Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 4 subscribers
  • Views 3592 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Endpint Client install failed

Boon Ken Tan

 HI, 

Windows OS 2012 R2

I trying to push the agent instal from sophos enterprise console 5.5, and the pc was able to installed.

But Sophos enterprie console view are still showing error message

I had attached the router log and endpoint log. Please take a look

Fullscreen Agent-20180914-082650.log Download 
14.09.2018 16:26:50 0298 I SOF: C:\ProgramData/Sophos/Remote Management System/3/Agent/Logs/Agent-20180914-082650.log
14.09.2018 16:26:50 0298 I Sophos Management Agent 4.1.1.127 starting...
14.09.2018 16:26:50 0298 I Starting AdapterManager ...
14.09.2018 16:26:50 1684 I Starting AdapterMonitor thread ...
14.09.2018 16:26:50 1684 I Loading new adapters: 4 registered adapters; 0 loaded adapters.
14.09.2018 16:26:50 1684 I Detected new adapter ALC.
14.09.2018 16:26:50 1684 I Loading adapter ALC ...
14.09.2018 16:26:50 1684 I SAUAdapter - SAU RegistryWatcher: Failed to open registry key SOFTWARE\Sophos\AutoUpdate\UpdateStatus\Details with error 2
14.09.2018 16:26:50 1684 I SAUAdapter - SAU IPCBase::IPCBase: Connected to shared memory A32951C539924a12B3C8F2FDA5A268E4
14.09.2018 16:26:50 1570 I SAUAdapter - SAU IPCListener::Wait started
14.09.2018 16:26:50 1570 I SAUAdapter - SAU IPCListener::Wait received message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSStartUpdate" />
14.09.2018 16:26:50 1684 W Services::GetAdapterData(), data item name SAUPolicy is unknown
14.09.2018 16:26:50 1570 I SAUAdapter - SAU StartingUpdate has been set
14.09.2018 16:26:50 1570 I SAUAdapter - SAU IPCListener::Wait Waiting for more messages
14.09.2018 16:26:50 1684 I SAUAdapter - SAU AdapterImpl: Could not construct the adapter. MalformedXML: Empty document
14.09.2018 16:26:50 1570 I SAUAdapter - SAU IPCListener::Wait Waiting for more messages
14.09.2018 16:26:50 1684 I SAUAdapter - SAU Returning Adapter: 0072C890
14.09.2018 16:26:50 1684 I SAUAdapter - SAU RegisterStateObserver : 00DED998
14.09.2018 16:26:50 1684 I SAUAdapter - SAU RegisterConfigStateObserver : 00DED99C
14.09.2018 16:26:50 1684 I SAUAdapter - SAU RegisterEventObserver : 00DED9C0
14.09.2018 16:26:50 1684 I Adapter ALC has been loaded successfully.
14.09.2018 16:26:50 1684 I Detected new adapter SAV.
14.09.2018 16:26:50 1684 I Loading adapter SAV ...
14.09.2018 16:26:50 0FCC I SAUAdapter - SAU AdapterImpl::Notify Notifying agent of configuration change...
14.09.2018 16:26:50 0FCC I SAUAdapter - SAU AdapterImpl::Notify Error: ConfigurationState was NULL.
14.09.2018 16:26:50 0FCC I SAUAdapter - SAU AdapterImpl: Notifying agent of status change: <?xml version="1.0" encoding="utf-8" ?><status xmlns="com.sophos\mansys\status" type="sau"><CompRes xmlns="com.sophos\msys\csc" Res="NoRef" policyType="1" /><autoUpdate xmlns="http://www.sophos.com/xml/mansys/AutoUpdateStatus.xsd"><endpoint id="c4976b0f-5f02-5019-b148-8af85f075e37" /></autoUpdate></status>
14.09.2018 16:26:50 0FCC I ALC state observer notified that ALC is running
14.09.2018 16:26:50 0FCC I ALC state observer received a status: <?xml version="1.0" encoding="utf-8" ?><status xmlns="com.sophos\mansys\status" type="sau"><CompRes xmlns="com.sophos\msys\csc" Res="NoRef" policyType="1" /><autoUpdate xmlns="http://www.sophos.com/xml/mansys/AutoUpdateStatus.xsd"><endpoint id="c4976b0f-5f02-5019-b148-8af85f075e37" /></autoUpdate></status>
14.09.2018 16:26:50 1684 W Services::GetAdapterData(), data item name SAVAdapterConfig is unknown
14.09.2018 16:26:50 1684 W Services::GetAdapterData(), data item name APPCAdapterConfig is unknown
14.09.2018 16:26:50 1684 W Services::GetAdapterData(), data item name TPAdapterConfig is unknown
14.09.2018 16:26:50 1684 W Services::GetAdapterData(), data item name DATCAdapterConfig is unknown
14.09.2018 16:26:50 1684 W Services::GetAdapterData(), data item name DEVCAdapterConfig is unknown
14.09.2018 16:26:50 1684 I Adapter SAV has been loaded successfully.
