This error can occur when something wrong with crypto keys. EC keys must be
on each sensor that report to that EC. If your sensor are with
Allow-autoimport option, you can simply re-register sensors in SP, if not -
copy EC public keys to each sensor which you want to be sent event
information to that EC.
Also, this problem can be if sensor and EC are using different crypto
providers (CSP). This can occur, for example, if sensor was installed long
time ago with CerticomNRA provider only and EC was installed resently with
RSA only. All SP components do use the same CSPs to be able to communicate.
Hope this will help.
Good luck.
---
Best regards, Sergey V. Soldatov.
Information security department.
tel/fax +7 095 745 89 50 (1613)
meb@rfdx.com
Sent by: To: ISS Forum Gurus
<issforum@iss.net>
issforum-bounces@iss.net cc:
Subject: [ISSForum] Error
connecting to event collector
11.02.2005 22:51
Please respond to meb
Hi All -
Thanks much for the previous responses. I'm pretty sure I got back to
you all individually, if not, my apologies. I'm having a bit of an
issue again and I thought I'd bounce it off the gurus.
Event Collector is throwing errors when it tries to connect out to a
g200.
The error I receive is:
Error trying to connect to the [ SENSOR ] event source: The session has
been closed by the peer (0x47200401).
Versions:
EC - 6.9(SP1.7)
G200 - 8.0(SP 4.3:XPU 24.2)
I dug through the kb articles, etc. but didn't see anything. If you've
wrestled with this before I'd appreciate a link or suggestion.
Thanks!
--
"It is entirely possible for a configuration of matter resembling a
television set or a belly dancer to pop out of a black hole, however
this is highly improbable." - Issac Asimov, 'Black Holes'
_______________________________________________
ISSForum mailing list
ISSForum@iss.net
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
_______________________________________________
ISSForum mailing list
ISSForum@iss.net
TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum
To contact the ISSForum Moderator, send email to mod-issforum@iss.net
The ISSForum mailing list is hosted and managed by Internet Security Systems,
6303 Barfield Road, Atlanta, Georgia, USA 30328.
