RHEL 5 DCS legacy agent lost communication after upgrade of DCS Management Server to version 6.9.2

Products

• Data Center Security Server Advanced

Issue/Introduction

After DCS Management Server upgrade to version 6.9.2 DCS Agent installed on Red Hat 5 OS changed the status to offline in the UMC. 

Communication test with sisipsconfig.sh -t shows the results as below:

Could not connect to server: CURLE_SSL_CONNECT_ERROR. Your target port may be pointing to an IIS Server and not the SCSP Mgmt Server.

 

 

 

 

 

 

Environment

Release : 6.9.2

Cause

After upgrade to 6.9.2 server.xml protocols and ciphers were updated and legacy RHEL5 can't communicate as result. 

Resolution

If you require DCS Legacy Agent installed on Red Hat 5 OS to communicate with DCS Management Server the following changes are required SSS-Agent-Service service name in server.xml located under {install drive}:\Program Files (x86)\Symantec\Data Center Security Server\Server\tomcat\conf

#1 Ciphers:

TLS_RSA_WITH_AES_128_CBC_SHA

TLS_RSA_WITH_AES_256_CBC_SHA

#2 Protocols

TLSv1 under sslEnabledProtocols