14.09.2018 16:26:50 1684 I Detected new adapter SED.
14.09.2018 16:26:50 1684 I Loading adapter SED ...
14.09.2018 16:26:50 1684 I SedAdapter: Initialising
14.09.2018 16:26:50 1684 W Services::GetAdapterData(), data item name policy is unknown
14.09.2018 16:26:50 1684 I SedAdapter: Initialization complete
14.09.2018 16:26:50 1684 I SED adapter registering state observer
14.09.2018 16:26:50 1684 I Adapter SED has been loaded successfully.
14.09.2018 16:26:50 1684 I Detected new adapter SWC.
14.09.2018 16:26:50 1684 I Loading adapter SWC ...
14.09.2018 16:26:50 1684 I Creating SwcAdapter
14.09.2018 16:26:50 1684 W Services::GetAdapterData(), data item name SWCPolicy is unknown
14.09.2018 16:26:50 1684 I Registering state observer
14.09.2018 16:26:50 1684 I Registering event observer
14.09.2018 16:26:50 1684 I saving event observer
14.09.2018 16:26:50 1684 I Adapter SWC has been loaded successfully.
14.09.2018 16:26:52 132C I SAV state observer notified that SAV is running
14.09.2018 16:26:52 132C I SAV state observer received a status: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<status xmlns="http://www.sophos.com/EE/EESavStatus"><csc:CompRes xmlns:csc="com.sophos\msys\csc" Res="NoRef" RevID="" policyType="2"/><csc:CompRes xmlns:csc="com.sophos\msys\csc" Res="NoRef" RevID="" policyType="7"/><ac:onAccess xmlns:ac="com.sophos\mansys\applicationcontrol" value="0"/><csc:CompRes xmlns:csc="com.sophos\msys\csc" Res="NoRef" RevID="" policyType="19"/><tp:tamperProtectionStatus xmlns:tp="http://www.sophos.com/xml/msys/tamperprotectionstatus.xsd" scanningState="off"/><csc:CompRes xmlns:csc="com.sophos\msys\csc" Res="NoRef" RevID="" policyType="15"/><dat:dataControlStatus xmlns:dat="http://www.sophos.com/xml/msys/datacontrol.xsd" scanningState="off"/><csc:CompRes xmlns:csc="com.sophos\msys\csc" Res="NoRef" RevID="" policyType="16"/><dev:deviceControlStatus xmlns:dev="http://www.sophos.com/xml/msys/devicecontrol.xsd" scanningState="off"/><entity><productId>SAVEEXP</productId><product-version>10.8.1 VE3.72.1</product-version><entityInfo>SAVXP.10.8.1 VE3.72.1</entityInfo></entity><vdl-info><virus-engine-version>3.72.1</virus-engine-version><virus-data-version>5.54</virus-data-version><idelist><ide>adwi-eki.ide</ide><ide>age-azkg.ide</ide><ide>age-azki.ide</ide><ide>age-azlf.ide</ide><ide>age-azli.ide</ide><ide>age-azls.ide</ide><ide>age-aznx.ide</ide><ide>age-azoc.ide</ide><ide>age-azox.ide</ide><ide>age-azpo.ide</ide><ide>age-azrm.ide</ide><ide>age-azsh.ide</ide><ide>autosp-j.ide</ide><ide>bank-gws.ide</ide><ide>bank-gwy.ide</ide><ide>bckdo-ab.ide</ide><ide>blada-hg.ide</ide><ide>blada-hk.ide</ide><ide>blada-hr.ide</ide><ide>blada-id.ide</ide><ide>blada-in.ide</ide><ide>blada-ja.ide</ide><ide>chisb-vt.ide</ide><ide>darkc-ht.ide</ide><ide>delf-gui.ide</ide><ide>delf-guy.ide</ide><ide>delf-gvj.ide</ide><ide>delf-gvx.ide</ide><ide>delf-gvy.ide</ide><ide>delf-gwj.ide</ide><ide>docd-ozp.ide</ide><ide>docd-pan.ide</ide><ide>docd-pdf.ide</ide><ide>docd-pdk.ide</ide><ide>docd-phy.ide</ide><ide>docd-pix.ide</ide><ide>docd-pml.ide</ide><ide>docd-pmn.ide</ide><ide>docd-pqb.ide</ide><ide>docdr-et.ide</ide><ide>docph-ad.ide</ide><ide>docph-y.ide</ide><ide>drop-ui.ide</ide><ide>emoge-fn.ide</ide><ide>emoge-fo.ide</ide><ide>emoge-fq.ide</ide><ide>emot-aai.ide</ide><ide>emot-aan.ide</ide><ide>emot-aas.ide</ide><ide>emot-aau.ide</ide><ide>emot-abc.ide</ide><ide>emot-abo.ide</ide><ide>emot-abw.ide</ide><ide>emot-acg.ide</ide><ide>emot-aco.ide</ide><ide>emot-acp.ide</ide><ide>emot-acq.ide</ide><ide>emot-acr.ide</ide><ide>emot-adh.ide</ide><ide>emot-adi.ide</ide><ide>emote-vz.ide</ide><ide>emote-wr.ide</ide><ide>emote-wt.ide</ide><ide>emote-wv.ide</ide><ide>emote-wy.ide</ide><ide>emote-xb.ide</ide><ide>emote-ya.ide</ide><ide>emote-yt.ide</ide><ide>emote-zn.ide</ide><ide>emote-zp.ide</ide><ide>emote-zr.ide</ide><ide>encdo-af.ide</ide><ide>encdo-ah.ide</ide><ide>encdo-an.ide</ide><ide>fare-fih.ide</ide><ide>fare-fiv.ide</ide><ide>fare-fiw.ide</ide><ide>fare-fja.ide</ide><ide>fare-fje.ide</ide><ide>fare-fjs.ide</ide><ide>fare-fkn.ide</ide><ide>fare-fld.ide</ide><ide>fare-flj.ide</ide><ide>fare-fmd.ide</ide><ide>fare-fmg.ide</ide><ide>fare-fnd.ide</ide><ide>fare-fnj.ide</ide><ide>fare-fnx.ide</ide><ide>fare-fol.ide</ide><ide>fare-fpb.ide</ide><ide>fare-fpi.ide</ide><ide>fare-fpt.ide</ide><ide>fare-fpu.ide</ide><ide>fare-fpw.ide</ide><ide>fare-frd.ide</ide><ide>fare-fre.ide</ide><ide>fare-fry.ide</ide><ide>formb-da.ide</ide><ide>formb-dd.ide</ide><ide>formb-dq.ide</ide><ide>formb-dr.ide</ide><ide>formb-ed.ide</ide><ide>formb-eh.ide</ide><ide>formb-eo.ide</ide><ide>formb-eq.ide</ide><ide>formb-eu.ide</ide><ide>formbo-t.ide</ide><ide>formbo-u.ide</ide><ide>fuerbo-g.ide</ide><ide>fuerbo-h.ide</ide><ide>gandcr-w.ide</ide><ide>gen-e.ide</ide><ide>hawke-rx.ide</ide><ide>htadr-al.ide</ide><ide>htmld-ie.ide</ide><ide>hupig-wm.ide</ide><ide>inje-dks.ide</ide><ide>inje-dku.ide</ide><ide>inje-dle.ide</ide><ide>inje-dli.ide</ide><ide>inje-dlo.ide</ide><ide>inje-dlz.ide</ide><ide>inje-dmd.ide</ide><ide>inje-dmj.ide</ide><ide>keylo-dt.ide</ide><ide>ke
14.09.2018 16:26:53 0298 I InitialiseClientLibraryLocal Agent, SOFTWARE\Sophos\Remote Management System\ManagementAgent\Private, , 1,  ... 
14.09.2018 16:26:54 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:26:54 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:26:54 1684 I Something has changed in the adapter registration configuration.
14.09.2018 16:26:55 1684 I Unloading  adapter SED ...
