Last weekend all of the Bigfix servers were moved to a new data center including the DMZ relay. I tested by sending an empty action after the move which worked. I should have tested by also sending something with a download. Downloads through the DMZ relay are not working. I assume that it is because of a firewall, but how can I prove it? The Bigfix logs do not seem to provide any evidence. The client debug log indicates that the download is on the relay, but downloads do not make it to the client, and fails with “downloads failed” message.
Turned out that our new firewall tool called Palo Alto Panorama was blocking dlls going out through the DMZ relay. That rule has been modified for Bigfix traffic.
2 Likes
Thanks for posting your solution!