You create a Web application monitor in Microsoft System Center Operations Manager 2007 Service Pack 1. In the proxy settings of the Web application monitor, you configure the agent on the watcher node to use a Run As account to authenticate with a secure firewall when the agent accesses the Internet.

However, even though the Run As account is configured to authenticate with the firewall, this account is not used. Instead, the Action account that is specified in the Web application monitor is used for firewall authentication. If the agent is located behind the firewall, and the Action account does not have access to the firewall, any Web requests that are sent by the agent will fail.

Hotfix information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site: Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Installation instructions

You must apply this hotfix on the computer that hosts one of the following roles:

• Operations Manager Root Management Server
• Operations Manager Management Server
• Operations Manager Gateway Server

To do this, follow these steps:

1. Copy the following file to a local folder or to a shared folder, and then run the file on each destination computer:
   SystemCenterOperationsManager2007-SP1-KB956689-X86-X64-ENU.MSI
2. Wait until the package installation is complete, and then open the Operations Console.
3. For each Web application that has watcher nodes behind a secure firewall, repeat the following steps:
   1. Select the Authoring view, expand Management Pack Templates, and then click Web Application.
   2. Click the Web application that you want to configure, and then click Edit web application settings in the Actions pane.
   3. In the Actions pane, click Configure settings.
   4. On the General tab, click to select the Use a proxy server to connect check box.
   5. In the User Account list, select the Run As account that has been configured to have access to the proxy.

Note After you apply this hotfix, the Action account that is specified in the Web application monitor will not be used for authentication.

Prerequisites

To apply this hotfix, you must have System Center Operations Manager 2007 Service Pack 1 installed on the computer.

Restart requirement

You do not have to restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other hotfixes.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

System Center Operations Manager 2007 Service Pack 1, x86-based version

System Center Operations Manager 2007 Service Pack 1, x64-based version

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

To work around this problem, configure the watcher node to run under a domain user account that has Internet access through the secure firewall.

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base: