search cancel

Customer specific URL Category settings empty in Messaging Gateway

book

Article ID: 253369

calendar_today

Updated On:

Products

Protection Suite Enterprise Edition Messaging Gateway

Issue/Introduction

After applying patch 10.7.5-292 to Messaging Gateway 10.7.5 the Spam > Csutomer-specific URL Category Settings page is empty.

Looking at the BrightmailLog.log from Status > Logs > Control Center shows errors similar to the following:

Oct 26 2022 15:35:54 [https-jsse-nio-443-exec-4] [DefaultRequestDirector] INFO - I/O exception (java.net.SocketException) caught when processing request: Broken pipe (Write failed)
Oct 26 2022 15:35:54 [https-jsse-nio-443-exec-4] [DefaultRequestDirector] INFO - Retrying request
Oct 26 2022 15:35:54 [https-jsse-nio-443-exec-4] [AgentEvent] WARN - Broken pipe (Write failed) : 10.0.0.10
Oct 26 2022 15:35:54 [https-jsse-nio-443-exec-4] [AgentHelper] ERROR - Cannot obtain data blob.
Oct 26 2022 15:35:54 [https-jsse-nio-443-exec-4] [AgentHelper] ERROR - --- File Name: $STATSDIR$$/$webpulse_categories.xml
Oct 26 2022 15:35:54 [https-jsse-nio-443-exec-4] [AgentHelper] ERROR - An agent error has occurred in the following code path:
java.lang.Exception
        at com.symantec.smg.controlcenter.agent.AgentHelper.logError(AgentHelper.java:458)
        at com.symantec.smg.controlcenter.agent.AgentHelper.logError(AgentHelper.java:511)
        at com.symantec.smg.controlcenter.messagefiltering.spam.SpamAction.refreshDBwithWebpulseCategoriesXML(SpamAction.java:663)

Environment

Release : 10.7.5

Cause

At some point in the past the SMG Control Center host's IP address was changed but the agent access control list was not updated with the new IP address. This prevents the SMG Control Center web application from communicating with the agent in order to display the customer-specific URL category settings.

Resolution

To confirm that the agent has all neccessary IPs in its access list

  1. Log into the SMG Control Center command line interface
  2. Run agent-config --status to list the allowed IPs
    smg-combo [10.7.5]> agent-config --status
    127.0.0.1
    10.0.10.10
    Current log level is warnings
  3. Run ifconfig | grep broadcast to check the SMG IP addresses
    smg-combo [10.7.5]> ifconfig | grep broadcast
            inet 10.0.10.15  netmask 255.255.254.0  broadcast 10.253.39.255
  4. If the SMG IP addresses are not in the agent configuration you can add them by running the following command substituting the SMG Control Center IP address
    smg-combo [10.7.5]> agent-config --add 10.0.10.15
  5. Confirm that the IP has been added to the agent config:
    smg-combo [10.7.5]> agent-config --status
    127.0.0.1
    10.0.10.10
    10.0.10.15
    Current log level is warnings