This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Endpoint Protection won't fully install

I have a sophos UTM installed with some endpoints using EndPoint protection.

I am trying to install the agent on a new computer, but it seems like it is only getting partially through.

I am using the endpoint package from the UTM to install.  The agent registers with the UTM, but it won't update.

Logs....

 

2018-05-04T17:09:16.630Z [ 4808] INFO  SUL-Log [I49502] Found supplement IDE552 LATEST
2018-05-04T17:09:16.630Z [ 4808] INFO  SUL-Log [I49502] Found supplement IDE553 LATEST
2018-05-04T17:09:16.646Z [ 4808] INFO  SUL-Log [I49502] Found supplement IDE553 LATEST
2018-05-04T17:09:16.646Z [ 4808] INFO  SUL-Log [I19463] Syncing product cd2a5386-f08c-42b1-8d98-40240059e361 591
2018-05-04T17:09:16.646Z [ 4808] ERROR SUL-Log [E59264] Cannot locate server for d1.sophosupd.com/.../d34a527493f39af4491b3e909dc697cax000.dat WinHttpQueryHeaders 12150
2018-05-04T17:09:16.646Z [ 4808] ERROR SDDSDownloader::ReportSyncFailure Failed to synchronise
2018-05-04T17:09:16.646Z [ 4808] INFO  UpdateLogic::SyncAndInstall Saving state.
2018-05-04T17:09:16.646Z [ 4808] INFO  StatePersister::Save Overwriting state file C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml
2018-05-04T17:09:16.646Z [ 4808] INFO  UpdateLogic::SyncAndInstall Skipping product install as Sync failed.
2018-05-04T17:09:17.709Z [ 4808] INFO  IPCSender::Write IPCSender::Write: Writing message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate"><ErrorMessage><ID>SDDSDownloadFailed</ID><StringID>107</StringID><Sender>SophosUpdate</Sender><Insert>cd2a5386-f08c-42b1-8d98-40240059e361</Insert><Insert>dci.sophosupd.com/.../ErrorMessage><ReadableMessage>ERROR:   Download of cd2a5386-f08c-42b1-8d98-40240059e361 failed from server dci.sophosupd.com/.../Config>
2018-05-04T17:09:17.709Z [ 6028] INFO  IPCSender::ProcessSend IPCSender::ProcessSend: Send message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate"><ErrorMessage><ID>SDDSDownloadFailed</ID><StringID>107</StringID><Sender>SophosUpdate</Sender><Insert>cd2a5386-f08c-42b1-8d98-40240059e361</Insert><Insert>dci.sophosupd.com/.../ErrorMessage><ReadableMessage>ERROR:   Download of cd2a5386-f08c-42b1-8d98-40240059e361 failed from server dci.sophosupd.com/.../Config>
2018-05-04T17:09:17.709Z [ 6028] INFO  IPCSender::ProcessSend IPCSender::ProcessSend: No messages in queue, starting to wait
2018-05-04T17:09:17.709Z [ 4808] INFO  WinMain SophosUpdate has completed with the result 0.
2018-05-04T17:09:18.724Z [ 6028] INFO  IPCSender::ProcessSend IPCSender::ProcessSend exiting
2018-05-04T17:09:18.724Z [ 6028] INFO  `anonymous-namespace'::SenderThreadFn::operator() Sender thread finished.
2018-05-04T17:09:18.724Z [ 4808] INFO  StatePersister::Save Overwriting state file C:\ProgramData\Sophos\AutoUpdate\data\status\SophosUpdateStatus.xml



This thread was automatically locked due to age.
Parents
  • Anyone find a solution on this as I am having same issue, but a different .dat file is involved in my case. Only started happening a few days ago and now cannot install any new workstations.

  • FYI got this response from Sophos tech support:

    I have gone over the logs that you have sent in and on the UTM and from the log files I can see it matches a software defect that we have in the firmware version that you are running but currently there is no workaround or an ETA on when the defect will be resolved.

    Not exactly helpful :(

  • Just spent the last couple hours troubleshooting this. Same issue, can install the endpoint package but then autoupdate fails although the files can be downloaded directly without issue.

     

    In the end I copied the warehouse folder from a functioning system, ran update again (no files need updating) and the install completed.

  • Hi Mike,

    Thanks heaps for the info, much appreciated. Worked a treat!

    While not a solution I can live with this workaround until Sophos fix the 'defect'.

Reply Children
No Data