We need to figure out what is different between our production OPMS stations and our non-production stations.
We found a monitor failing. When looking over the logs we noticed that the monitor would pass when run on our non-production OPMS stations.
We would like to update the production stations to be able to run this monitor since we really do not want non-production hosts running our production monitors.
To our knowledge…
The servers (RHEL8) should be created identical for production and non-production except for naming and IP sub-nets.
OPMS was installed in the exact same many for ALL OPMS instances.
Any firewall rules were created for all servers.
Below is the ASM monitor and the error we are getting:
Citrix Connector Cloud Service Connectivity Check
9256: CONNECT tunnel failed, response 407 (Failure when receiving data from the peer)
Uncovered that my servers were not in the correct exceptions group for our Proxy server.
This was corrected earlier today. The error has gone away.
The monitor has 'Use system proxy' enabled.
As seen from the check result, the issue is that the HTTP proxy configured on the production station requires NTLM authentication.
ASM supports only basic authentication for proxies.
There are three possible causes for different behavior between prod and non-prod stations: