Security Agent for UNIX 7.6.3 Release Notes

August 2020

Security Agent for UNIX 7.6.3 includes new certified platforms and software fixes. Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure that our products meet all your needs. You can post feedback on NetIQ Communities, our online community that also includes product information, blogs, and links to helpful resources.

The documentation for this product is available on the NetIQ website in HTML and PDF formats on a page that does not require you to log in. If you have suggestions for documentation improvements, click comment on this topic at the bottom of any page in the HTML version of the documentation posted at the Security Agent for UNIX documentation page. To download this product, see the Micro Focus Downloads page.

NOTE:Change Guardian 6.0 bundles Security Agent for UNIX 7.6.3. For Change Guardian 6.0 to deploy and manage Security Agent for UNIX 7.6.3, download the agent using Change Guardian Agent Manager. For more information, see Installing Security Agent for UNIX in the Change Guardian 6.0 Installation and Administration Guide.

1.0 What’s New?

1.1 Software Fix

The following issue is fixed in this release.

Deploying Some Rule Sets Fail With Errors

Issue: Deploying certain rule sets failed with errors due to which Sentinel does not receive events. (Bug 1160072)

Fix: This issue is now resolved.

2.0 System Requirements

For detailed information about hardware requirements, supported operating systems and browsers, see the System Requirements for Security Agent for UNIX 7.6.3.

3.0 Known Issues

Micro Focus strives to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.

3.1 UNIX Agent Manager Does Not Open on Linux

Issue: After rebooting the UNIX Agent Manager server, UNIX Agent Manager UI fails to open on Linux. (Bug 985692)

Workaround:

  1. To restart the UNIX Agent Manager server, run the following script in the directory where the UNIX Agent Manager files are located, to restart the UNIX Agent Manager server: ./runserver.sh restart

  2. Start UNIX Agent Manager: ./run.sh

3.2 Events are not Generated if the Locale Settings are Incorrect

Issue: After configuring Security Agent for UNIX, the agent fails to send events to the Sentinel server. This happens if the locale settings is incorrect. (Bug 1102111)

Workaround: For information about the workaround, see Troubleshooting section in Security Agent for UNIX Guide.

3.3 Cannot Install Security Agent for UNIX as a Non-root User

Issue: The installation process does not support installing Security Agent for UNIX as a non-root user. (Bug 1052123)

Workaround: None.

3.4 Directory Delete and Rename Events Might Not Appear in Linux

Issue: When you delete or rename directories on Linux platforms, audit logs show null value for a directory name. Therefore, Change Guardian might not capture the correct directory name in audit logs. (Bug 974273)

Workaround: None.

3.5 UNIX Agent Manager Cannot Deploy Agent on FIPS Enabled Linux or UNIX Computers

Issue: When the operating system is running in FIPS mode, UNIX Agent Manager (Linux and Windows) cannot deploy Security Agent for UNIX. It displays the following error:

SSH Install Failed - Session.connect: java.io.IOException: End of IO Stream ReadInstallation Failed - Session.connect: java.io.IOException: End of IO Stream Read. (Bug 999496)

Workaround: None.

3.6 UNIX Agent Manager 7.5.1 and Later Cannot Monitor Security Agent for UNIX 7.4

Issue: The communication between Security Agent for UNIX 7.4 and UNIX Agent Manager 7.5.1 or later fails due to protocol mismatch. (Bug 989481)

Workaround: Upgrade Security Agent for UNIX 7.4 to 7.5 and then to 7.5.1 or later. For more information about upgrading to Security Agent for UNIX 7.5 and later, see Upgrading Agent Using UNIX Agent Manager.

3.7 Events are not Generated when Soft Link for File is Deleted

Issue: File was deleted events are not generated when soft link for file is deleted. (Bug 975575)

Workaround: None.

3.8 Sentinel Agent Manager Connector Not Working in FIPS Mode

Issue: Sentinel Agent Manager Connector does not work in FIPS mode. (Bug 997589)

Workaround: Perform the steps mentioned in the Knowledge Base Article 7018187 for Sentinel Agent Manager Connector to work in FIPS mode.

3.9 Rule Sets Associated With BSM Source Throws an Error

Issue: If a rule set is associated with a BSM source, the rule set fails with an error message. (Bug 1172872)

Workaround: Perform the steps mentioned in the Knowledge Base Article 7024386.

3.10 Security Agent for UNIX 7.5.1 or Later with Change Guardian 5.0 and Secure Configuration Manager Cannot Coexist

Issue: When you install Security Agent for UNIX 7.5.1 or later using CG AM for new installation of Change Guardian 5.0 and Secure Configuration Manager 6.x on the same computer, Secure Configuration Manager registration fails due to dynamic certificate changes. (Bug 1045613)

Workaround: To configure Security Configuration Manager server, see the Knowledge Base Article 7023134.

3.11 Secure Configuration Manager Registration Fails While Upgrading Security Agent for UNIX

Issue: If you are upgrading Security Agent for UNIX from 7.5 to 7.5.1 or later, using Agent Manager in Change Guardian 5.0 or later, registering Secure Configuration Manager fails. (Bug 1056447)

Workaround: Perform the following steps from UNIX Agent Manager to re-register Security Agent for UNIX with Secure Configuration Manager server:

  1. Go to Configure > SCM Options.

  2. Click Configure button.

  3. In the SCM Configuration window, ensure that the Core Services Address is same as SCM Core IP Address and click Save.

  4. Restart the agent service by selecting Stop and Start buttons in the Agent Controls panel.

OR

You can perform the following manual registration steps on Security Agent for UNIX:

  1. Navigate to the following location: /usr/netiq/bin

  2. Run the following command: ./wcRegister

  3. Run the following command to restart SCM services: /etc/init.d/uvserv restart

3.12 Cannot Log In to UNIX Agent Manager after Installing in FIPS mode

Issue: After installing UNIX Agent Manager in FIPS mode, you cannot log in to the UNIX Agent Manager server. This happens when uninstalling UNIX Agent Manager in non-FIPS mode does not clear the UNIX Agent Manager installation directory. (Bug 1122168)

Workaround:

To resolve the issue:

  1. Uninstalling the UNIX Agent Manager in non-FIPS mode.

  2. Delete the UNIX Agent Manager installation directory.

  3. Install UNIX Agent Manager in FIPS mode.

3.13 Uninstalling UNIX Agent Manager Does not Remove All Files

Issue: Uninstalling UNIX Agent Manager does not remove the following folders: (Bug 988495)

  • \NetIQ\UNIX Agent Manager\backup

  • \NetIQ\UNIX Agent Manager\patches

  • \NetIQ\UNIX Agent Manager\UAMDB

Workaround: Manually delete the folders.

4.0 Legal Notice

For information about Micro Focus legal notices, see https://www.microfocus.com/about/legal/

Copyright © 2020 Micro Focus or one of its affiliates.