|Applies To||RSA Product Set: RSA NetWitness Logs & Network|
RSA Product/Service Type: Decoder, Log Decoder, Concentrator, Hybrid, Broker, Malware Broker, All-in-One, Security Analytics Server
RSA Version/Condition: 10.x
O/S Version: CentOS 6
|Issue||Unable to WinSCP to appliance after buildsticking appliance using Security Analytics 10.x ISO. When attempting to connect, WinSCP returns the following message:|
Error skipping startup message. Your shell is probably incompatible with the application (BASH Is recommended).
|Cause||The first time you log into the appliance via Console/SSH you will receive the following prompt|
This is the result of the saApplPuppetInit.py script running from either /usr/sbin/ or /etc/netwitness/.
Once an IP is accepted, it adds an entry such as the following to /etc/hosts:
where 192.168.1.10 is the IP address of the SA server in this case.
WinSCP is hitting this prompt and failing to login.
|Resolution||Log into the appliance using SSH/Console and enter the IP of the SA server with the puppet master. The next time you login, you should not receive this prompt.|
WinSCP should then also be able to connect to the file system.