000035754 - Cloudtrail event source test connection fails for proxy authentication with an error in RSA Security Analytics

Document created by RSA Customer Support Employee on Nov 18, 2017Last modified by RSA Customer Support Employee on Mar 26, 2019
Version 2Show Document
  • View in full screen mode

Article Content

Article Number000035754
Applies ToRSA Product Set: NetWitness Logs & Packets, Security Analytics
RSA Product/Service Type: Log Collector, User Interface
RSA Version/Condition: 10.6.4, 10.6.5
Platform: CentOS
O/S Version: EL6
IssueWhen you edit a Cloudtrail event source configured with a proxy, the test connection fails with an error related to proxy authentication even though the proxy password has not changed.
The following error can be found in logcollector /var/log/messages:

Test connection failed:unspecified error connecting to S3, check network connection and make sure bucket name 'sa-vlc-ct' and aws prefix 'cloudtrail-/AWSLogs/907171583576/CloudTrail/us-west-1/' are spelled correctly: [Errno -71] Error talking to HTTP proxy testproxy.sa.emc.com:3128: 407 (Proxy Authentication Required) could not connect to bucket

ResolutionThis issue is currently being investigated by the Engineering team in order to resolve it in a future release.
If you are experiencing this issue, contact RSA Customer Support and quote this article number for further assistance.
WorkaroundPerform the following steps:
  1. Re-enter the Proxy Password and Secret key.
  2. Click Test Connection which will result in the test connection being successful.
  3. Click Save.
The event source configuration is saved successfully.