14.09.2018 16:26:55 1684 I SED adapter unregistering state observer
14.09.2018 16:26:55 1684 I Adapter SED has been unloaded.
14.09.2018 16:26:55 1684 I Loading new adapters: 3 registered adapters; 3 loaded adapters.
14.09.2018 16:26:55 1684 I Something has changed in the adapter registration configuration.
14.09.2018 16:26:56 1684 I Loading new adapters: 4 registered adapters; 3 loaded adapters.
14.09.2018 16:26:56 1684 I Detected new adapter SED.
14.09.2018 16:26:56 1684 I Loading adapter SED ...
14.09.2018 16:26:56 1684 I SedAdapter: Initialising
14.09.2018 16:26:56 1684 W Services::GetAdapterData(), data item name policy is unknown
14.09.2018 16:26:56 1684 I SedAdapter: Initialization complete
14.09.2018 16:26:56 1684 I SED adapter registering state observer
14.09.2018 16:26:56 1684 I Adapter SED has been loaded successfully.
14.09.2018 16:26:56 1684 I Something has changed in the adapter registration configuration.
14.09.2018 16:26:57 1684 I Loading new adapters: 4 registered adapters; 4 loaded adapters.
14.09.2018 16:26:58 0FB4 I SAUAdapter - SAU AdapterImpl::Notify Notifying agent of configuration change...
14.09.2018 16:26:58 0FB4 I SAUAdapter - SAU AdapterImpl::Notify Error: ConfigurationState was NULL.
14.09.2018 16:26:58 0FB4 I SAUAdapter - SAU AdapterImpl: Notifying agent of status change: <?xml version="1.0" encoding="utf-8" ?><status xmlns="com.sophos\mansys\status" type="sau"><CompRes xmlns="com.sophos\msys\csc" Res="NoRef" policyType="1" /><autoUpdate xmlns="http://www.sophos.com/xml/mansys/AutoUpdateStatus.xsd"><endpoint id="c4976b0f-5f02-5019-b148-8af85f075e37" /></autoUpdate></status>
14.09.2018 16:26:58 0FB4 I ALC state observer notified that ALC is running
14.09.2018 16:26:58 0FB4 I ALC state observer received a status: <?xml version="1.0" encoding="utf-8" ?><status xmlns="com.sophos\mansys\status" type="sau"><CompRes xmlns="com.sophos\msys\csc" Res="NoRef" policyType="1" /><autoUpdate xmlns="http://www.sophos.com/xml/mansys/AutoUpdateStatus.xsd"><endpoint id="c4976b0f-5f02-5019-b148-8af85f075e37" /></autoUpdate></status>
14.09.2018 16:26:59 132C I SAV state observer notified that SAV is running
14.09.2018 16:26:59 132C I SAV state observer received a status: <?xml version="1.0" encoding="UTF-8" standalone="yes"?>

<status xmlns="http://www.sophos.com/EE/EESavStatus"><csc:CompRes xmlns:csc="com.sophos\msys\csc" Res="NoRef" RevID="" policyType="2"/><csc:CompRes xmlns:csc="com.sophos\msys\csc" Res="NoRef" RevID="" policyType="7"/><ac:onAccess xmlns:ac="com.sophos\mansys\applicationcontrol" value="0"/><csc:CompRes xmlns:csc="com.sophos\msys\csc" Res="NoRef" RevID="" policyType="19"/><tp:tamperProtectionStatus xmlns:tp="http://www.sophos.com/xml/msys/tamperprotectionstatus.xsd" scanningState="off"/><csc:CompRes xmlns:csc="com.sophos\msys\csc" Res="NoRef" RevID="" policyType="15"/><dat:dataControlStatus xmlns:dat="http://www.sophos.com/xml/msys/datacontrol.xsd" scanningState="off"/><csc:CompRes xmlns:csc="com.sophos\msys\csc" Res="NoRef" RevID="" policyType="16"/><dev:deviceControlStatus xmlns:dev="http://www.sophos.com/xml/msys/devicecontrol.xsd" scanningState="off"/><entity><productId>SAVEEXP</productId><product-version>10.8.1 VE3.72.1</product-version><entityInfo>SAVXP.10.8.1 