Gather Issues (bessecurity) from DSA Server

Usage and Config Platform
1

Weird one … We have setup a replicated server using DSA. Clients connected directly to this server are failing to gather content from bessecurity only (FAILED to Synchronize - General transport failure. - 'http://MY SERVER:PORT/cgi-bin/bfenterprise/BESGatherMirror.exe?url=http://sync.bigfix.com/cgi-bin/bfgather/bessecurity)

Content from other external sites are fine. I have flipped a client to use a regular relay (not DSA) and the bessecurity content gathers fine, so appears the issue is related directly to the DSA server. Its configured to gather external content via a proxy, but where I’m stumped is that all other external sites appear to be gathering except for bessecurity.

Platform version 9.2.5.130

Anyone seen this before, and know the fix ?

2

Hi Nick,

What does the Gather Status Report show on the DSA server for the bessecurity site?

‘http://dsa server:port/cgi-bin/bfenterprise/BESGatherMirrorNew.exe’

3

Hi Aram,

Here is the response -

Failed:

Id: 4 Date: Thu, 19 Nov 2015 13:41:45 +0000
Url: http://sync.bigfix.com/cgi-bin/bfgather/bessecurity
Error Message: 4: GetURL failure on http://sync.bigfix.com/bfsites/bessecurity_2372/JPN.xlat: HTTP Error 28: Timeout was reached

4

This error/timeout is highly suggestive of the proxy blocking the xlat file in question.

1 Like
5

strange because I don’t see that error through any other server or relay …?

6

the primary server has a similar response, different site -

http://sync.bigfix.com/bfsites/linuxrpmpatching_649/DEPGRAPHS.RSC

if I hit the url direct in a browser it doesn’t load.

Is there a way to increase the timeout, or perhaps there’s an issue with ibm’s content ??

7

There are lots of reasons why testing the link via a browser may work, but a proxy may still block the download for the Root Server. Testing the download would require leveraging a utility such as cURL and matching the configuration of the Root Server fairly specifically (including potential settings like UserAgentString).

A network packet capture from the DSA Server might give you more context as to what is blocking the download and why.

Alternatively, you might try the AirGap process to validate that the issue is with Internet connectivity: http://www-01.ibm.com/support/knowledgecenter/SS6MER_9.2.0/com.ibm.tivoli.tem.doc_9.2/Platform/Config/c_airgap_tool_windows.html?lang=en

1 Like