SSM On-Prem - Web GUI not working after install, SSH is working

[axeleratorcisco]

I have installed the SSM On-Prem 8 202212 ISO. I chose the DISA STIG profile instead of the default one.

After booting up, i can SSH into the machine. However, the Web GUI isn't accessible. The firewall is allowing the traffic.

I am using the https://ip-address:8443/admin/ url to reach it.

Any ideas? In the CLI i can't seem to find a way to turn it on.

[balaji.bandi]

from command level i will check is the port listing on 8443 :

$ netstat -nlptu

[axeleratorcisco]

Tried this. I don't see any mention of 8443, only 22.

[balaji.bandi]

Try reload the SSM Server and give some time and test it.

or may be something wrong your installation.

check installation guide.

https://www.cisco.com/web/software/286285517/152313/Smart_Software_Manager_On-Prem_8-202006_Installation_Guide.pdf

[xWatario]

I ran into the same issue thinking that it was issue with the installer/ISO itself but all you gotta do is give it some time and run the following command once in a while till its being shown 

netstat -nlptu | grep 8443

after starting the machine 

[admin@SSM-On-Prem ~]$ netstat -nlptu
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:6379 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN -
tcp6 0 0 ::1:6379 :::* LISTEN -
tcp6 0 0 :::111 :::* LISTEN -
tcp6 0 0 :::22 :::* LISTEN -
udp 0 0 0.0.0.0:50337 0.0.0.0:* -
udp 0 0 0.0.0.0:5353 0.0.0.0:* -
udp 0 0 0.0.0.0:111 0.0.0.0:* -
udp 0 0 127.0.0.1:323 0.0.0.0:* -
udp6 0 0 :::5353 :::* -
udp6 0 0 :::48863 :::* -
udp6 0 0 :::111 :::* -
udp6 0 0 ::1:323 :::* -

 after a while 

[admin@SSM-On-Prem ~]$ netstat -nlptu
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address Foreign Address State PID/Program name
tcp 0 0 127.0.0.1:6379 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:8443 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:111 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:443 0.0.0.0:* LISTEN -
tcp 0 0 0.0.0.0:6000 0.0.0.0:* LISTEN -
tcp6 0 0 ::1:6379 :::* LISTEN -
tcp6 0 0 :::8443 :::* LISTEN -
tcp6 0 0 :::80 :::* LISTEN -
tcp6 0 0 :::111 :::* LISTEN -
tcp6 0 0 :::22 :::* LISTEN -
tcp6 0 0 :::443 :::* LISTEN -
udp 0 0 0.0.0.0:50337 0.0.0.0:* -
udp 0 0 0.0.0.0:5353 0.0.0.0:* -
udp 0 0 0.0.0.0:111 0.0.0.0:* -
udp 0 0 127.0.0.1:323 0.0.0.0:* -
udp6 0 0 :::5353 :::* -
udp6 0 0 :::48863 :::* -
udp6 0 0 :::111 :::* -
udp6 0 0 ::1:323 :::* -

[admin@SSM-On-Prem ~]$ netstat -nlptu | grep 8443
(Not all processes could be identified, non-owned process info
will not be shown, you would have to be root to see it all.)
tcp 0 0 0.0.0.0:8443 0.0.0.0:* LISTEN -
tcp6 0 0 :::8443 :::* LISTEN -

[axeleratorcisco]

Hi,

Thanks for the suggestion, but this didn't work back then.

I logged a call with Cisco and the outcome of it was "we don't support your hypervisor platform, only VmWare, as is stated in the install guide. We can not help you further."

The thing is, the install guide does provide a setup based on VMWare, but nowhere does it explicitly state "this only works on VMWare". It assumes that the reader will get this information by reading the document.

Oh well, couple weeks wasted having to prove to Cisco that no firewall was blocking, whilst i have sent along screenshots that my firewall indeed isn't blocking traffic (multiple times), but they will not read it. Had to create a VM in the same subnet just to prove that that without a firewall i still can't reach the port.

Support nowadays....