Error 'ssh connect: Timeout connecting to <asset_IP>' when running an agentless CCS data collection job on Linux assets

Products

• Control Compliance Suite Standards Server
• Control Compliance Suite
• Control Compliance Suite Standards Module

Issue/Introduction

Control Compliance Suite (CCS)

When running an agentless data collection or CER (Collection-Evaluation-Reporting) job, the job fails with the following error reported in the CCS Console.

 ssh connect: Timeout connecting to <asset_IP>

Environment

CCS 12.6.X

CCS 12.7.0

Resolution

The error message 'ssh connect: Timeout connecting to <Asset IP>' can be caused by a few reasons:

• The asset server is offline or not available at the time of the job run.
• Firewall blocking connection between manager and asset (could also be the local server firewall blocking connection, i.e. IPTables or NFTables for newer RHEL servers).
• Job is routed from a CCS manager that does not have connection to the asset.

Other possible causes, but less likely:

• Incorrect IP address or hostname for the asset.
• Stopped SSH service on the asset.
• Network issues.