Technical Tip: NCM communication issues with systems across WAN
Description
This article describes a setup involving multiple appliances (CAs) managed by a Network Control Manager (NCM), where communication issues may arise between the Control Manager and the managed appliances over a WAN link.
Symptoms include, but are not limited to:
- Hosts incorrectly fail scans if the Endpoint Compliance Policy was modified and a resync was performed during their scan.
- The connection between the appliance and the Control Manager is hanging.
- Control Manager /bsc/logs/output.master logs contain CORBA COMM_FAILURE messages with 'java.net.SocketException: Connection reset' and 'java.net.ConnectException: Connection timed out' errors.
Scope
FortiNAC.
Solution
Workaround:
If the host has incorrectly failed due to a policy modification and resync during scan, rescan the host.
Related article:
Technical Note: Network Control Manager Server List panel takes a long time to load
