CA PAM 3.2 Intregate with Threat Analytics

[Daniela Rivera]

Hello,

 

I have a problem  with the integration between threat analytics y CA PAM Server.Actually I have a cluster in active-active mode and when I try to Configure the Threat Engine to use the CA PAM Adapter I get this:

 

 

I checked the connection between CA PAM and TH, and everthing seen be right.

I Checked if the TA user CATapApiUser is enabled in PAM,and it was.

I have the External REST API option enable.

 

What could be happened?

 

Thanks,

[Maria Celeste Catena]

Hi Daniela, how are you?

 

Ensure that the CATAPuser-n matches with the -n in the target accounts.

Go to Credentials >> Manage Targets >> Target Accounts.

And search for the CATapApiUser-n

In your case check that CATapApiUser-3 exists in Target Accounts

Also go to Users > Manage Users > select CATapApiUser and go to the API Keys. is CATapApiUser-3  enable?

 

Check also:

https://comm.support.ca.com/kb/error-pam-cm-0264-unable-to-retrieve-risk-levels-from-server/KB000103121

 

Also check the that TA and PAM have the same subnet Mask configured.

 

Thanks,
Regards,

Celeste

[Daniela Rivera]

Thank you Celeste, I verified that and the CATapApiUser-3  is enable maybe could be a problem with the NTP configuration ?

[Maria Celeste Catena]

Hi Daniela, 

Did you check the Network Settings? 

This is another reason why could be failing.

I remember a similar case. Take a look at this Document:

Unable to activate networking in CA PAM Threat Ana - CA Knowledge 

 

Thanks,
Regards,
Celeste