VE3.72.1</entityInfo></entity><vdl-info><virus-engine-version>3.72.1</virus-engine-version><virus-data-version>5.54</virus-data-version><idelist><ide>adwi-eki.ide</ide><ide>age-azkg.ide</ide><ide>age-azki.ide</ide><ide>age-azlf.ide</ide><ide>age-azli.ide</ide><ide>age-azls.ide</ide><ide>age-aznx.ide</ide><ide>age-azoc.ide</ide><ide>age-azox.ide</ide><ide>age-azpo.ide</ide><ide>age-azrm.ide</ide><ide>age-azsh.ide</ide><ide>autosp-j.ide</ide><ide>bank-gws.ide</ide><ide>bank-gwy.ide</ide><ide>bckdo-ab.ide</ide><ide>blada-hg.ide</ide><ide>blada-hk.ide</ide><ide>blada-hr.ide</ide><ide>blada-id.ide</ide><ide>blada-in.ide</ide><ide>blada-ja.ide</ide><ide>chisb-vt.ide</ide><ide>darkc-ht.ide</ide><ide>delf-gui.ide</ide><ide>delf-guy.ide</ide><ide>delf-gvj.ide</ide><ide>delf-gvx.ide</ide><ide>delf-gvy.ide</ide><ide>delf-gwj.ide</ide><ide>docd-ozp.ide</ide><ide>docd-pan.ide</ide><ide>docd-pdf.ide</ide><ide>docd-pdk.ide</ide><ide>docd-phy.ide</ide><ide>docd-pix.ide</ide><ide>docd-pml.ide</ide><ide>docd-pmn.ide</ide><ide>docd-pqb.ide</ide><ide>docdr-et.ide</ide><ide>docph-ad.ide</ide><ide>docph-y.ide</ide><ide>drop-ui.ide</ide><ide>emoge-fn.ide</ide><ide>emoge-fo.ide</ide><ide>emoge-fq.ide</ide><ide>emot-aai.ide</ide><ide>emot-aan.ide</ide><ide>emot-aas.ide</ide><ide>emot-aau.ide</ide><ide>emot-abc.ide</ide><ide>emot-abo.ide</ide><ide>emot-abw.ide</ide><ide>emot-acg.ide</ide><ide>emot-aco.ide</ide><ide>emot-acp.ide</ide><ide>emot-acq.ide</ide><ide>emot-acr.ide</ide><ide>emot-adh.ide</ide><ide>emot-adi.ide</ide><ide>emote-vz.ide</ide><ide>emote-wr.ide</ide><ide>emote-wt.ide</ide><ide>emote-wv.ide</ide><ide>emote-wy.ide</ide><ide>emote-xb.ide</ide><ide>emote-ya.ide</ide><ide>emote-yt.ide</ide><ide>emote-zn.ide</ide><ide>emote-zp.ide</ide><ide>emote-zr.ide</ide><ide>encdo-af.ide</ide><ide>encdo-ah.ide</ide><ide>encdo-an.ide</ide><ide>fare-fih.ide</ide><ide>fare-fiv.ide</ide><ide>fare-fiw.ide</ide><ide>fare-fja.ide</ide><ide>fare-fje.ide</ide><ide>fare-fjs.ide</ide><ide>fare-fkn.ide</ide><ide>fare-fld.ide</ide><ide>fare-flj.ide</ide><ide>fare-fmd.ide</ide><ide>fare-fmg.ide</ide><ide>fare-fnd.ide</ide><ide>fare-fnj.ide</ide><ide>fare-fnx.ide</ide><ide>fare-fol.ide</ide><ide>fare-fpb.ide</ide><ide>fare-fpi.ide</ide><ide>fare-fpt.ide</ide><ide>fare-fpu.ide</ide><ide>fare-fpw.ide</ide><ide>fare-frd.ide</ide><ide>fare-fre.ide</ide><ide>fare-fry.ide</ide><ide>formb-da.ide</ide><ide>formb-dd.ide</ide><ide>formb-dq.ide</ide><ide>formb-dr.ide</ide><ide>formb-ed.ide</ide><ide>formb-eh.ide</ide><ide>formb-eo.ide</ide><ide>formb-eq.ide</ide><ide>formb-eu.ide</ide><ide>formbo-t.ide</ide><ide>formbo-u.ide</ide><ide>fuerbo-g.ide</ide><ide>fuerbo-h.ide</ide><ide>gandcr-w.ide</ide><ide>gen-e.ide</ide><ide>hawke-rx.ide</ide><ide>htadr-al.ide</ide><ide>htmld-ie.ide</ide><ide>hupig-wm.ide</ide><ide>inje-dks.ide</ide><ide>inje-dku.ide</ide><ide>inje-dle.ide</ide><ide>inje-dli.ide</ide><ide>inje-dlo.ide</ide><ide>inje-dlz.ide</ide><ide>inje-dmd.ide</ide><ide>inje-dmj.ide</ide><ide>keylo-dt.ide</ide><ide>ke
14.09.2018 16:27:00 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:27:00 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:27:06 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:27:06 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:27:10 0FCC I SAUAdapter - SAU AdapterImpl::Notify Notifying agent of configuration change...
