SFA 4.1.3 missing on Devices > Socket Filter Agent page

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

Socket filter agent version 4.1.3 is installed on a Linux host and integrated with a PAM server at version 4.1.3 or lower. The PAM server shows other SFAs on the Devices > Socket Filter Agent page, but not the 4.1.3 SFA host. The /var/log/gksfd.log file on the SFA host shows the following version information during service restart:

<5>gksfd: 2024-02-08 13:35:25 ## =============================== ##
<5>gksfd: 2024-02-08 13:35:25 ##         Process Started         ##
<5>gksfd: 2024-02-08 13:35:25 ## =============================== ##
<5>gksfd: 2024-02-08 13:35:25 ## version: gksfd 4.1.3.xxxxxxxx-hotfix-4.1.3.10-231204_014601

Environment

PAM 4.1.3

Cause

The 4.1.3 SFA version is a hotfix build and has an unusual version string that is longer than what PAM servers at release 4.1.3 and lower accepted as a valid agent version.

Resolution

The problem is resolved in PAM server versions 4.1.4 and newer.

If you cannot upgrade your PAM server at this time, using almost any other SFA version, such as 4.1.2, will resolve this problem on target devices where this version can be installed and started successfully. A newer SFA version, e.g. 4.1.5, should work too, but we cannot exclude that you may have a problem if you are running agent versions newer than the PAM server version. Old server versions are not tested with new agent versions in house. In general we want the PAM server to be at the same or at a newer version than A2A client or SFA versions you may have in use.