# \[IDN\] Fail to connection the IIQ service **URL:** \ **Category:** SHF Discussion and Questions\ **Tags:** identity-security-cloud\ **Created:** [November 13, 2024, 2:43am UTC](https://developer.sailpoint.com/discuss/t/idn-fail-to-connection-the-iiq-service/89332 "2024-11-13T02:43:34Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![choichunwing0414](https://avatars.discourse-cdn.com/v4/letter/c/a9adbd/32.png) [@choichunwing0414](https://developer.sailpoint.com/discuss/u/choichunwing0414)\ **Post date:** [November 13, 2024, 2:43am UTC](https://developer.sailpoint.com/discuss/t/idn-fail-to-connection-the-iiq-service/89332/1 "2024-11-13T02:43:34Z")
Hi All, I am trying to connection an IIQ to a local ad direct connection which is connected to IDN. After that, I had installed the IIQ in the same windows server and get port 5010 for my IIQ connection. Then, I press test and connection to connect the IIQ and it shown the error message as below. ![image](https://global.discourse-cdn.com/sailpoint/original/3X/a/8/a8da5ae8cc8c908b025d29e6020b59b11dcfa01f.png) After the failure, I tried to shutdown the IIQ from the windows server, it shows a different error message as below. I understand that the connection will not be success after I shutdown the IIQ but this error message made me believe that the IIQ are able to connection when it was active. ![image](https://global.discourse-cdn.com/sailpoint/original/3X/8/4/84c4314a3ed1c49d9a046b5fd1048857ec428267.png) Also, I delete all the information from IQservice Setting Pages and press Test and Connection. The connection was success, so I think there are some problem about the connection between the IIQ and IDN about the Connection Reset. May I know how to fix the issue about connection reset. ![image](https://global.discourse-cdn.com/sailpoint/original/3X/2/7/27ded2be6603c9553b565f029b7a3059da84f536.png) Thank you. Best regards, Jacky ---
**Author:** ![margocbain](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/margocbain/32/17314_2.png) [@margocbain](https://developer.sailpoint.com/discuss/u/margocbain)\ **Post date:** [November 13, 2024, 2:24pm UTC](https://developer.sailpoint.com/discuss/t/idn-fail-to-connection-the-iiq-service/89332/2 "2024-11-13T14:24:37Z")
Hi Jacky, It seems like you’re getting a timeout. You can increase the timeout settings in your source. Try increasing the timeout on your AD source by 60-90 second increments and see if that resolves the issue. If this does not work, then you may need to check that all of your firewall rules are in place (see [Securing the Active Directory Application](https://documentation.sailpoint.com/connectors/active_directory/help/integrating_active_directory/securing_active_director.html) ). Also, please check that you have updated your domain information from the default so that it is pointing to your AD environment. ```auto [ { "op": "add", "path": "/connectorAttributes/healthCheckTimeout", "value": 180 } ] ``` ---
**Author:** ![Shubhams\_009](https://avatars.discourse-cdn.com/v4/letter/s/ac8455/32.png) [@Shubhams\_009](https://developer.sailpoint.com/discuss/u/Shubhams_009)\ **Post date:** [November 13, 2024, 2:59pm UTC](https://developer.sailpoint.com/discuss/t/idn-fail-to-connection-the-iiq-service/89332/3 "2024-11-13T14:59:27Z")
Hi @choichunwing0414, I believe this is firewall issue. Can you try to run below command from one of the VA? Put servername where IQService is installed and port could be eitherTLS or non-TLS. sailpoint@sailpoint-va ~ $ ncat -z -v As per [doc](https://community.sailpoint.com/t5/IdentityIQ-Wiki/IQService-architecture-Network-ports-and-firewalls/ta-p/77385), Communication via TCP between IdentityIQ/Virtual Appliance and IQService must be available. By default this happens on Non-TLS Port 5050, but it can be configured to use configured TLS Port. Communication via UDP and TCP between IdentityIQ/Virtual Appliance and at least one AD domain controller via LDAP must be available. By default this happens on ports 389 and 636. Also please go through [this](https://documentation.sailpoint.com/connectors/iqservice/help/integrating_iqservice_admin/troubleshooting.html) which might help in troubleshooting. ---