14.09.2018 16:27:10 0FCC I SAUAdapter - SAU AdapterImpl::Notify Error: ConfigurationState was NULL.
14.09.2018 16:27:10 0FCC I SAUAdapter - SAU AdapterImpl: Notifying agent of status change: <?xml version="1.0" encoding="utf-8" ?><status xmlns="com.sophos\mansys\status" type="sau"><CompRes xmlns="com.sophos\msys\csc" Res="NoRef" policyType="1" /><autoUpdate xmlns="http://www.sophos.com/xml/mansys/AutoUpdateStatus.xsd"><endpoint id="c4976b0f-5f02-5019-b148-8af85f075e37" /></autoUpdate></status>
14.09.2018 16:27:10 0FCC I ALC state observer notified that ALC is running
14.09.2018 16:27:10 0FCC I ALC state observer received a status: <?xml version="1.0" encoding="utf-8" ?><status xmlns="com.sophos\mansys\status" type="sau"><CompRes xmlns="com.sophos\msys\csc" Res="NoRef" policyType="1" /><autoUpdate xmlns="http://www.sophos.com/xml/mansys/AutoUpdateStatus.xsd"><endpoint id="c4976b0f-5f02-5019-b148-8af85f075e37" /></autoUpdate></status>
14.09.2018 16:27:11 1684 I Something has changed in the adapter registration configuration.
14.09.2018 16:27:12 1684 I Unloading  adapter ALC ...
14.09.2018 16:27:12 1684 I SAUAdapter - SAU DeRegisterStateObserver : 00DED998
14.09.2018 16:27:12 1684 I SAUAdapter - SAU DeRegisterConfigStateObserver : 00DED99C
14.09.2018 16:27:12 1684 I SAUAdapter - SAU DeRegisterEventObserver : 00DED9C0
14.09.2018 16:27:12 1684 I SAUAdapter - SAU Adapter is being deleted: 0072C890
14.09.2018 16:27:12 1684 I SAUAdapter - SAU ~AdapterImpl
14.09.2018 16:27:12 1684 I SAUAdapter - SAU Update status information saved to C:\ProgramData\Sophos\AutoUpdate\data\status\AUAdapter.xml
14.09.2018 16:27:12 1570 I SAUAdapter - SAU IPCListener::Wait exiting
14.09.2018 16:27:12 1684 I Adapter ALC has been unloaded.
14.09.2018 16:27:12 1684 I Loading new adapters: 3 registered adapters; 3 loaded adapters.
14.09.2018 16:27:12 1684 I Something has changed in the adapter registration configuration.
14.09.2018 16:27:12 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:27:12 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:27:13 1684 I Loading new adapters: 4 registered adapters; 3 loaded adapters.
14.09.2018 16:27:13 1684 I Detected new adapter ALC.
14.09.2018 16:27:13 1684 I Loading adapter ALC ...
14.09.2018 16:27:13 1684 I SAUAdapter - SAU RegistryWatcher: Failed to open registry key SOFTWARE\Sophos\AutoUpdate\UpdateStatus\Details with error 2
14.09.2018 16:27:13 1684 I SAUAdapter - SAU IPCBase::IPCBase: Connected to shared memory A32951C539924a12B3C8F2FDA5A268E4
14.09.2018 16:27:13 1684 W Services::GetAdapterData(), data item name SAUPolicy is unknown
14.09.2018 16:27:13 17DC I SAUAdapter - SAU IPCListener::Wait started
14.09.2018 16:27:13 17DC I SAUAdapter - SAU IPCListener::Wait Waiting for more messages
14.09.2018 16:27:13 1684 I SAUAdapter - SAU AdapterImpl: Could not construct the adapter. MalformedXML: Empty document
14.09.2018 16:27:13 1684 I SAUAdapter - SAU Returning Adapter: 007C94A8
14.09.2018 16:27:13 1684 I SAUAdapter - SAU RegisterStateObserver : 00E09DD8
14.09.2018 16:27:13 1684 I SAUAdapter - SAU RegisterConfigStateObserver : 00E09DDC
14.09.2018 16:27:13 1684 I SAUAdapter - SAU RegisterEventObserver : 00E09E00
14.09.2018 16:27:13 1684 I Adapter ALC has been loaded successfully.
