The health check on your ProxySG appliance produces a health warning for the DRTR/WebPulse service. When reviewing the details only one IP address appears to be unhealthy: 22.214.171.124.
This is typically an issue caused by running an older version of SGOS. The DRTR servers all use TLS1.1 with the exception of 126.96.36.199 which uses TLS1.2. Starting in SGOS 188.8.131.52 a new TLS1.2 extension has been added called ' signature_algorithms' in order to conform with the TLS1.2 RFC. This means that prior to 184.108.40.206 any DRTR connection will fail when a connection attempt is made to 220.127.116.11 as the server is expecting the missing extension.
This issue is documented in bug 220955 which is a duplicate of 220955 and has been fixed in SGOS 18.104.22.168 or greater.
There is no service impact to the DRTR/Webpulse service as there are several IP addresses that are used, if a connection cannot be made to 22.214.171.124 then the service will simply use of of the others. If you are unable to upgrade you can simply disable the healthcheck for the DRTR service, for these steps please see article
Imported Document ID: 000032449
Subscribing will provide email updates when this Article is updated. Login is required.