Network Issues

Problems with network setup can cause failures in the installation process. Consider the following actions to isolate the problem:

Make sure all servers are able to ping each other.
If DNS is not running in the environment, host files on each server need correct IP information.
Firewall and load balancer ports need proper configuration. The list of required ports is available in the Port Communication Tables section of the Installation Guide.
Import the complete certificate chain to the server connected to the Internet: Use the SSLCertificateChainFile parameter in the Apache configuration on the Secure Proxy Server.
The IdentityMinder Server, Cloud IAM Connector Server, and SiteMinder Policy Server need an Outbound-Only Internet connection.
If the internal and external hostnames are different for the Security Proxy Server, edit the server.conf file, found here:
```
/opt/CA/secure-proxy/proxy-engine/conf/server.conf
```
Set the following parameter:
```
redirectrewritablehostnames="<InternalHostName>, <ExternalHostName>" 
```