Skip to main content
NetApp Knowledge Base

Workload Security configuration fails for ONTAP SVMs due to agent server firewall setup

  1. Last updated
  2. Save as PDF
Views:
441
Visibility:
Public
Votes:
0
Category:
data-infrastructure-insights
Specialty:
bluexp_insights
Last Updated:

Applies to

  • ONTAP 9.x
  • Workload Security (WS)
  • RHEL/CentOS Workload security agent

Issue

  • Adding ONTAP SVMs as data collectors fail in WS through cluster IP
  • Workload Security agent and the ONTAP can be in same subnet and no external firewall is configured between them
  • If there is external firewall present, required ports are allowed and firewall logs show traffic
  • Error in GUI: Connector is in error state. Service.name: audit. Reason for failure: External fpolicy server terminated
  • FPOLICY-MLOG-TXT.GZ :

 [kern_fpolicy:error:7503] LIF_availability_check call Failed with error[-1]. [0x0x807e78a00] src/fsm/fsm_external_engine.cc:5139
 [kern_fpolicy:error:7503] Establish TCP connection returned error.[0x0x807e78a00] src/fsm/fsm_external_engine.cc:5042
 [virtual smdb_error fpolicy_appcfg_server_status_db_iterator::notify_imp(smdb_cdb_iterator::operation)] operation: [modify], policy: [3]

  • EMS-LOG-FILE.GZ:

Sun Feb 12 23:53:45 +0200 [<node_name>]: fpolicy: fpolicy.server.connectError:error]: Node failed to establish a connection with the FPolicy server "<CS_Agent IP>" (reason: "TCP Connection to FPolicy server failed.").

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.