Not able to setup new VA in developer tenant

Identity Security Cloud (ISC) ISC Discussion and Questions
,
1

Hi All,

Need you help with setting up the new VA in Developer tenant. I tried this 1 year back, but when i tried the same step now it not working for me.

https://developer.sailpoint.com/discuss/t/va-for-dev-tenant-does-not-connect-to-any-local-resource/98268/5
https://developer.sailpoint.com/discuss/t/new-va-not-installing-in-devrel-tenant/91793/21

  • What errors did you face (share screenshots)?
    No error; able to see the VA is connected. But the CCG version, or CCG, is not downloading even after 2-4 hrs.
2

Hello,

Kindly check whether respective Sailpoint specific endpoints are reachable from your VA

3

Not sure about that. Can I know what endpoints I need to test? Also note that below are the things I have checked.

  • I have used VMWare to import the VA.
  • I have used the Bridged>>Replicate settings for Network.
  • After import, I have set the static ip address and reboot the VA
  • Next I have to go to the ISC UI and create a new cluster >> Add new VA
  • Then I generated the pair code using va-bootstrap set-passphrase -t demo and applied the pair code; it got success.
  • Waited for 1 hour to get the CCG file, but it did not get started or downloaded even after 4 hours.

What am I missing here? I have tried with the special image from the ambassador page, the VA image in the admin doc, and the VA image in the UI when adding the new VA.

4

Hello,

Based on what you’ve described, the CCG not downloading is almost always a connectivity issue between the VA and SailPoint’s cloud endpoints. Here are the key endpoints your VA needs outbound access to on port 443:

5

I followed the below steps to resolve the CCG-related issue:

  1. Performed a VA reset using va-bootstrap reset.
  2. Removed the old VA from the tenant and reconfigured it with the new tenant, which successfully resolved the issue.
6

Tried getting the below error.

image

image

7

Hey @jeyan I have tried this several times before but no luck.

8

When I try sudo docker images, below is the result: no CCG after 2 hours.

image
image747Ă—330 2.9 KB

9

Hi @Santhakumar

I have setup VA for my ISC developer tenant. It worked fine. If you are using VMWare then it should work fine. As I have integrated multiple VA’s that are deployed in my VMWare/VirtualBox with SailPoint ISC Developer tenant.

Please let me know if you need any help. Happy to connect and fix the issue.

10

Hey @msingh900. Can I know which VA image you have downloaded?

11

I have downloaded the image from the SailPoint ISC portal when you try to create a cluster and add a VA inside it.

12

I have tried that VA image but no luck. No ccg file downloaded or not found.

13

Is your VA not showing as connected in the ISC portal ?

14

@Santhakumar Which ccg file you are looking for ?

15

It says “connected.” But when I try to create a webservice source with VA, the test connection shows Timeout.

image
image1457Ă—433 15.9 KB

Able to reach the URL from VA itself.

image

16

You need to increase the timeout. As I can see when you are pinging the host, it takes some amount of time.

Try doing test connection multiple times even if the first test connection fails.

17

Also, You mentioned that you are using WebService. Can you please share the Test Connection HTTP Operation details.

18

Note: I have used OAuth 2.0 as the authentication type.

image
image1270Ă—630 17.4 KB

image
image1258Ă—448 12.1 KB

19

Increased the timeout to 200 and tried the test connection 6 times.
image

20

Have you tried the same test connection config in postman? Is that working over there in postman.