000027486 - AxM Agent 4.8 for IIS: Missing Access Manager IIS Agent utilities (ctagent_cacheflush & ct_agent reconfig)

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support Employee on Apr 21, 2017
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000027486
Applies ToAccess Manager Agent v4.8 for IIS
Microsoft IIS web server
IssueAxM Agent 4.8 for IIS:  The agent appears to be missing Access Manager IIS Agent utilities (ctagent_cacheflush & ct_agent_reconfig)
The 4.8 webagent for IIS (which is available for download on SecurCareOnLine, https://knowledge.rsasecurity.com) appears to be missing certain agent utilities that were in the 4.6 and 4.7 agent, why?
Resolution

Microsoft introduced the concept of multiple application pools in IIS 6 (and rolled this into IIS 7).   These pools are responsible for forking multiple instances of the RSA agent.  Therfore, multiple sockets with the same port number were created.  This behavior differs from IIS5, which did not fork multiple socket instances.  Subsequently, support for the console port and these commands was dropped IIS 6 and 7 Agents, as it is no longer applicable.

Because Access Manager Agent version 4.7 supported both IIS 5 and IIS 6, you will still find the utilities and the console.port parameter in the webagent.conf. It is important to note however that you cannot use this functionality with IIS 6 on the 4.7 agent.

Notes

While these utilities were included as part of a standard installation in the Cleartrust 4.6 IIS agent, it was removed from the 4.8 version (which supports IIS6 and IIS7).   

The below webagent.conf parameter creates a console port listener for incoming commands:

cleartrust.agent.console_port=5628


Also see Primus Solution a26131 
Legacy Article IDa49356

Attachments

    Outcomes