Access Tier connectivity from Internet to backend – Banyan Security

Summary

This doc outlines how to check and troubleshoot connectivity from the Access Tier (aka netagent) to a backend server.

Troubleshooting Steps

There is a convenient built in way to test connectivity to backend servers on the Command Center under Managed Services on a per service level. Select either the Hosted Websites or Infrastructure service and select the Service Name. In the top right corner there is a button called Test Connection. This will perform 4 tests and give a status of green for pass or red for fail. This article is focused on the connectivity between the Access Tier and the backend server.

DNS or IP found

Backend Hostname or IP is resolvable

If this test fails, the backend server is configured with a URL and the Access Tier is unable to resolve the DNS query for the URL.

1. Access the CLI of the Access Tier.

2. Ping the URL of the backend server.

Example: ping backendserver.com

If the ping command does list an IP address for the backend server URL, check the DNS server the Access Tier is configured to query. This DNS server needs to be reachable and have a DNS record for the backend domain.

Reachable

Backend host and port are reachable from access tier

This test performs a TCP connection from the Access Tier to the backend server on the port specified in the service configuration.

Outcome
Brief description of how to confirm the problem is solved and what to do if it isn’t
Further reading
Links to related articles

Related articles