Data Repository failing security scan on port 5444

Products

• CA Infrastructure Management
• CA Performance Management - Usage and Administration
• DX NetOps

Issue/Introduction

Security scans keep flagging our Data Repositories on port 5444 for SSL certificate violation.

Environment

All supported releases of Performance Management

Resolution

This port is only used by the Vertica agent and only needed by The Management Console (MC) which is not installed by default. You can just disable the agent and the scan should pass with no changes in functionality.  

systemctl stop vertica_agent
systemctl disable vertica_agent

Note: This may get turned back on after upgrades of Vertica, so you may need to disable it again after an upgrade.