IBM Security Guardium

Hi,

I have recently installed 11.3 machine and all of the parameters are provided. 

The machine is not ping-able from the other Vlans but its pinging from the machine which is on same host . Also the web page is not like opening properly on the Internet explorer as i think would need to install the chrome as well.

The issue is there is no firewall in between the vlan on which 8443 port can be allowed. 

I want to know is there is any kind of firewall that can be blocked on guardium machine.

------------------------------
Ather Mobeen
------------------------------

Hi Ather,

Have you checked if the ip or gate way was changed after install 11.3? Eg, you can run command "show network verify". Occasionally, the network may be misconfigured during the patch applying.

------------------------------
Jonathan LU
Security Support Engineer
IBM
Australia
------------------------------

Original Message:
Sent: Sun May 02, 2021 09:28 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi,

I have recently installed 11.3 machine and all of the parameters are provided. 

The machine is not ping-able from the other Vlans but its pinging from the machine which is on same host . Also the web page is not like opening properly on the Internet explorer as i think would need to install the chrome as well.

The issue is there is no firewall in between the vlan on which 8443 port can be allowed. 

I want to know is there is any kind of firewall that can be blocked on guardium machine.

------------------------------
Ather Mobeen
------------------------------

Hi Jonathan LU,

I have checked the details these are same as provided . Also I'm able to ping the gateway from Guardium Cli which I'm accessing through the VCenter console.


------------------------------
Ather Mobeen
------------------------------

Original Message:
Sent: Mon May 03, 2021 03:48 AM
From: Jonathan LU
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Ather,

Have you checked if the ip or gate way was changed after install 11.3? Eg, you can run command "show network verify". Occasionally, the network may be misconfigured during the patch applying.

------------------------------
Jonathan LU
Security Support Engineer
IBM
Australia

Original Message:
Sent: Sun May 02, 2021 09:28 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi,

I have recently installed 11.3 machine and all of the parameters are provided. 

The machine is not ping-able from the other Vlans but its pinging from the machine which is on same host . Also the web page is not like opening properly on the Internet explorer as i think would need to install the chrome as well.

The issue is there is no firewall in between the vlan on which 8443 port can be allowed. 

I want to know is there is any kind of firewall that can be blocked on guardium machine.

------------------------------
Ather Mobeen
------------------------------

Thanks for the info. Please raise a case to reach Guardium Support. It seems root access is required for the further investigation.

------------------------------
Jonathan LU
Security Support Engineer
IBM
Australia
------------------------------

Original Message:
Sent: Mon May 03, 2021 03:55 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Jonathan LU,

I have checked the details these are same as provided . Also I'm able to ping the gateway from Guardium Cli which I'm accessing through the VCenter console.


------------------------------
Ather Mobeen

Original Message:
Sent: Mon May 03, 2021 03:48 AM
From: Jonathan LU
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Ather,

Have you checked if the ip or gate way was changed after install 11.3? Eg, you can run command "show network verify". Occasionally, the network may be misconfigured during the patch applying.

------------------------------
Jonathan LU
Security Support Engineer
IBM
Australia

Original Message:
Sent: Sun May 02, 2021 09:28 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi,

I have recently installed 11.3 machine and all of the parameters are provided. 

The machine is not ping-able from the other Vlans but its pinging from the machine which is on same host . Also the web page is not like opening properly on the Internet explorer as i think would need to install the chrome as well.

The issue is there is no firewall in between the vlan on which 8443 port can be allowed. 

I want to know is there is any kind of firewall that can be blocked on guardium machine.

------------------------------
Ather Mobeen
------------------------------

Hi Jonathan,

Already opened a case with IBM and there is another issue IBM has suggested some of the commands to execute. After running those commands there are logs gathered in /var/ .... directory and to collect those I need to access the machine while using WinSCP etc. but i am unable to do so as well .

------------------------------
Ather Mobeen
------------------------------

Original Message:
Sent: Mon May 03, 2021 09:20 AM
From: Jonathan LU
Subject: Newly Installed 11.3 | Web Console unaccesible

Thanks for the info. Please raise a case to reach Guardium Support. It seems root access is required for the further investigation.

