Remote agent trouble shooting steps

InsightVM
1

Hi All,

Any one have the trouble shooting steps for agents whose status is Stale or Offline but remote server is active?

Provide the steps which can be performed remotely.

2

Assuming that the problem is limited to some assets:

  • Check your proxy settings of the agent,
  • proxy rules,
  • and proxy.pac file on the hosts.

Make sure that FW allows traffic twds proxy.

3

Check the connection flow:

  • If using a collector: can you ping it from the host with agent? Is the port listening on the collector (netstat)?
  • If connecting directly to rapid7: can you resolve e.g., domain eu.endpoint.ingress.rapid7.com to it’s DNS records?
    nslookup eu.endpoint.ingress.rapid7.com
    If so, can you initiate an SSL handshake?
    openssl s_client -connect eu.endpoint.ingress.rapid7.com:443

Other idea’s: