A Firewall is blocking Remote AFX Agents and Remote Collection Agents from communicating with the Application Server in RSA Identity Governance & Lifecycle
Originally Published: 2020-08-14
Last Modified: 2023-11-30
Article Number
Applies To
RSA Version/Condition: 6.9.1, 7.0.x, 7.1.x
Issue
Cause
RSA Identity Governance & Lifecycle Root (Server) and Client Certificates are not compliant with the RFC-5280 standard. As a result, firewalls may block communication with Remote AFX Agents and Remote Collection Agents.
Resolution
- Upgrade to RSA Identity Governance & Lifecycle 7.2.0.
- Regenerate the server and client certificates as instructed in RSA Knowledge Base Article 000038314 -- How to Update the Root (Server) and Client Certificates in RSA Identity Governance & Lifecycle.
Workaround
Related Articles
Alert sent 'EM-006 : Unable to communicate with Network Controller' 61Number of Views Primary does not communicate with replica. Activity monitor does not show messages. 65Number of Views Workflow editor pop-up "An error occurred communicating with the server" in RSA Identity Governance and Lifecycle 177Number of Views SID: sd_login error unable to communicate with Authentication server 47Number of Views RSA Federated Identity Manager CTConnection Plugin Enhanced for Firewalls and Reliable Connectivity. 18Number of Views
Trending Articles
RSA Authentication Manager 8.9 Patches and Hotfixes Readme AFX Server and Remote Collection Agents fail to start after updating Java to version 1.8u241 (1.8.0_241) / 1.7u251 (1.7.0_… RSA MFA Agent 2.5 for Microsoft Windows Installation and Administration Guide RSA Authentication Manager 8.9 Release Notes (January 2026) RSA Authentication Manager 8.9 Setup and Configuration Guide
Don't see what you're looking for?