Thursday, August 2, 2012

Retina Can't Make SSH Connection

I could not successfully Retina scan a Red Hat 5x virtual server even though I could fully scan other similarly configured servers on the same ESXi platform.  I was able to successfully ssh to the target from one of the other VMs but could not establish an ssh connection via Retina.  There was nothing in the logs on the target showing failed connections etc but the Retina logs showed that the connection attempt timed out.
After troubleshooting the target and the Retina server I came up with a clue at
“http://forums.eeye.com/index.php?/topic/2305-registry-error-threshold-exceeded/”
I ended up setting
HKEY_LOCAL_MACHINE\SOFTWARE\eEye\Retina\5.0\Settings\SSH\DataTimeout to 60, it was 15.

This fixed the problem.  Why the one VM server had an issue with timeouts I do not know since it is configured the same as the other VMs I could scan.

For 64-bit systems use: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\eEye\Retina\5.0\Settings\SSH  

No comments:

Post a Comment