Data Center Security

 View Only
  • 1.  DCS agent on Linux showing offline.

    Posted Dec 18, 2022 10:54 PM
    Hi Expert,  May i know how do I restore a DCS agent on Linux to connect back to the DCS management console? 


  • 2.  RE: DCS agent on Linux showing offline.

    Posted Dec 19, 2022 10:09 AM
    1.) Go to the server directory on the DCS manager and get the agent-cert.ssl
    C:\Program Files (x86)\Symantec\Data Center Security Server\Server\agent-cert.ssl

    2.) Copy via scp or sftp the agent-cert.ssl to the Linux server. Put it in the /tmp directory

    3.) SSH to the server

    4.) Switch user to root
    sudo su -

    5.) Change to the agent IPS directory
    cd /opt/Symantec/sdcssagent/IPS

    6.) change to the sisips user
    su sisips

    7.) Install the agent-cert.ssl
    ./sisipsconfig.sh -c /tmp/agent-cert.ssl

    8.) Set the agent to point to the DCS Manager
    ./sisipsconfig.sh -h <server ip address or fqdn>

    9.) Verify the agent settings
    ./sisipsconfig.sh -view
    ./sisipsconfig.sh -export

    10.) Force agent registration
    ./sisipsconfig.sh -forcereg

    11.) Test agent to server communications
    ./sisipsconfig.sh -t

    12.) Check the DCS UMC console for the agent


  • 3.  RE: DCS agent on Linux showing offline.

    Posted Dec 22, 2022 12:08 AM
    Hi Shane 
    Thank you for your sharing. It is helpful. 
    I came across the following error message after running the command: su -sisips -c "/opt/Symantec/sdcssagent/IPS/sisipsconfig.sh -test"

    "Curl Error: CURLE_SSL_CONNECT_ERROR. Generic SSL connection error"

    Any idea what does it mean?