------------------------------
Jonathan LU
Security Support Engineer
IBM
Australia

Original Message:
Sent: Mon May 03, 2021 03:55 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Jonathan LU,

I have checked the details these are same as provided . Also I'm able to ping the gateway from Guardium Cli which I'm accessing through the VCenter console.


------------------------------
Ather Mobeen

Original Message:
Sent: Mon May 03, 2021 03:48 AM
From: Jonathan LU
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Ather,

Have you checked if the ip or gate way was changed after install 11.3? Eg, you can run command "show network verify". Occasionally, the network may be misconfigured during the patch applying.

------------------------------
Jonathan LU
Security Support Engineer
IBM
Australia

Original Message:
Sent: Sun May 02, 2021 09:28 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi,

I have recently installed 11.3 machine and all of the parameters are provided. 

The machine is not ping-able from the other Vlans but its pinging from the machine which is on same host . Also the web page is not like opening properly on the Internet explorer as i think would need to install the chrome as well.

The issue is there is no firewall in between the vlan on which 8443 port can be allowed. 

I want to know is there is any kind of firewall that can be blocked on guardium machine.

------------------------------
Ather Mobeen
------------------------------

Hi Ather,

I suppose you got some support execute commands. You can try to get new commands to generate new logs under /opt/ibm/guardium/log, then they can be downloaded from fileserver.

------------------------------
Jonathan LU
Security Support Engineer
IBM
Australia
------------------------------

Original Message:
Sent: Mon May 03, 2021 09:32 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Jonathan,

Already opened a case with IBM and there is another issue IBM has suggested some of the commands to execute. After running those commands there are logs gathered in /var/ .... directory and to collect those I need to access the machine while using WinSCP etc. but i am unable to do so as well .

------------------------------
Ather Mobeen

Original Message:
Sent: Mon May 03, 2021 09:20 AM
From: Jonathan LU
Subject: Newly Installed 11.3 | Web Console unaccesible

Thanks for the info. Please raise a case to reach Guardium Support. It seems root access is required for the further investigation.

------------------------------
Jonathan LU
Security Support Engineer
IBM
Australia

Original Message:
Sent: Mon May 03, 2021 03:55 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Jonathan LU,

I have checked the details these are same as provided . Also I'm able to ping the gateway from Guardium Cli which I'm accessing through the VCenter console.


------------------------------
Ather Mobeen

Original Message:
Sent: Mon May 03, 2021 03:48 AM
From: Jonathan LU
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Ather,

Have you checked if the ip or gate way was changed after install 11.3? Eg, you can run command "show network verify". Occasionally, the network may be misconfigured during the patch applying.

------------------------------
Jonathan LU
Security Support Engineer
IBM
Australia

Original Message:
Sent: Sun May 02, 2021 09:28 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi,

I have recently installed 11.3 machine and all of the parameters are provided. 

The machine is not ping-able from the other Vlans but its pinging from the machine which is on same host . Also the web page is not like opening properly on the Internet explorer as i think would need to install the chrome as well.

The issue is there is no firewall in between the vlan on which 8443 port can be allowed. 

I want to know is there is any kind of firewall that can be blocked on guardium machine.

------------------------------
Ather Mobeen
------------------------------

Hi Jonathan,

Thanks for the feedback. can you please let me know the procedure of getting logs as machine is inaccessible from winscp.

------------------------------
Ather Mobeen
------------------------------

Original Message:
Sent: Tue May 04, 2021 08:17 AM
From: Jonathan LU
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Ather,

I suppose you got some support execute commands. You can try to get new commands to generate new logs under /opt/ibm/guardium/log, then they can be downloaded from fileserver.

------------------------------
Jonathan LU
Security Support Engineer
IBM
Australia

Original Message:
Sent: Mon May 03, 2021 09:32 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Jonathan,

Already opened a case with IBM and there is another issue IBM has suggested some of the commands to execute. After running those commands there are logs gathered in /var/ .... directory and to collect those I need to access the machine while using WinSCP etc. but i am unable to do so as well .

------------------------------
Ather Mobeen

Original Message:
Sent: Mon May 03, 2021 09:20 AM
From: Jonathan LU
Subject: Newly Installed 11.3 | Web Console unaccesible

Thanks for the info. Please raise a case to reach Guardium Support. It seems root access is required for the further investigation.

