cancel
Showing results for 
Search instead for 
Did you mean: 

Troubleshooting Simulation does not appear to be working

loosechanges
Occasional Contributor

Troubleshooting Simulation does not appear to be working

I'm trying to use the Simulation tool for some policy testing.  The username, realm and resource fields are all filled in with accurate information and i'm mapping pre-auth, role mapping and tunneling policy; however, i'm not getting any correct results.  I'm seeing message such as:

 

-Input resource "tcp://192.168.2.40:1" cannot be traced for event "VPN Tunneling Policies" as the feature is not enabled in any of the session's roles

-Realm SSO did not map [email protected] to any roles

-Login failed from 0.0.0.0 for [email protected]/SSO. Not mapped to any roles.

 

Note that actual policy tracing works fine with the same parameters.

 

Are variables required to run simulations and if so, which ones?    Thank you.

3 REPLIES 3
zanyterp
Moderator

Re: Troubleshooting Simulation does not appear to be working

if you are not using a system local user account, and a realm that uses it, simulation will fail
based on the name of the realm, SSO, i am guessing that is not the case; can you confirm the auth server set to be used by that realm?
loosechanges
Occasional Contributor

Re: Troubleshooting Simulation does not appear to be working

Hello,

 

We do not use local accounts.  The Realm is using an Azure SAML auth server.  So just to be clear, the simulation tool only works with local accounts?  Thanks.

zanyterp
Moderator

Re: Troubleshooting Simulation does not appear to be working

yes, that is correct