No traffic is sent anymore to a Policy Server after bad requests in CA Access Gateway (SPS)

Products

• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Secure Proxy Server (SiteMinder)
• SITEMINDER
• CA Single Sign-On

Issue/Introduction

Running CA Access Gateway (SPS), when a Policy Server faced a problem for around 20 seconds, the CA Access Gateway (SPS) stops sending requests to the Policy Server, even if this Policy Server started over to work fine after the 20 seconds of outage.

A restart of the Policy Server is needed to recover the service, and to make the CA Access Gateway (SPS) to send again the traffic to the Policy Server.

SM_ENABLE_TCP_KEEPALIVE is not enabled on SPS and Policy Server;

Environment

Policy Server 12.8SP8CR01 on RedHat 8; 
CA Access Gateway (SPS) 12.8SP8CR01 on RedHat 8;

Resolution

Upgrade the CA Access Gateway (SPS) to 12.9 SP1 when this one is available to benefit from fix DE650346.

The fix will bring other improvements about the Policy Server loadbalancing in the Agent.