Business Security Forum

turn on suggestions Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Reply
Topic Options
Stone Noble Geolem
Stone Noble
Geolem
Posts: 35
Registered: ‎04-13-2010
Accepted Solution

ControlManager - Scheduled Report Problem

[ Edited ]
Options

‎05-07-2010 12:09 AM - edited ‎05-07-2010 12:12 AM

Dear,

 

I have a problem with my ControlManager Version: 5.0 (Build 1467) Hot Fix: 1793 and the Scheduled Report.

Since few days, my Control Manager don't create new report for my task.

When I go to view the History of the Generated Report, I see "View" = "Unsuccessfull" :smileysad:

 

Could you tell me where I can found logs or something that could help me to troubleshoot ?

 

Thanks,

 

107i907B2DA0ACD78A93

 

108iFCBCED1AEEC8F51F

109i7F04C4691D6BC724

110i8A6AD140BB7F1CE5

111i4D38A462C8B6AD14

 

 

Geolem
Report Inappropriate Content
Message 1 of 12 (4,489 Views)
Reply
Trend Micro Employee
Trend Micro Employee
xyberbotman
Posts: 47
Registered: ‎11-13-2009

Re: ControlManager - Scheduled Report Problem

Options

‎05-21-2010 03:59 PM

Hi Geolem,

 

I'm not sure on the last part of the screens if your sending the reports to cvertain recipients. The "Unsuccessful" result may also be contributed by failure of sending the notification. Let's assume that that is not the case, have you tried doing a one time report of the scheduled report? DO you get the same results?

 

 

Regards,

Arvi

I am a Trend Micro employee.  My comments and advice come from my personal knowledge and experience.  I’m happy to volunteer what I can to help others have a great Trend Micro experience.
Report Inappropriate Content
Message 2 of 12 (4,408 Views)
Reply
Stone Noble Geolem
Stone Noble
Geolem
Posts: 35
Registered: ‎04-13-2010

Re: ControlManager - Scheduled Report Problem

Options

‎05-24-2010 11:58 PM

Thanks for your help.

 

I have tried a "One Time Report" and I have the same result...

126i1F1B21D38906F6A7

Is there a log or something like that I can troubleshoot ?

 

Thanks,

Geolem
Report Inappropriate Content
Message 3 of 12 (4,385 Views)
Reply
0 Kudos
Stone Noble Geolem
Stone Noble
Geolem
Posts: 35
Registered: ‎04-13-2010

Re: ControlManager - Scheduled Report Problem

Options

‎05-26-2010 12:58 AM

I have found something...

 

In the file D:\Trend Micro\Control Manager\DebugLog\UI_Debug.log

 

 

2010-05-26 09:00:42,349 95734 [@thread] ERROR - [Instance ID = 2A5A8406-34D3-4416-8FED-533F9AF402D1] Error meg = The remote server returned an error: (403) Forbidden. [d:\Trend Micro\Control Manager\WebUI\WebApp\Reports\Factory\ReportBuilder.aspx.cs151] 
 2010-05-26 09:04:42,630 336015 [@thread] ERROR - [Instance ID = ABA953F2-7F79-4359-AC8F-BDE388638C12] Error meg = The remote server returned an error: (403) Forbidden. [d:\Trend Micro\Control Manager\WebUI\WebApp\Reports\Factory\ReportBuilder.aspx.cs151] 
 2010-05-26 09:05:42,646 396031 [@thread] ERROR - [Instance ID = F79435C0-EB8A-48F1-894E-B23966DCFD49] Error meg = The remote server returned an error: (403) Forbidden. [d:\Trend Micro\Control Manager\WebUI\WebApp\Reports\Factory\ReportBuilder.aspx.cs151] 
 2010-05-26 09:09:42,958 636343 [@thread] ERROR - [Instance ID = 88B20039-7629-4838-8FAF-3276CCF7CB20] Error meg = The remote server returned an error: (403) Forbidden. [d:\Trend Micro\Control Manager\WebUI\WebApp\Reports\Factory\ReportBuilder.aspx.cs151] 
 2010-05-26 09:30:36,390 93427 [@thread] ERROR - [Instance ID = DE1B65E7-F218-416D-ACF6-837F5818DE31] Error meg = The remote server returned an error: (403) Forbidden. [d:\Trend Micro\Control Manager\WebUI\WebApp\Reports\Factory\ReportBuilder.aspx.cs151] 
 2010-05-26 09:34:57,523 354560 [@thread] ERROR - [Instance ID = CF42EF8D-7BB6-4311-8ED2-FDF707510681] Error meg = The remote server returned an error: (403) Forbidden. [d:\Trend Micro\Control Manager\WebUI\WebApp\Reports\Factory\ReportBuilder.aspx.cs151] 
 2010-05-26 09:46:57,553 1074591 [@thread] ERROR - [Instance ID = 5E6D883B-9CAF-47A3-A5C2-65DA0B6390C7] Error meg = The remote server returned an error: (403) Forbidden. [d:\Trend Micro\Control Manager\WebUI\WebApp\Reports\Factory\ReportBuilder.aspx.cs151]

 

 

It happens when I try to generate report...

 

How can I fixe that ?

 

Thanks,

Geolem
Report Inappropriate Content
Message 4 of 12 (4,368 Views)
Reply
0 Kudos
Trend Micro Employee
Trend Micro Employee
xyberbotman
Posts: 47
Registered: ‎11-13-2009

Re: ControlManager - Scheduled Report Problem

Options

‎05-26-2010 09:06 AM

Hi Geolem,

 

Could you check your IIS logs and look for the status code of the file ReportBuilder .aspx? If possible, try to post here a few lines from the latest IIS logs that contains access to ReportBuilder .aspx.

 

 

Thanks,

Arvi

I am a Trend Micro employee.  My comments and advice come from my personal knowledge and experience.  I’m happy to volunteer what I can to help others have a great Trend Micro experience.
Report Inappropriate Content
Message 5 of 12 (4,352 Views)
Reply
Stone Noble Geolem
Stone Noble
Geolem
Posts: 35
Registered: ‎04-13-2010

Re: ControlManager - Scheduled Report Problem

Options

‎05-27-2010 01:55 AM

I don't know very well IIS...

I look into the folder : C:\WINDOWS\system32\LogFiles\W3SVC1

 

In the file: ex100527.log

 

 

2010-05-27 08:44:42 W3SVC1 172.18.12.36 POST /ControlManager/ClientCGI/cgiDelegate.dll - 443 - 172.16.21.11 - 200 0 0
2010-05-27 08:44:44 W3SVC1 172.18.12.36 POST /ControlManager/ClientCGI/cgiDelegate.dll - 443 - 172.18.12.38 - 200 0 0
2010-05-27 08:45:37 W3SVC1 172.18.12.36 POST /WebApp/Reports/History.aspx rptid=BFB62EB8-0E5C-45A5-B2A4-8DE128B91723&version=5.0& 443 - 172.18.12.36 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0
2010-05-27 08:45:37 W3SVC1 172.18.12.36 GET /WebApp/Reports/RPTProcessor.aspx - 443 - 172.18.12.36 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0
2010-05-27 08:45:43 W3SVC1 172.18.12.36 POST /ControlManager/ClientCGI/cgiDelegate.dll - 443 - 172.16.21.11 - 200 0 0
2010-05-27 08:45:44 W3SVC1 172.18.12.36 POST /ControlManager/ClientCGI/cgiDelegate.dll - 443 - 172.18.12.38 - 200 0 0
2010-05-27 08:46:08 W3SVC1 172.18.12.36 POST /WebApp/Reports/RPTProcessor.aspx Action=QuickReport 443 - 172.18.12.36 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0
2010-05-27 08:46:08 W3SVC1 172.18.12.36 GET /WebApp/Reports/RPTProcessor.aspx - 443 - 172.18.12.36 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0
2010-05-27 08:46:11 W3SVC1 127.0.0.1 GET /WebApp/Reports/Factory/PDFReportCreator.aspx InstID=23AF194E-861B-4B55-8F98-D6500D94FC4F 80 - 127.0.0.1 - 403 4 5
2010-05-27 08:46:11 W3SVC1 127.0.0.1 POST /WebApp/Reports/Factory/ReportBuilder.aspx - 443 - 127.0.0.1 - 200 0 0
2010-05-27 08:46:21 W3SVC1 172.18.12.36 POST /WebApp/Reports/History.aspx rptid=BFB62EB8-0E5C-45A5-B2A4-8DE128B91723&version=5.0& 443 - 172.18.12.36 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0
2010-05-27 08:46:21 W3SVC1 172.18.12.36 GET /WebApp/Reports/RPTProcessor.aspx - 443 - 172.18.12.36 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0
2010-05-27 08:46:43 W3SVC1 172.18.12.36 POST /ControlManager/ClientCGI/cgiDelegate.dll - 443 - 172.16.21.11 - 200 0 0
2010-05-27 08:46:44 W3SVC1 172.18.12.36 POST /ControlManager/ClientCGI/cgiDelegate.dll - 443 - 172.18.12.38 - 200 0 0
2010-05-27 08:47:01 W3SVC1 172.18.12.36 POST /WebApp/top.aspx - 443 - 172.18.12.36 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0
2010-05-27 08:47:34 W3SVC1 172.18.12.36 POST /ControlManager/ClientCGI/cgiDelegate.dll - 443 - 172.18.12.106 - 200 0 0
2010-05-27 08:47:43 W3SVC1 172.18.12.36 POST /ControlManager/ClientCGI/cgiDelegate.dll - 443 - 172.16.21.11 - 200 0 0
2010-05-27 08:47:44 W3SVC1 172.18.12.36 POST /ControlManager/ClientCGI/cgiDelegate.dll - 443 - 172.18.12.38 - 200 0 0
2010-05-27 08:47:51 W3SVC1 172.18.12.36 POST /WebApp/Reports/History.aspx rptid=BFB62EB8-0E5C-45A5-B2A4-8DE128B91723&version=5.0& 443 - 172.18.12.36 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0
2010-05-27 08:47:51 W3SVC1 172.18.12.36 GET /WebApp/Reports/RPTProcessor.aspx - 443 - 172.18.12.36 Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.2;+SV1;+.NET+CLR+1.1.4322;+.NET+CLR+2.0.50727;+.NET+CLR+3.0.4506.2152;+.NET+CLR+3.5.30729) 200 0 0
2010-05-27 08:48:14 W3SVC1 172.18.12.36 POST /ControlManager/ClientCGI/cgiDelegate.dll - 443 - 172.18.12.143 - 200 0 0
2010-05-27 08:48:43 W3SVC1 172.18.12.36 POST /ControlManager/ClientCGI/cgiDelegate.dll - 443 - 172.16.21.11 - 200 0 0
2010-05-27 08:48:43 W3SVC1 172.18.12.36 POST /ControlManager/ClientCGI/cgiDelegate.dll - 443 - 172.18.12.38 - 200 0 0

