无法在 Zscaler 代理后面设置 WorkLoad Security 代理 VM

最后更新
另存为PDF

Views:: 584

Visibility:: Public

Votes:: 0

Category:: data-infrastructure-insights

Specialty:: ds_dii

Last Updated:

适用于

Cloud Secure (CS)
Zscaler 代理或其他进行证书检查的代理
防火墙中断/检查

问题

CS Agent 服务器位于代理后面，代理安装失败。

Cloud Secure 日志中的错误如下 /opt/netapp/cloudsecure/agent/logs/agent.log，

2021-08-30T04:40:31,265 [ERROR] [prod] [tenant_id] [agent_id] [agent-ActorSystemImpl] - Failed to configure agent. Reason: Certificate request failed, reason: Sign Agent certificate request failed. Http request POST:/rest/v1/agents/cert failed with error PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

相同问题在 agent.log 中看到的另一个错误，

2021-10-19T06:29:35,501 [ERROR] [prod] [tenant_id] [agent_id] [agent-LogStreamingActor] - Failed to stream[retry] 128 log messages to https://server_name.cloudinsights.netapp.com:443/rest/v1/log-receiver/logs with error: Certificate chaining error