Agent communication with server error: An existing connection was forcibly closed by the remote host (0x80072746)

Products

• Client Management Suite

Issue/Introduction

Logs indicate that the connections are being forcibly closed by the gateway.  

Operation 'CEM: Connect' failed. 
Protocol: HTTPS 
Original host: servername.domain.xyz:443
Real host: servername.domain.xyz:443
Path: / 
Connection id: 123.45678
Communication profile id: {GUID of Communication Profile} 
Throttling: 0 0 0 
Error type: TLS Handshake error 
Error code: An existing connection was forcibly closed by the remote host (0x80072746) 
Error note: The connection was closed by the server during TLS handshake, check the System Event Log on the server for SCHANNEL errors

 

Environment

Release: 8.x

Cause

Networking issues prevent packets from reaching the correct server

Resolution

Issue 1: There were two NAT rules with a single IP address going to different servers.  Resolution: Fix the NAT rules.

Issue 2: Wireshark traffic showed that the HTTP data packet is not reaching the SMP.  Resolution: Add network rules (this case was Palo Alto filtering out certain HTTP traffic) to allow all HTTP traffic from clients to SMP.  In this situation Task Server HTTP traffic was allowed, but Client Configuration was not.