Account Discovery - Can't add new machine becasue PING is blcoked from CPM to the target machines

Modified on Sun, 1 Jan, 2017 at 1:04 PM

Symptom:

When runing Account Discovery (CyberArk PAS v9.6) the process can't PING some machines so the machines aren't added to the pending accounts feed, PING is blcoked from CPM to the target machines.

Cause:

The Account Discovery process based on CyberArk DNA engine and CyberArk DNA by default ping the machines before adding them to the report and if the machines aren't answer to ping they will not be added to the report - in our case the Account Discovery process will not add the machines to the Pending Accounts page if ping is disabled.

Solution:
In order to solve the issue, please see the following procedure:

Connect to the CPM machine
Open the scanner config file:C:\Program Files (x86)\CyberArk\Password Manager\Scanner\CACPMScanner.exe.config
Add the following value under the "" section: <add key="PingMachineBeforeScan" value="False" />
Restart the "CyberArk Central Policy Manager Scanner" service.
Run new Account Discovery process from the PVWA.

Applies to: CyberArk PAS v9.6.