Skip to main content

Check out Interactive Visual Stories to gain hands-on experience with the SSE product features. Click here.

Skyhigh Security

SWG 12.x.x Known Issues and Workaround

Known Issues and Workaround

For a list of issues that are known, but not resolved yet, see the table below.

Fix Version Found Version Description
12.2.10 12.2.8

Issue: HA proxy service is not running after upgrading to SWG 12.2.8 and 11.2.22

This is an issue with the latest haproxy version 2.9.3.
in the previous haproxy version we were getting the same issue as warnings.
but now it is coming as an alert and haproxy is not starting.
The above errors will come if the configuration has some complicated configurations like multiple listeners etc. Following warnings are coming
"[WARNING] 150/111007 (2674) : parsing [/etc/haproxy/haproxy.cfg:141] : backend 'send_check_HTTP', another ser...commended.
May 30 11:10:07 director11 haproxy[2666]: [WARNING] 150/111007 (2674) : parsing [/etc/haproxy/haproxy.cfg:149]: backend 'send_check_FTP', another serv...commended.
May 30 11:10:07 director11 haproxy[2666]: [WARNING] 150/111007 (2674) : parsing [/etc/haproxy/haproxy.cfg:151]: backend 'send_check_FTP', another serv...commended.
May 30 11:10:08 director11 haproxy[2666]: [  OK  ]"

Workaround:

1) If the customer has not upgraded to the affected version then they can go to backend and do "service haproxy restart" and then check if they have the warnings.
if warnings are present Then the customer can refrain from upgrading to 12.2.8 or to 11.2.22.
2) If the customer has already upgraded then the resolution will be the following.
Following will be the alert messages
“[/etc/haproxy/haproxy.cfg:138]: backend 'send_check_HTTP', another server named 'srv__serv_192.169.10.109090' was already defined at line 134, please use distinct names.” 
now go to /etc/haproxy/haproxy.cfg
as per the above warning go to line 138 and comment out those lines.For commenting ,need to type '#' at the beginning of line.
example
"#server serv___serv_192.169.10.109090 192.169.10.10 check port 9090 inter 1000"
Then at the backend execute “service haproxy restart”.
if any changes in ui corresponding to haproxy or network the restart will happen and the same error will occur, then again comment in haproxy.cfg and restart.
 

 

12.2.11 (Planned on 24th July)

12.2.10

Issue: In the latest SWG release 12.2.10, a save operation post addition or updates to the below configuration items might fail with an error message popup being displayed in UI.

NOTE: If you intend to change configuration values for any of the following fields, Skyhigh recommends not upgrading to 12.2.10.

Central Management:
    - IP addresses and ports of this node used for central management communication
    - Group network
   
Proxies > Data Exchange Layer:
    - Subscription Topics
    - Services

Date and Time
Bandwidth Control:
    - Interface names, for which classes need to be applied.
   
Hardware Security Module:
    - Keys to be loaded
    - HSM server port definition list

  • Was this article helpful?