Issue:
There is an issue with scan nodes not being able to connect to F-Secure back-end servers. In short, the Last seen and Engine update indicators on https://portal.radar.f-secure.com/mmc/settings/scannodes.aspx show a delay of more than 3-4 minutes.
Resolution:
To troubleshoot the scan node connectivity:
1. Make sure that the F-Secure Radar Scan Node Agent (legacy name= Karhu.Scan.Daemon) service is running. Check this by using Windows Task Manager or Windows Local Service.
2. Make sure that the Windows credentials used to run the F-Secure Radar Scan Node Agent (Karhu.Scan.Daemon) service are able to log in.
3. While logged in with these Windows credentials, run the following command: C:\Program Files (x86)\F-Secure\RadarScanAgent>FSRadarAgent.exe --test
Note: This runs a connectivity test against our Radar Update server back-end. There should be no visible problems or errors while the previous test executes.
4. Ensure that using a browser to access the Security Center portal or https://portal.radar.f-secure.com, https://api.radar.f-secure.com and https://updates.radar.f-secure.com works.
5. Also check if there are any changes in the network configuration or if the connection needs a proxy for outbound traffic.
If you need to configure or check the current http-proxy settings, you can open the Radar Scan node - Control Center application. Proxy related settings are visible in the Settings pane and are listed below.
Communication.WebSerivce.WSNG.Binding.ProxyAddress
Communication.WebSerivce.WSNG.Binding.BypassProxyOnLocal
Communication.WebSerivce.WSNG.Binding.UseDefaultWebProxy
Communication.WebSerivce.SSNG.Binding.ProxyAddress
Communication.WebSerivce.SSNG.Binding.BypassProxyOnLocal
Communication.WebSerivce.SSNG.Binding.UseDefaultWebProxy
Communication.WebSerivce.PSNG.Binding.ProxyAddress
Communication.WebSerivce.PSNG.Binding.BypassProxyOnLocal
Communication.WebSerivce.PSNG.Binding.UseDefaultWebProxy
Communication.WebSerivce.Updates.Binding.ProxyAddress
Communication.WebSerivce.Updates.Binding.BypassProxyOnLocal
Communication.WebSerivce.Updates.Binding.UseDefaultWebProxy
Communication.WebRequest.Updates.ProxyFileTransferTimeout
By default, the scan node agent respects operating system proxy settings. On Windows, you can specify a web proxy in Internet Options (Connections -> Lan Settings). However, you have to configure it for the specific user (or service) account. Internet Explorer options are customized for each specific Windows account. Usually, the following procedure works in applying proxy settings to the Radar Scan Node Agent:
- identify which user (or service) account Radar Scan Node Agent uses.
- log in to the system using this account.
- configure the Internet Option proxy settings.
- restart the Radar Scan Node Agent Service (net stop "f-secure radar scan node agent", net start "f-secure radar scan node agent").
Verify communication works by looking at the service logs in the Radar scan node root directory C:\Program Files (x86)\F-Secure\RadarScanAgent\logs.
Article no: 000003665
