NFA ASP Pages Gives 500 Error

Products

• Network Flow Analysis
• Network Observability

Issue/Introduction

If you are on Network Flow Analysis 22.2.7 or higher and you get a 500 error while trying to load a .ASP page such as (error will only be visible on local machine):

msxml3.dll error '80072f06'

The host name in the certificate is invalid or does not match

/Common/CheckAuth.asp, line 179

IIS log:

x.x.x.x, -, 4/10/2023, 22:05:02, W3SVC1, <Server>, x.x.x.x, 483, 992, 1023, 500, 0, GET, /Admin/AdminDomains.asp, cs=adm|179|80072f06|The_host_name_in_the_certificate_is_invalid_or_does_not_match__,

Environment

NFA Console 22.2.7+

Cause

While using HTTPS and the NetQoS Reporter Manager Service is not using a trusted alias in the certificates common name or subject alternative name, IIS will throw an error like this on ASP.NET pages.

Resolution

1. Edit x:\CA\NFA\DBUsers\ReporterAnalyzer.ini as an Administrator in notepad.
2. Find the line that starts with: "ReporterAnalyzer.Host"
3. Set the value equal to an FQDN or DNS friendly name which is found inside the certificate you are using for IIS's Subject Common Name or Subject Alternative name. Any of of them will work. If the value in not in the certificate, it will not work.
4. The fix should be instant. Please open a support ticket if you are having trouble.