14.09.2018 16:27:13 1684 I Something has changed in the adapter registration configuration.
14.09.2018 16:27:13 17AC I SAUAdapter - SAU AdapterImpl::Notify Notifying agent of configuration change...
14.09.2018 16:27:13 17AC I SAUAdapter - SAU AdapterImpl::Notify Error: ConfigurationState was NULL.
14.09.2018 16:27:13 17AC I SAUAdapter - SAU AdapterImpl: Notifying agent of status change: <?xml version="1.0" encoding="utf-8" ?><status xmlns="com.sophos\mansys\status" type="sau"><CompRes xmlns="com.sophos\msys\csc" Res="NoRef" policyType="1" /><autoUpdate xmlns="http://www.sophos.com/xml/mansys/AutoUpdateStatus.xsd"><endpoint id="c4976b0f-5f02-5019-b148-8af85f075e37" /></autoUpdate></status>
14.09.2018 16:27:13 17AC I ALC state observer notified that ALC is running
14.09.2018 16:27:13 17AC I ALC state observer received a status: <?xml version="1.0" encoding="utf-8" ?><status xmlns="com.sophos\mansys\status" type="sau"><CompRes xmlns="com.sophos\msys\csc" Res="NoRef" policyType="1" /><autoUpdate xmlns="http://www.sophos.com/xml/mansys/AutoUpdateStatus.xsd"><endpoint id="c4976b0f-5f02-5019-b148-8af85f075e37" /></autoUpdate></status>
14.09.2018 16:27:14 1684 I Loading new adapters: 4 registered adapters; 4 loaded adapters.
14.09.2018 16:27:14 1684 I Something has changed in the adapter registration configuration.
14.09.2018 16:27:14 10A0 I SAUAdapter - SAU AdapterImpl::Notify Notifying agent of configuration change...
14.09.2018 16:27:14 10A0 I SAUAdapter - SAU AdapterImpl::Notify Error: ConfigurationState was NULL.
14.09.2018 16:27:14 10A0 I SAUAdapter - SAU AdapterImpl: Notifying agent of status change: <?xml version="1.0" encoding="utf-8" ?><status xmlns="com.sophos\mansys\status" type="sau"><CompRes xmlns="com.sophos\msys\csc" Res="NoRef" policyType="1" /><autoUpdate xmlns="http://www.sophos.com/xml/mansys/AutoUpdateStatus.xsd"><endpoint id="c4976b0f-5f02-5019-b148-8af85f075e37" /></autoUpdate></status>
14.09.2018 16:27:14 10A0 I ALC state observer notified that ALC is running
14.09.2018 16:27:14 10A0 I ALC state observer received a status: <?xml version="1.0" encoding="utf-8" ?><status xmlns="com.sophos\mansys\status" type="sau"><CompRes xmlns="com.sophos\msys\csc" Res="NoRef" policyType="1" /><autoUpdate xmlns="http://www.sophos.com/xml/mansys/AutoUpdateStatus.xsd"><endpoint id="c4976b0f-5f02-5019-b148-8af85f075e37" /></autoUpdate></status>
14.09.2018 16:27:15 1684 I Loading new adapters: 4 registered adapters; 4 loaded adapters.
14.09.2018 16:27:17 17DC I SAUAdapter - SAU IPCListener::Wait received message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate" />
14.09.2018 16:27:17 17DC I SAUAdapter - SAU FinishedUpdate has been set
14.09.2018 16:27:17 17DC I SAUAdapter - SAU SAUAdapter was not notified by AutoUpdate of the start of the update.
14.09.2018 16:27:17 17DC I SAUAdapter - SAU ReportStatus::FinishedUpdate: Failed to read UpdateSource value in the UpdateStatus registry key.
