CHAP TER
9-1
User Guide for Cisco Security Manager 4.4
OL-28826-01
9
Troubleshooting Device Communication and Deployment
One of the more likely areas where you can run into problems is with actions where Security Manager
must log into a device. These types of actions include policy discovery and deployment using live
devices, or actions that involve retrieving information from a device.
The key point to remember is that the communication pathway is from the Security Manager server to
the device; the workstation on which you are running the Security Manager client is not involved in
device communication (unless the server is installed on the same machine, of course). The Security
Manager server must have a network pathway to the device as well as the correct credentials and
certificates to authenticate with the device for communication to be successful.
The following topics can help you troubleshoot general device communication and policy deployment
problems:
•Testing Device Connectivity, page 9-1
•Managing Device Communication Settings and Certificates, page9-4
•Resolving Red X Marks in the Device Selector, page9-8
•Troubleshooting Deployment, page 9-9

Testing Device Connectivity

Security Manager must be able to connect to and log into a device in order to manage it. You can test
whether Security Manager can use the credentials and transport method you have defined within Security
Manager for this purpose.
You can test connectivity only for devices that have static IP addresses. You also cannot test connectivity
for devices that use Token Management Server (TMS) as the transport protocol.
If you add a device from the network or from an inventory file to the inventory, Security Manager tests
connectivity automatically.
You can manually test device connectivity for any device in the inventory or for new devices that you
are adding manually. The following procedure describes how to test connectivity for devices that are
already in the inventory. When adding devices manually, click Test Connectivity on the Device
Credentials page of the New Device wizard to perform the test described below. For more information
on adding devices manually, see Adding Devices by Manual Definition, page 3-25.