Change Auditor Agent records that a NetApp Cluster policy is created but no events are received by the Agent (4233650)

A Change Auditor auditing template for a NetAppp Cluster is successfully created but repeatedly logs the records below every minute:

2015-11-10 08:20:22.761 [5756][INFO][CNetAppClusterSink::FPolicyInstance::ConfigurePolicy(223)]

Starting policy 'dell_ca_cm_policy_a_49c9bb5c5eb14643b64a88f1f4df4df5' configuration on filer 'NETAPP1'..

2015-11-10 08:20:24.792 [5756][INFO][CNetAppClusterSink::FPolicyInstance::ConfigurePolicy(303)]

Policy 'dell_ca_cm_policy_a_49c9bb5c5eb14643b64a88f1f4df4df5' configuration on filer 'NETAPP1' complete

Also, if the Change Auditor Agent logging is increased to DEBUG, it is confirmed that events are not being received by the Change Auditor Agent from the NetApp Server

Perform these steps to verify the connection between the NetApp Filer and Change Auditor Agent server:

1. Run the following command on the NetApp command interface
   • fpolicy show-engine
2. The results will contain a Policy with the name starting with dell_ca_cm_policy_a_
3. The FPolicy server listed with the dell_ca_cm_policy_a_ policy should be the IP Address of the Change Auditor agent server
4. Confirm if the Server Status is disconnected
5. If the Server Status is disconnected, run the following command to determine the reason for the disconnect
   • vserver fpolicy show-engine -server -instance
6. The Reason for FPolicy Server Disconnection field will display Reason for FPolicy Server Disconnection: Select Timed out. if the destination port to the Change Auditor Agent server is blocked
7. Run the following command to determine the destination port used to connect to the Change Auditor Agent server:
   • fpolicy policy external-engine show -primary-server -instance
8. The Port Number of FPolicy Service is the destination port used to connect to the Change Auditor Agent server (default: 5455)
9. Confirm that port 5455 is not blocked on the Change Auditor Agent server or on the network between the NetApp Filer and Change Auditor Agent server.
10. In addition, the source port used by NetApp can be a range of ports and any firewall rule should be bi-directional to allow the Change Auditor server to respond to the NetApp server.