xml
• No firewall rules prohibit the tcp/443 connections
• conduit and register.sh work fine
• SMG-SP's network connection is only allowed via the proxy server