v8.4 Content Gateway Error: Unable to register with the forensics repository
- Article Number: 000014129
- Products: Forcepoint Web Security
- Version: 8.4
- Last Published Date: Thu Dec 07 06:53:41 GMT 2017
After installing Forcepoint Content Gateway v8.4 on a Red Hat Linux v7.2 server, the following alert is returned in the Content Gateway Manager:
aupdc-fpt01p [Tue Sep 5 16:54:34 2017] Unable to register with the forensics repository at 10.10.10.01. Portions of the Threats dashboard will not have forensics data. To attempt to register with the repository again, clear this alarm and restart Content Gateway (exit code: 2).
WCG needs to connect to the Policy Broker to pass forensics data to the Threats Dashboard for analysis and reporting. If this connection fails, then this information will not be available.
To confirm this issue, you would need connect the Linux Server using Putty (SSH over port 22) where Content Gateway is installed.
If you are using a Websense Appliance, please contact Tech Support for assistance with this.
Once connected, check the /opt/WCG/dss_registration.log and see if the following error is returned:
Registration Failed (Can't locate Switch.pm in @INC (@INC contains: /usr/local/lib64/perl5 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5 .) at /opt/websense/PolicyEngine/managePolicyEngine line 4.
If you find this error, this means that Perl Switch Module needs to be installed so that WCG can communicate with the Policy Broker successfully.
Once completed, restart the Content Gateway services
# ./WCGAdmin restart
After Content Gateway has been restarted, this error should now be resolved. You should now see a message in the /opt/WCG/dss_registration.log showing the connection is now successful:
Tue Sep 26 11:05:27 AEST 2017 Software register: /opt/websense/PolicyEngine/managePolicyEngine --command register --manager 10.10.10.01 --manager_mode WSG_APT --cluster_id 88ed6ad1-4d9a-4c85-8853-ecc9d57927a7 --agent_type 1950 --version 22.214.171.124.el7 Registration Success WSG_APT
Notes & Warnings
The following shows the full installation output when installing cpan:[root@wsg1 ~]# cpan
CPAN.pm requires configuration, but most of it can be done automatically. If you answer 'no' below, you will enter an interactive dialog for each configuration option instead. Would you like to configure as much as possible automatically? [yes] yes <install_help> Warning: You do not have write permission for Perl library directories. To install modules, you need to configure a local Perl library directory or escalate your privileges. CPAN can help you by bootstrapping the local::lib module or by configuring itself to use 'sudo' (if available). You may also resolve this problem manually if you need to customize your setup. What approach do you want? (Choose 'local::lib', 'sudo' or 'manual') [local::lib] sudo Autoconfigured everything but 'urllist'. Now you need to choose your CPAN mirror sites. You can let me pick mirrors for you, you can select them from a list or you can enter them by hand. Would you like me to automatically choose some CPAN mirror sites for you? (This means connecting to the Internet) [yes] yes Trying to fetch a mirror list from the Internet Fetching with LWP: http://www.perl.org/CPAN/MIRRORED.BY Looking for CPAN mirrors near you (please be patient) ........................ done! New urllist http://mirror.optusnet.com.au/CPAN/ http://mirror.intergrid.com.au/cpan/ http://cpan.mirror.digitalpacific.com.au/ Autoconfiguration complete. commit: wrote '/root/.cpan/CPAN/MyConfig.pm' You can re-run configuration any time with 'o conf init' in the CPAN shell Terminal does not support AddHistory. cpan shell -- CPAN exploration and modules installation (v1.9800) Enter 'h' for help. cpan> install Switch Fetching with LWP: http://mirror.optusnet.com.au/CPAN/authors/01mailrc.txt.gz Reading '/root/.cpan/sources/authors/01mailrc.txt.gz' ............................................................................DONE Fetching with LWP: http://mirror.optusnet.com.au/CPAN/modules/02packages.details.txt.gz Reading '/root/.cpan/sources/modules/02packages.details.txt.gz' Database was generated on Wed, 27 Sep 2017 19:53:48 GMT ............. New CPAN.pm version (v2.16) available. [Currently running version is v1.9800] You might want to try install CPAN reload cpan to both upgrade CPAN.pm and run the new version without leaving the current session. ...............................................................DONE Fetching with LWP: http://mirror.optusnet.com.au/CPAN/modules/03modlist.data.gz Reading '/root/.cpan/sources/modules/03modlist.data.gz' DONE Writing /root/.cpan/Metadata Running install for module 'Switch' Running make for C/CH/CHORNY/Switch-2.17.tar.gz Fetching with LWP: http://mirror.optusnet.com.au/CPAN/authors/id/C/CH/CHORNY/Switch-2.17.tar.gz Fetching with LWP: http://mirror.optusnet.com.au/CPAN/authors/id/C/CH/CHORNY/CHECKSUMS Checksum for /root/.cpan/sources/authors/id/C/CH/CHORNY/Switch-2.17.tar.gz ok Scanning cache /root/.cpan/build for sizes DONE CPAN.pm: Building C/CH/CHORNY/Switch-2.17.tar.gz Checking if your kit is complete... Looks good Writing Makefile for Switch Could not read metadata file. Falling back to other methods to determine prerequisites cp Switch.pm blib/lib/Switch.pm Manifying blib/man3/Switch.3pm CHORNY/Switch-2.17.tar.gz /usr/bin/make -- OK 'YAML' not installed, will not store persistent state Running make test PERL_DL_NONLAZY=1 /usr/bin/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'blib/lib', 'blib/arch')" t/*.t t/given.t ... ok t/nested.t .. ok t/switch.t .. ok All tests successful. Files=3, Tests=590, 1 wallclock secs ( 0.04 usr 0.00 sys + 0.28 cusr 0.01 csys = 0.33 CPU) Result: PASS CHORNY/Switch-2.17.tar.gz /usr/bin/make test -- OK Running make install Manifying blib/man3/Switch.3pm Installing /usr/local/share/perl5/Switch.pm Installing /usr/local/share/man/man3/Switch.3pm Appending installation info to /usr/lib64/perl5/perllocal.pod CHORNY/Switch-2.17.tar.gz sudo /usr/bin/make install -- OK cpan> exit Terminal does not support GetHistory. Lockfile removed. [root@wsg1 ~]#