While performing oracle 12.2.0 scan on Symantec CCS 11.5 getting the below error:

"The Parameter is incorrect=0D=0A "

Any suggestions?

Hi Gangadhar,

Getting CCS to scan Oracle is no easy task and depends on method your using (agent-less or agent-based), on the OS user permissions, on the Oracle configuration, sudo configuration, etc.

I have put together general guidelines for getting Oracle scans:

Pre-requirements

Ensure you have latest PU/SCU installed on AS and CCS Manager.

Install Oracle Instant Client (latest version) on CCS Manager: https://support.symantec.com/en_US/article.HOWTO107163.html

Agent-less Oracle data collection

1. Open port TCP/1521 (or the port that the instance is listening) from CCS Manager to server hosting Oracle DB.

2. Open ports required for Unix agent-less data

3. Ensure CCS Manager is resolving the server name hosting Oracle DB to the right IP. In case it’s unable to resolve or resolves to wrong IP, add correct name/ip entry into the CCS Manager hosts file.

4. On oracle DB, ensure credentials are created that CCS will use to connect and scan the DB. If possible grant DB Admin role to this user. If not then please read the following document on granting minimum privileges for this user: https://symwisedownload.symantec.com//resources/sites/SYMWISE/content/live/SOLUTIONS/202000/TECH202340/en_US/CCS_Data_Collection_Privileges.pdf?__gda__=1465340560_f4a14d87f1542afa1e4d21ddfd298e7e

5. Add Unix Asset

   • It is recommended first to define Unix asset in the CCS with all the requiremnts as if OS scan is needed.

6. Add OS Asset credentials

7. Import Oracle asset

8. Add Oracle Asset credentials

Agent-based Oracle data collection

1. Install CCS Agent on DB server

2. Install Oracle Application Modules on the agent

   • https://www.symantec.com/security_response/securityupdates/list.jsp?fid=ccs

3. Re-Import CCS Agent

4. Import Oracle Asset from Unix agent

5. Add Oracle asset credentials

Troubleshooting

1. In case your Oracle asset import job is not working and no error is received, check following:

   • Unix user has proper rights

   • In case sudo is used, check if CCS Manager config files actually enable usage of sudo inside C:\Program Files (x86)\Symantec\CCS\Reporting and Analytics\DPS\control\Unix\ConfigFiles\bvAgentlessConfig.ini

2. Test the credentials:
   D:\Program Files (x86)\instantclient_12_1>sqlplus <user name>/<password>@server.domain.com:1521/<SID>

Hi Gangadhar,

I just recalled that there was similar issue already discussed on this form, please check link: https://www.symantec.com/connect/forums/oracle-cis-standard-evaluation