------------------------------
Jonathan LU
Security Support Engineer
IBM
Australia

Original Message:
Sent: Mon May 03, 2021 03:55 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Jonathan LU,

I have checked the details these are same as provided . Also I'm able to ping the gateway from Guardium Cli which I'm accessing through the VCenter console.


------------------------------
Ather Mobeen

Original Message:
Sent: Mon May 03, 2021 03:48 AM
From: Jonathan LU
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Ather,

Have you checked if the ip or gate way was changed after install 11.3? Eg, you can run command "show network verify". Occasionally, the network may be misconfigured during the patch applying.

------------------------------
Jonathan LU
Security Support Engineer
IBM
Australia

Original Message:
Sent: Sun May 02, 2021 09:28 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi,

I have recently installed 11.3 machine and all of the parameters are provided. 

The machine is not ping-able from the other Vlans but its pinging from the machine which is on same host . Also the web page is not like opening properly on the Internet explorer as i think would need to install the chrome as well.

The issue is there is no firewall in between the vlan on which 8443 port can be allowed. 

I want to know is there is any kind of firewall that can be blocked on guardium machine.

------------------------------
Ather Mobeen
------------------------------

Hi Ather,

Machine is inaccessible, you have to rely on Support to login with root access via local console. It is not able to get the logs via winscp. Thanks.

------------------------------
Jonathan LU
Security Support Engineer
IBM
------------------------------

Original Message:
Sent: Wed May 05, 2021 03:57 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Jonathan,

Thanks for the feedback. can you please let me know the procedure of getting logs as machine is inaccessible from winscp.

------------------------------
Ather Mobeen

Original Message:
Sent: Tue May 04, 2021 08:17 AM
From: Jonathan LU
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Ather,

I suppose you got some support execute commands. You can try to get new commands to generate new logs under /opt/ibm/guardium/log, then they can be downloaded from fileserver.

------------------------------
Jonathan LU
Security Support Engineer
IBM
Australia

Original Message:
Sent: Mon May 03, 2021 09:32 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Jonathan,

Already opened a case with IBM and there is another issue IBM has suggested some of the commands to execute. After running those commands there are logs gathered in /var/ .... directory and to collect those I need to access the machine while using WinSCP etc. but i am unable to do so as well .

------------------------------
Ather Mobeen

Original Message:
Sent: Mon May 03, 2021 09:20 AM
From: Jonathan LU
Subject: Newly Installed 11.3 | Web Console unaccesible

Thanks for the info. Please raise a case to reach Guardium Support. It seems root access is required for the further investigation.

------------------------------
Jonathan LU
Security Support Engineer
IBM
Australia

Original Message:
Sent: Mon May 03, 2021 03:55 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Jonathan LU,

I have checked the details these are same as provided . Also I'm able to ping the gateway from Guardium Cli which I'm accessing through the VCenter console.


------------------------------
Ather Mobeen

Original Message:
Sent: Mon May 03, 2021 03:48 AM
From: Jonathan LU
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Ather,

Have you checked if the ip or gate way was changed after install 11.3? Eg, you can run command "show network verify". Occasionally, the network may be misconfigured during the patch applying.

------------------------------
Jonathan LU
Security Support Engineer
IBM
Australia

Original Message:
Sent: Sun May 02, 2021 09:28 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi,

I have recently installed 11.3 machine and all of the parameters are provided. 

The machine is not ping-able from the other Vlans but its pinging from the machine which is on same host . Also the web page is not like opening properly on the Internet explorer as i think would need to install the chrome as well.

The issue is there is no firewall in between the vlan on which 8443 port can be allowed. 

I want to know is there is any kind of firewall that can be blocked on guardium machine.

------------------------------
Ather Mobeen
------------------------------

Hi Jonathan,

Thanks for the support. The case was already opened with IBM.


------------------------------
Ather Mobeen
------------------------------

Original Message:
Sent: Thu May 06, 2021 07:22 PM
From: Jonathan LU
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Ather,

Machine is inaccessible, you have to rely on Support to login with root access via local console. It is not able to get the logs via winscp. Thanks.

------------------------------
Jonathan LU
Security Support Engineer
IBM

Original Message:
Sent: Wed May 05, 2021 03:57 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Jonathan,

Thanks for the feedback. can you please let me know the procedure of getting logs as machine is inaccessible from winscp.

