000029294 - Unable to WinSCP to appliance after buildsticking appliance using Security Analytics 10.4 or Security Analytics 10.4 P2 ISO

Document created by RSA Customer Support Employee on Jun 15, 2016Last modified by RSA Customer Support Employee on Apr 22, 2017
Version 3Show Document
  • View in full screen mode

Article Content

Article Number000029294
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: Decoder, Log Decoder, Concentrator, Hybrid, Broker, Malware Broker, All-in-One, Security Analytics Server
RSA Version/Condition: 10.4.0.0, 10.4.0.2
Platform: CentOS Linux
O/S Version: CentOS 6
IssueUnable to WinSCP to appliance after buildsticking appliance using Security Analytics 10.4 or Security Analytics 10.4 P2 ISO
When atttempting to connect, WinSCP returns the following message:
WinSCP error when attempting to connect
CauseThe first time you log into the appliance via Console/SSH you will receive the following prompt
Enter the IP address for the SA Server:

This is the result of the saApplPuppetInit.py script running from one of the following locations:


/usr/sbin/
or
/etc/netwitness/
Once a IP is accepted, it adds an entry such as the following to /etc/hosts:
192.168.1.10  puppetmaster.local
Where 192.168.1.10 is the IP address of the SA server in this case
WinSCP is hitting this prompt and failing to login.
ResolutionLog into appliance using SSH/Console and enter the IP of the SA server with the puppet master.
The next time you login you should not receive this prompt.
WinSCP should then also be able to connect to the file system.
 

Attachments

    Outcomes