**Author:** ![MeKhalbi](https://avatars.discourse-cdn.com/v4/letter/m/2acd7d/32.png) [@MeKhalbi](https://developer.sailpoint.com/discuss/u/MeKhalbi)\ **Post date:** [November 13, 2024, 3:03pm UTC](https://developer.sailpoint.com/discuss/t/idn-fail-to-connection-the-iiq-service/89332/4 "2024-11-13T15:03:59Z")
Hi @choichunwing0414 , Do you have the TLS option enabled in your IQService configuration ? ---
**Author:** ![jsosa](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jsosa/32/31578_2.png) [@jsosa](https://developer.sailpoint.com/discuss/u/jsosa)\ **Post date:** [November 13, 2024, 3:24pm UTC](https://developer.sailpoint.com/discuss/t/idn-fail-to-connection-the-iiq-service/89332/5 "2024-11-13T15:24:38Z")
Hi @choichunwing0414 AD source aggregation runs via LDAP on 389/636. That is why it is working without IQS (this ensures that LDAP part is ok between AD and VA, at 389 or 636). Provisioning part occurs on IQS. Second message says that IQS is down. So, timeout can be between IQS and AD too. Try to identify point of failure, testing connection between VA and IQS. Ensure that IQS has TLS DISABLED, and on VA shell, run: tb start tb session nc -zv -w 5 \ \ ---
**Author:** ![choichunwing0414](https://avatars.discourse-cdn.com/v4/letter/c/a9adbd/32.png) [@choichunwing0414](https://developer.sailpoint.com/discuss/u/choichunwing0414)\ **Post date:** [November 14, 2024, 2:34am UTC](https://developer.sailpoint.com/discuss/t/idn-fail-to-connection-the-iiq-service/89332/6 "2024-11-14T02:34:07Z")
Hi Julian, ![image](https://global.discourse-cdn.com/sailpoint/original/3X/e/2/e289f69667d964704b48acc7a048a304e609d717.png) 192.168.10.10 is the IP that search by ifconfig from the Window server and I set 5010 for my port in IQ service. After I tested your script in my VA, the connection reset message still appear once I put the IQ server IP and port into the IQ service setting. ![image](https://global.discourse-cdn.com/sailpoint/original/3X/8/6/86ade9efaff5edbc876c56e0ec914575c374d65f.png) Best regards, Jacky ---
**Author:** ![choichunwing0414](https://avatars.discourse-cdn.com/v4/letter/c/a9adbd/32.png) [@choichunwing0414](https://developer.sailpoint.com/discuss/u/choichunwing0414)\ **Post date:** [November 14, 2024, 2:34am UTC](https://developer.sailpoint.com/discuss/t/idn-fail-to-connection-the-iiq-service/89332/7 "2024-11-14T02:34:41Z")
Hi Mehdi, No, I didn’t enable the TLS. ---
**Author:** ![jsosa](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jsosa/32/31578_2.png) [@jsosa](https://developer.sailpoint.com/discuss/u/jsosa)\ **Post date:** [November 14, 2024, 3:26pm UTC](https://developer.sailpoint.com/discuss/t/idn-fail-to-connection-the-iiq-service/89332/8 "2024-11-14T15:26:01Z")
Hi Jacky, nc command shows that you are not able to connect from VA to IQS. You have to check with your network team to allow VA reach 5010 port of 192.168.10.10 server. ---
**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\ **Post date:** [January 13, 2025, 3:26pm UTC](https://developer.sailpoint.com/discuss/t/idn-fail-to-connection-the-iiq-service/89332/9 "2025-01-13T15:26:38Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.