SmartNet collector is not routing through proxy server

[MongkholNgaokaew60747]

Hi There,

Just having issue with smartnet collect not going through the proxy setting/server.

We have checked the proxy server and smartnet collect is not making connection with proxy server at all and tempting to connect cisco smartnet collector database directly which resulted being blocked and received error message below.

Can someone please assist?? or is this proxy settings in the CSCP is not actual  functionally feature?

UploadJobGroup Upload failed. A connectivity exception occured while processing the request. The Exception is HTTPs TransportMode has Failed Connection to https //72.163.7.113 refused

[marce1000]

 - Proxy servers usually require extra attention and setups for terminating and or forwarding https connections. Does your proxy server fully support https ?

 M.

[MongkholNgaokaew60747]

thank you for response @marce1000  and yep. Our proxy server is fully supported https

[marce1000]

 - Ok, what's in the log of the proxy server for this particular https request ?

  M.

[MongkholNgaokaew60747]

@marce1000,

There's no logs in the proxy server at all. The only logs we have is the firewall.

On the DNS and proxy settings, we did test the settings and it came back green the first time, but had an issue with the SmartNet VM so had to re-install the image then tried to config DNS and proxy again with the same details but now coming back failed. 

[marce1000]

 - What kind of proxy server are you using - include brand + software version ?

   M.

[MongkholNgaokaew60747]

Hi,

it's ForcePoint Web Security – version 8.5.0

[marce1000]

 - I am no specialist on this product but it should be able to provide logging capabilities as the link below indicates :

     https://www.websense.com/content/support/library/web/hosted/traffic_logging/first.aspx

 M.

[Cristian Matei]

Hi,

    You sure you configured the proxy fro m the GUI correctly? Both IP, port, authentication? Try configuring it from CLI, using command "conf proxy". Run the following command and see if connections is build successful and if it gets proxied:

curl --tlsv1.2 https://concsoweb-prd.cisco.com/HeadEndWebAppServlet/ -v -k

Regards,

Cristian Matei.

[MongkholNgaokaew60747]

Hi @Cristian Matei,

yep it was all green ticks when did the first time unless SmartNet didn't authenticate the DNS and proxy settings but showing green ticks as the settings have been saved?

that would be another question, because I tried to access VM after the GUI interface is up and running, I can't ssh or access the VM directly anymore unless this is a bug. It logged me in then closes the ssh window, the VM side - after logged in it refreshes the screen then ask me to log in again..  so can't really go to the backend anymore.. 

[MongkholNgaokaew60747]

Hi @Cristian Matei @marce1000 

just re-installed the OVA and setup the DNS and proxy settings again and said the settings configured successfully. (please see attached)

now getting this error "_sntc1x_min_cp_CPExport_1583803149951 Upload failed. Connectivity service is not running " (please see screenshot)

[Cristian Matei]

Hi,

   Do you have any firewalls which are dropping IP/ICMP traffic to 72.163.7.113 ? Make sure this is allowed.

Regards,

Cristian Matei.

[MongkholNgaokaew60747 · Accepted solution]

thank you everyone helping to fix this issue. it was company proxy stopped the connection.