Security Agent for UNIX 7.7 Release Notes

June 2023

Security Agent for UNIX 7.7 includes new certified platforms and software fixes. Many of these improvements were made in direct response to suggestions from our customers. We thank you for your time and valuable input. We hope you continue to help us ensure that our products meet all your needs. You can post feedback on Micro Focus Communities, our online community that also includes product information, blogs, and links to helpful resources.

The documentation for this product is available on the NetIQ website in HTML and PDF formats on a page that does not require you to log in. If you have suggestions for documentation improvements, click comment on this topic at the bottom of any page in the HTML version of the documentation posted at the Security Agent for UNIX documentation page. To download this product, see the Micro Focus Downloads page.

1.0 What’s New?

1.1 Rebranding

For Security Agent for UNIX 7.7, we have upgraded the document versions as part of rebranding. However, there is no feature upgrade.

1.2 JDK Upgrade

In Sentinel 8.6, JDK is upgraded to 1.8.0_372

1.3 New Certified Platform

Security Agent for UNIX 7.7 are now certified on the following 64-bit platforms:

  • Red Hat Enterprise Linux version 8.7

  • Red Hat Enterprise Linux version 9.0

1.4 Software Fix

The following issue is fixed in this release:

IQ Connect Upgraded to 9.6.0.6

IQ connect upgraded from 9.5.0.24 to 9.6.0.6

2.0 System Requirements

For detailed information about hardware requirements, supported operating systems and browsers, see the System Requirement Guide.

3.0 Known Issues

Micro Focus strives to ensure our products provide quality solutions for your enterprise software needs. The following issues are currently being researched. If you need further assistance with any issue, please contact Technical Support.

3.1 UNIX Agent Manager Does Not Open on Linux

Issue: After rebooting the UNIX Agent Manager server, UNIX Agent Manager UI fails to open on Linux.

Workaround:

  1. To restart the UNIX Agent Manager server, run the following script in the directory where the UNIX Agent Manager files are located, to restart the UNIX Agent Manager server: ./runserver.sh restart

  2. Start UNIX Agent Manager: ./run.sh

3.2 Events are not Generated if the Locale Settings are Incorrect

Issue: After configuring Security Agent for UNIX, the agent fails to send events to the Sentinel server. This happens if the locale setting is incorrect.

Workaround: For information about the workaround, see the Troubleshooting section in Security Agent for UNIX Guide.

3.3 Cannot Install Security Agent for UNIX as a Non-root User

Issue: Unable to install Security Agent for UNIX as a non-root user.

Workaround: The installation process does not support installing Security Agent for UNIX as a non-root user.

3.4 UNIX Agent Manager Cannot Deploy Agent on FIPS Enabled Linux or UNIX Computers

Issue: When the operating system is running in FIPS mode, UNIX Agent Manager (Linux and Windows) cannot deploy Security Agent for UNIX. It displays the following error:

SSH Install Failed - Session.connect: java.io.IOException: End of IO Stream ReadInstallation Failed - Session.connect: java.io.IOException: End of IO Stream Read.

Workaround: None.

3.5 UNIX Agent Manager 7.5.1 and Later Cannot Monitor Security Agent for UNIX 7.4

Issue: The communication between Security Agent for UNIX 7.4 and UNIX Agent Manager 7.5.1 or later fails due to protocol mismatch.

Workaround: Upgrade Security Agent for UNIX 7.4 to 7.5 and then to 7.5.1 or later. For more information about upgrading to Security Agent for UNIX 7.5 and later, see Upgrading Agent Using UNIX Agent Manager.

3.6 Events are not Generated when Soft Link for File is Deleted

Issue: File was deleted events are not generated when soft link for file is deleted.

Workaround: None.

3.7 Rule Sets Associated With BSM Source Throws an Error

Issue: If a rule set is associated with a BSM source, the rule set fails with an error message.

Workaround: Perform the steps mentioned in the Knowledge Base Article 7024386.

3.8 Cannot Log In to UNIX Agent Manager after Installing in FIPS mode

Issue: After installing UNIX Agent Manager in FIPS mode, you cannot log in to the UNIX Agent Manager server. This happens when uninstalling UNIX Agent Manager in non-FIPS mode does not clear the UNIX Agent Manager installation directory.

Workaround:

To resolve the issue:

  1. Uninstall the UNIX Agent Manager in non-FIPS mode.

  2. Delete the UNIX Agent Manager installation directory.

  3. Install UNIX Agent Manager in FIPS mode.

3.9 Uninstalling UNIX Agent Manager Does not Remove All Files

Issue: Uninstalling UNIX Agent Manager does not remove the following folders:

  • \NetIQ\UNIX Agent Manager\backup

  • \NetIQ\UNIX Agent Manager\patches

  • \NetIQ\UNIX Agent Manager\UAMDB

Workaround: Manually delete the folders.

3.10 Not Able to Launch UNIX Agent Manager in FIPS Mode

After installing UAM enabling FIPS mode, while trying to launch UAM, after entering user name and password an error message is displayed.

Unable to establish a connection to UAM server. Error: Unrecognized server

Workaround: None.

3.11 Unix Agent 7.6.4.1 Throws libstdc++.so.6 Related Error with OES 2023

An issue exists with the current version of the Unix Agent 7.6.4.1 with OES 2023 wherein NSS audit event logs do not reach Sentinel.

Workaround: For more information, see the KB Article.

3.12 Issues with Unix Agent Upgrade Through UAM UI

While upgrading Unix Agent through UAM UI from previous versions to 7.7, an upgrade failure occurs.

Workaround: Upgrade the Unix agent manually. For more information, see the, Upgrading Manually.

4.0 Legal Notice

Copyright 2001-2023 Open Text. For information about legal notices, trademarks, disclaimers, warranties, export and other use restrictions, U.S. Government rights, patent policy, and FIPS compliance, see https://www.microfocus.com/en-us/legal.The only warranties for products and services of Open Text and its affiliates and licensor (“Open Text”) are as may be set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. Open Text shall not be liable for technical or editorial errors or omissions contained herein. The information contained herein is subject to change without notice.