Few Cent OS linux agent issue

Usage and Config Platform
1

Dear All

I am working on BES 9.2 Deployment… My all ILMT component is in one Windows Server with SQL database.
Some of Cent OS Linux Server installed with 9.2.1 Version agent is not doing Software Scan .
Each time it says not reported under status.
I can See agent is working and showing the hardware inventory under Compuetrs … Last Reported date is correct.
Only Software inventory not coming… Software scan fixlet is returning not reported status.
Tried upgrade Software Scanner error - Status Not reported
Please help
Many thanks

2

This sounds like reports from the Cent OS client are making their way to it’s relay, but actions are not making their way down from the relay to the Cent OS client.

What version of Cent OS?

You need to open the firewall on the Cent OS client to allow UDP on port 52311 through. Try the following:

iptables -A INPUT -p udp --dport 52311 -j ACCEPT
firewall-cmd --zone=public --add-port=52311/udp --permanent

If the UDP notification packets are not getting through and command polling is not enabled, then it will take 24 hours (the default gather interval) for a client to notice a new action and it will stay in the “not reported” state until then.

It is a good idea to enable command polling on all clients once every 12 hours and more aggressively on clients with issues like this. You should still try to make the UDP notifications work though because if they do, then actions should start to process very fast.

###Related:

1 Like
3

Many Thanks jgstew for reply

Cent OS version is 6.6

IBM end point Manager Client version is 9.2.1
We have 52311 firewall port open in Firewall
Please advise
1- How to enable command Polling for 12 hours?
2- Which all configurations need to be changed to implement command polling in every 12 hours?
3- For UDP notifications hope

Appreciate your support

Thanks & Regards
Rajesh Agnihotri

4

I don’t know that your issue is definitely UDP notifications or lack of command polling. It is my best guess, but it could be more than that.

You should probably check any hardware firewalls between the CentOS client and it’s relay to see if they are blocking incoming UDP on 52311.

You need to enable the following settings to have command polling: (these settings will be for every 6 hours I believe)

_BESClient_Comm_CommandPollEnable=1
_BESClient_Comm_CommandPollIntervalSeconds=21600

This should already be in your console: http://bigfix.me/fixlet/details/237

Here are others I created that can deployed as a policy:

http://bigfix.me/fixlet/details/3798
http://bigfix.me/fixlet/details/3799

5

Many Thanks
I understand “http://bigfix.me/fixlet/details/237” is a BES file .
I am not sure how to add this file in End Point Manager Console and deploy in specific End Point Manager Clients?

How I can add additional policy in console and deploy in specific Servers.?

regards
rajesh

6

Do the following:

  • download the BES file
  • import it into the console
  • deploy it like you would any other Fixlet or Task.
1 Like