Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Error "403 Forbidden" during Software Update with Deep Security Relay in Ubuntu Platform

    • Updated:
    • 14 Sep 2021
    • Product/Version:
    • Platform:
    • Ubuntu
Summary
Customer that have enabled relay functionality on their Deep Security Agent could encounter Error 403 Forbidden when other agents get Software Updates. 
Details
Public

The Deep Security Agent enabled with Relay function enables the Nginx service as an HTTP server which allows the agents to download the software via this HTTP server.

When the Deep Security Agent is trying download the software from this HTTP server, it may get response with error code "403 Forbidden".

image.png
 

It has been identified that Nginx service has insufficient permission to access the working directory.

This issue was observed to be occurring on Deep Security Relay which is deployed on Ubuntu platform.

image.png
The issue has been fixed in DSA version 20.0.0-2971 and later versions.

To resolve the Issue, there are two options.

Option 1: Clean installation of DSA version 20.0.0-2971

  1. Deactivate the existing agent and uninstall it completely.
  2. Install the agent to version 20.0.0-2971 or later
  3. Activate the Agent
  4. From the manager console, Go to Administration > Updates > Software > Relay Management and enable the agent as relay.

 

Option 2: Manually Grant the permission

 
If the DSA is installed or upgraded to version 20.0.0-2971, you must grant the permission manually to fix the issue since the working directory was created by earlier version of DSA and would have the same permission.
  1. SSH to the target DSA.
  2. Grant the read and execute permission for the Nginx working directory.
  3. Run command “chmod 755 /var/opt/ds_agent”
  4. Verify that the permission have been updated
image.png
Premium
Internal
Partner
Rating:
Category:
Troubleshoot; Install; Upgrade
Solution Id:
000289037
Feedback
Did this article help you?

Thank you for your feedback!


*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.