------------------------------
Ather Mobeen

Original Message:
Sent: Tue May 04, 2021 08:17 AM
From: Jonathan LU
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Ather,

I suppose you got some support execute commands. You can try to get new commands to generate new logs under /opt/ibm/guardium/log, then they can be downloaded from fileserver.

------------------------------
Jonathan LU
Security Support Engineer
IBM
Australia

Original Message:
Sent: Mon May 03, 2021 09:32 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Jonathan,

Already opened a case with IBM and there is another issue IBM has suggested some of the commands to execute. After running those commands there are logs gathered in /var/ .... directory and to collect those I need to access the machine while using WinSCP etc. but i am unable to do so as well .

------------------------------
Ather Mobeen

Original Message:
Sent: Mon May 03, 2021 09:20 AM
From: Jonathan LU
Subject: Newly Installed 11.3 | Web Console unaccesible

Thanks for the info. Please raise a case to reach Guardium Support. It seems root access is required for the further investigation.

------------------------------
Jonathan LU
Security Support Engineer
IBM
Australia

Original Message:
Sent: Mon May 03, 2021 03:55 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Jonathan LU,

I have checked the details these are same as provided . Also I'm able to ping the gateway from Guardium Cli which I'm accessing through the VCenter console.


------------------------------
Ather Mobeen

Original Message:
Sent: Mon May 03, 2021 03:48 AM
From: Jonathan LU
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi Ather,

Have you checked if the ip or gate way was changed after install 11.3? Eg, you can run command "show network verify". Occasionally, the network may be misconfigured during the patch applying.

------------------------------
Jonathan LU
Security Support Engineer
IBM
Australia

Original Message:
Sent: Sun May 02, 2021 09:28 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi,

I have recently installed 11.3 machine and all of the parameters are provided. 

The machine is not ping-able from the other Vlans but its pinging from the machine which is on same host . Also the web page is not like opening properly on the Internet explorer as i think would need to install the chrome as well.

The issue is there is no firewall in between the vlan on which 8443 port can be allowed. 

I want to know is there is any kind of firewall that can be blocked on guardium machine.

------------------------------
Ather Mobeen
------------------------------

Not sure if this applies but after several of our 11.3 appliance upgrades, we had to go to the VM console and found that it required a Ctrl+D to move along. I have heard of other issues with networking being reset. So you might need to do some checking from the VM console.

------------------------------
Jennifer Dodson
------------------------------

Original Message:
Sent: Sun May 02, 2021 09:28 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi,

I have recently installed 11.3 machine and all of the parameters are provided. 

The machine is not ping-able from the other Vlans but its pinging from the machine which is on same host . Also the web page is not like opening properly on the Internet explorer as i think would need to install the chrome as well.

The issue is there is no firewall in between the vlan on which 8443 port can be allowed. 

I want to know is there is any kind of firewall that can be blocked on guardium machine.

------------------------------
Ather Mobeen
------------------------------

Hi Jennifer Dodson,

Thanks for the response . Let me check while executing the above command , also please suggest me if it does have any impact on machine rather than closing the terminal only.

------------------------------
Ather Mobeen
------------------------------

Original Message:
Sent: Mon May 03, 2021 08:39 AM
From: Jennifer Dodson
Subject: Newly Installed 11.3 | Web Console unaccesible

Not sure if this applies but after several of our 11.3 appliance upgrades, we had to go to the VM console and found that it required a Ctrl+D to move along. I have heard of other issues with networking being reset. So you might need to do some checking from the VM console.

------------------------------
Jennifer Dodson

Original Message:
Sent: Sun May 02, 2021 09:28 AM
From: Ather Mobeen
Subject: Newly Installed 11.3 | Web Console unaccesible

Hi,

I have recently installed 11.3 machine and all of the parameters are provided. 

The machine is not ping-able from the other Vlans but its pinging from the machine which is on same host . Also the web page is not like opening properly on the Internet explorer as i think would need to install the chrome as well.

The issue is there is no firewall in between the vlan on which 8443 port can be allowed. 

I want to know is there is any kind of firewall that can be blocked on guardium machine.

------------------------------
Ather Mobeen
------------------------------