Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Key points to consider when the server IP address has been changed in InterScan Messaging Security Suite (IMSS)

    • Updated:
    • 2 Nov 2015
    • Product/Version:
    • InterScan Messaging Security Suite 7.1 Linux
    • Platform:
    • Linux - Red Hat RHEL 3 32-bit
    • Linux - Red Hat RHEL 4 32-bit
    • Linux - Red Hat RHEL 5 32-bit
    • Linux - Red Hat RHEL 6 32-bit
    • Linux - SuSE SuSE version 10
    • Linux - SuSE version 9
Summary

Changing the IP address of one or more components of the IMSS Linux server(s) may require manual changes to the IMSS database and/or INI files, as well as file/folder permissions. It is, therefore, recommended that you place the IMSS server components on machines with static IP addresses and plan ahead so that changing the IMSS server IP addresses in the future will not be necessary.

Details
Public

Below are the key points to consider:

  • The scanner automatically updates the IP addresses for the Policy Server and Scanning Daemon in the tb_global_setting and does not need any additional actions.
  • The new IP address of the Central Controller should be specified in the [cmagent]/ConfigUrl parameter of the imss.ini file stored in the tb_global_setting.

    To check the value, run the following command:

    opt/trend/imss/PostgreSQL/bin#./psql -U sa imss

    The user will then get the imss db prompt.

    To view the value, run this command:

    imss=# select * from tb_global_setting where section= 'cmagent' and name= 'ConfigUrl';

    Verify if the new IP reflected. If not, change the value. To change the value, run this command:

    Imss=# update tb_global_setting set value='https://{new ip address}:8445'

    where section='cmagent' and name='ConfigUrl';

    For environments with the IP Profiler, update the Central Controller IP address in the fox_dns_server.list configuration files on all the FoxProxy instances.

  • The new IP address of the database server hosting the Administration Database should be manually specified in the database connection string (odbc.ini) of all the computers that run IMSS.

    Also, the servername configuration parameter in the odbc.ini file (Administration Database) and in the table "tb_euq_db_info" stores the IP address of the database server (the file euqodbc.ini is a dump of this table; modify the database table not the INI file). If the IP address changes because the database was relocated, do the following:

    1. Stop all the IMSS components.
    2. On all computers with installed IMSS components, change the servername value to the new IP address of the database server by running this command:

      imss=# select * from tb_euq_db_info;

    3. Check if the correct IP is reflected. If it is, then proceed to the next step. Otherwise, change the value by running this command:

      imss=# update tb_euq_db_info set server='new ip' where server='old ip';

    4. Start all the IMSS components.
  • The access control settings of the database server (pg_hba.conf) should be updated. This action is also applicable if IMSS components are moved to another subset. Use multiple rules for each subnet and configure each rule in the same manner.
Premium
Internal
Rating:
Category:
Configure
Solution Id:
1035464
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.


Need More Help?

Create a technical support case if you need further support.