000029294 - Unable to WinSCP to appliance after buildsticking appliance using RSA Security Analytics 10.x ISO

Document created by RSA Customer Support Employee on Jun 15, 2016Last modified by RSA Customer Support on Sep 6, 2019
Version 4Show Document
  • View in full screen mode

Article Content

Article Number000029294
Applies ToRSA Product Set: RSA NetWitness Logs & Network
RSA Product/Service Type: Decoder, Log Decoder, Concentrator, Hybrid, Broker, Malware Broker, All-in-One, Security Analytics Server
RSA Version/Condition: 10.x
Platform: CentOS
O/S Version: CentOS 6
IssueUnable to WinSCP to appliance after buildsticking appliance using Security Analytics 10.x ISO.  When attempting to connect, WinSCP returns the following message:

Error skipping startup message.  Your shell is probably incompatible with the application (BASH Is recommended).

WinSCP error when attempting to connect
CauseThe first time you log into the appliance via Console/SSH you will receive the following prompt

Enter the IP address for the SA Server:

This is the result of the saApplPuppetInit.py script running from either /usr/sbin/ or /etc/netwitness/.

Once an IP is accepted, it adds an entry such as the following to /etc/hosts:  puppetmaster.local

where is the IP address of the SA server in this case.

WinSCP is hitting this prompt and failing to login.
ResolutionLog into the appliance using SSH/Console and enter the IP of the SA server with the puppet master. The next time you login, you should not receive this prompt.

WinSCP should then also be able to connect to the file system.