Summary
When a newly-activate computer is assigned a policy, it automacally becomes a relay.
This issue happens when a policy is assigned to the computer, and the relayState of this policy is set to TRUE.
Details
To fix this issue, follow the steps below:
- Confirm the issue by running the Deep Security Manager (DSM) or Vulneratbility Protection Manager (VPM) command below:
- For DSM: dsm_c -action viewsetting -name settings.configuration.relayState -policyname "NAME_OF_POLICY_HERE"
- For VPM: vp_c -action viewsetting -name settings.configuration.relayState -policyname "NAME_OF_POLICY_HERE"
- Change the settings of this policy for relay State to FALSE to prevent this issue from happening. Use the command below:
- For DSM: dsm_c -action changesetting -name settings.configuration.relayState -value false -policyname "NAME_OF_POLICY_HERE"
- For VPM: vp_c -action changesetting -name settings.configuration.relayState -value false -policyname "NAME_OF_POLICY_HERE"
- Confirm that the settings have taken effect by running the viewsetting command again:
- For DSM: dsm_c -action viewsetting -name settings.configuration.relayState -policyname "NAME_OF_POLICY_HERE"
- For VPM: vp_c -action viewsetting -name settings.configuration.relayState -policyname "NAME_OF_POLICY_HERE"
After making the changes to the policy, any succeeding agent activation that will be assigned to this policy should no longer become relay automatically.