 

Thanks,

Geolem
Report Inappropriate Content
Message 6 of 12 (4,331 Views)
Reply
0 Kudos
Trend Micro Employee
Trend Micro Employee
xyberbotman
Posts: 47
Registered: ‎11-13-2009

Re: ControlManager - Scheduled Report Problem

Options

‎05-27-2010 08:53 AM

Hi Geolem,

 

IIS log appears to be normal. Please install Patch 5 first and verify if the issue still exist. Submit a formal ticket to support to have this investigated further if problem will persist after installing Patch 5.

 

 

Thanks,

Arvi

I am a Trend Micro employee.  My comments and advice come from my personal knowledge and experience.  I’m happy to volunteer what I can to help others have a great Trend Micro experience.
Report Inappropriate Content
Message 7 of 12 (4,300 Views)
Reply
Stone Noble Geolem
Stone Noble
Geolem
Posts: 35
Registered: ‎04-13-2010

Re: ControlManager - Scheduled Report Problem

Options

‎05-28-2010 01:29 AM

No change with the patch 5 unfortunately :smileysad:

 

I will see with the support.

Geolem
Report Inappropriate Content
Message 8 of 12 (4,284 Views)
Reply
0 Kudos
Stone Noble Geolem
Stone Noble
Geolem
Posts: 35
Registered: ‎04-13-2010

Re: ControlManager - Scheduled Report Problem

Options

‎06-03-2010 11:27 PM

Hello,

 

I have contacted the support.

The problem was located on the IIS Settings of the Default Web Site...

When you go to the Default Web Site Properties => Directory Security => Secure communications => Edit.

 

The require secure channel (SSL) must be unchecked.

 

130i2040A1637D1FFFD3

 

In my case, it was unchecked... but I have to check and uncheck and everything goes back.

Geolem
Report Inappropriate Content
Message 9 of 12 (4,118 Views)
Reply
Trend Micro Employee
Trend Micro Employee
xyberbotman
Posts: 47
Registered: ‎11-13-2009

Re: ControlManager - Scheduled Report Problem

Options

‎06-04-2010 01:06 PM

Hi Golum,

 

Thanks for sharing the solution. I'm glad that everything's okay now.

 

 

Regards,

Arvi

I am a Trend Micro employee.  My comments and advice come from my personal knowledge and experience.  I’m happy to volunteer what I can to help others have a great Trend Micro experience.
Report Inappropriate Content
Message 10 of 12 (4,102 Views)
Reply
0 Kudos