Unable to activate NDR in Air Gap mode in SSP

Products

• VMware vDefend Firewall with Advanced Threat Prevention

Issue/Introduction

When the user tries to activate NDR in Air Gap mode, the RUN PRECHECKS  button is disabled.

Environment

SSP 5.1.0

Cause

The UI condition check for enabling/disabling RUN PRECHECKS button during NDR install is not working as expected in Airgap mode.

Resolution

• To workaround this issue, execute these steps.
  
  Download the attached script and copy it to any directory on SSPI VM.
   
  Run the script on SSPI as sysadmin user,

Note: This script also activates NDR feature in AirGap mode, so the user needs to run only this script for GREENFIELD deployment. No action is needed on UI. 

Command to be run on SSPI -
sudo KUBECONFIG=/config/clusterctl/1/workload.kubeconfig /home/sysadmin/ndr_activate_airgap_5.1.sh SSP_URL username password 

Example -
sudo KUBECONFIG=/config/clusterctl/1/workload.kubeconfig /home/sysadmin/ndr_activate_airgap_5.1.sh https://<SSP-instance-FQDN> admin <password>

• After running the script, verify that the NDR status shows UP on the SSP UI, and then proceed from step 2 in the document Configuring Network Detection and Response for the Air-Gap Environment to complete the remaining steps for the NDR air-gap configuration..

This issue will be fixed in the next release of SSP.

Additional Information

This KB is applicable only for the GREENFIELD deployment. If a user is upgrading from SSP 5.0 to SSP 5.1, then user has to only follow these steps Configuring Network Detection and Response for the Air-Gap Environment. In case if a user deletes NDR on upgraded set up, then this KB will be applicable.