000029645 - RSA NetWitness Endpoint error occurs when you right-click on Analyze Module in NWE UI

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support on Dec 9, 2019
Version 5Show Document
  • View in full screen mode

Article Content

Article Number000029645
Applies ToRSA Product Set: NetWitness Endpoint formerly ECAT
RSA Version/Condition: 4.4.x
Platform: Windows
O/S Version: 2008 Server R2 x64 and above
IssueIn the NWE UI > Machines > double-click a machine, Files tab, when right-clicking on a File Name from within the machine's Downloaded tab, then choose the option "Analyze Module",  the following error pop message is observed:

Unable to access the selected file(s). Specify the location of Files directory in Configure > Connection..

User-added image

The same error would occur in the NWE UI > Modules, when selecting a downloaded module, right-click and choose the option "Analyze Module".
ResolutionTo resolve the issue, follow the steps below.
  1. Log into NWE UI on the computer that has this issue.
  2. Click on Configure then Connection.
  3. For the "Files UNC Path:" configuration parameter, enter the correct path to the NetWitness Endpoint Files folder.
    In the below example the Files folder (E:\ECAT\Server\Files) is on the computer which is running the NWE UI.
    Enter a UNC Path if the Files folder is on another computer from the running NWE UI program.  Also, note remote access permission to the UNC Path is required.
  4. Save changes.
    User-added image