TIE Error Message - Communication

[cheetah]

Hello everybody.

From time to time I get the following error message:

Error message: The communication with the threat intelligence exchange server could not be established. Check the status of the TIE server, make sure that mcafee ePO is authorized to send the TIE Service Operation and Set TIE Enterprise reputation topics, and verify that the TIE server authorizes it to receive the mentioned issues is.

When I restart the ePO or my TIE, the error no longer exists.
Maybe someone already had this problem and can tell me the solution to it?

Think i´ve found the solution:

https://kc.mcafee.com/agent/index?page=content&id=KB88519&actp=null&viewlocale=en_US&showDraft=false...

[aravikum · Accepted solution]

Issue: The TIE Reputations page in ePO occasionally shows the following message when searching for Files or Certificates:

Unable to communicate with Threat Intelligence Exchange server. Check status of the Tie Server, verify that ePO is authorized to Send 'Tie Service Operation' Topics and 'Tie Set Enterprise Reputation' Topics and verify that Tie Server is authorized to Receive the above Topics.

Explanation-

This error message likely occurs after the TIE Server is restarted, or if the appliance rebooted, but before the DXL Broker TTL has expired.

If you restart the TIE Server multiple times in quick succession, you can expect this error once for each server restart.

For example, if you restart the TIE Server three times in the span of an hour, expect this error message to occur three times, with the fourth search attempt succeeding.

If the Broker TTL has expired before a search is performed, this error does not occur.

Was my reply helpful?

If you find this post useful, Please give it a Kudos! l Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

[Dwee]

HI cheetah,

how to restart TIE server? after some incident with our servers (downtime) i got same error like you, even thou the dxl fine only the tie got error like that,

[AdithyanT]

Hi  @Dwee,

Thank you for your response. May I know if you have access to the TIE Server (console access or Putty access)?

[Dwee]

Hi Adithyan,

yes i can putty but i can't login using root, isn't disabled by default?

[AdithyanT]

Hi @Dwee,

Thank you for your response. Ideally we should be able to use the operational account and perform a  reboot of the machine.

[Dwee]

Hello Adityha,

i don't know about that but last week when the support engineer troubleshoot (another SR in our TIE) i forgot how he manage to used root, but i read on mcafee kb that the root actually disabled after the installation right ? and i used other account (my TIE account for operational) but when i tried to execute the reboot command it says denied

[AdithyanT]

Hi @Dwee,

Thank you for your response. I am not aware of such restrictions. May I know if you can take console access instead of putty and try Root account and reboot?

[Dwee · Accepted solution]

Hello,

my problem was solved by the technical support, and what i can explain is that The sudo or sudoer permissions were corrupted inadvertently. we ended up running some chmod commands to fix the issue. After the sudo permissions were fixed. restarted TIE server, ran TIE ePO server task and the errors were fixed, 
note: i think what the support did was the same like on this thread : https://community.mcafee.com/t5/Threat-Intelligence-Exchange-TIE/Unable-to-reach-TIE-Server-via-DXL/...

so basically we can't access root and always failed when tryin to start the TIE services eventhou we have already can used sudo, so the last resort was reboot,

thanks

[AdithyanT]

Hi @Dwee,

Thank you for letting us know what resolved the issue by updating here!