14.09.2018 16:27:17 17DC I SAUAdapter - SAU AdapterImpl:: Notifing agent of xml change: <?xml version="1.0" encoding="utf-8" ?><event xmlns="http://www.sophos.com/EE/AUEvent" type="sophos.mgt.entityAppEvent"><timestamp>20180914 082717</timestamp><user><userId></userId><domain></domain></user><appInfo><number>0</number><message><message_inserts /></message><updateSource></updateSource></appInfo><entityInfo xmlns="http://www.sophos.com/EntityInfo">AGENT:WIN:1.0.0</entityInfo></event>
14.09.2018 16:27:17 17DC I ALC event observer received an event: <?xml version="1.0" encoding="utf-8" ?><event xmlns="http://www.sophos.com/EE/AUEvent" type="sophos.mgt.entityAppEvent"><timestamp>20180914 082717</timestamp><user><userId></userId><domain></domain></user><appInfo><number>0</number><message><message_inserts /></message><updateSource></updateSource></appInfo><entityInfo xmlns="http://www.sophos.com/EntityInfo">AGENT:WIN:1.0.0</entityInfo></event>
14.09.2018 16:27:17 17DC I SAUAdapter - SAU Update status information saved to C:\ProgramData\Sophos\AutoUpdate\data\status\AUAdapter.xml
14.09.2018 16:27:17 17DC I SAUAdapter - SAU IPCListener::Wait Waiting for more messages
14.09.2018 16:27:18 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:27:18 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:27:24 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:27:24 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:27:30 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:27:30 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:27:36 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:27:36 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:27:42 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:27:42 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:27:48 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:27:48 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:27:54 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:27:54 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:28:00 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:28:00 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:28:06 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:28:06 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:28:12 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:28:12 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:28:18 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:28:18 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:28:24 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:28:24 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:28:30 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:28:30 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:28:36 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:28:36 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:28:42 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:28:42 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:28:48 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:28:48 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:28:54 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:28:54 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:29:00 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:29:00 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:29:06 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:29:06 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:29:12 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:29:12 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:29:18 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:29:18 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:29:24 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:29:24 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:29:30 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:29:30 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:29:36 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:29:36 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:29:42 15E0 W MSClient::Connect: failed to get router's IOR from supplied address and port.
14.09.2018 16:29:42 15E0 W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
14.09.2018 16:29:48 15E0 I Initializing ...
14.09.2018 16:29:48 15E0 I Running certificate verification...
14.09.2018 16:29:48 15E0 W Failed to obtain public key certificate.
14.09.2018 16:29:48 15E0 I Deleting store...
14.09.2018 16:29:48 15E0 I Getting new certificate...
14.09.2018 16:29:50 15E0 I Sent certificate request to CM.
14.09.2018 16:32:14 17DC I SAUAdapter - SAU IPCListener::Wait received message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSStartUpdate" />
14.09.2018 16:32:14 17DC I SAUAdapter - SAU StartingUpdate has been set
14.09.2018 16:32:14 17DC I SAUAdapter - SAU IPCListener::Wait Waiting for more messages
14.09.2018 16:32:19 17DC I SAUAdapter - SAU IPCListener::Wait received message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate" />
14.09.2018 16:32:19 17DC I SAUAdapter - SAU FinishedUpdate has been set
14.09.2018 16:32:19 17DC I SAUAdapter - SAU ReportStatus::FinishedUpdate: Failed to read UpdateSource value in the UpdateStatus registry key.
14.09.2018 16:32:19 17DC I SAUAdapter - SAU Update status information saved to C:\ProgramData\Sophos\AutoUpdate\data\status\AUAdapter.xml
14.09.2018 16:32:19 17DC I SAUAdapter - SAU IPCListener::Wait Waiting for more messages
14.09.2018 16:37:14 17DC I SAUAdapter - SAU IPCListener::Wait received message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSStartUpdate" />
14.09.2018 16:37:14 17DC I SAUAdapter - SAU StartingUpdate has been set
14.09.2018 16:37:14 17DC I SAUAdapter - SAU IPCListener::Wait Waiting for more messages
14.09.2018 16:37:19 17DC I SAUAdapter - SAU IPCListener::Wait received message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate" />
14.09.2018 16:37:19 17DC I SAUAdapter - SAU FinishedUpdate has been set
14.09.2018 16:37:19 17DC I SAUAdapter - SAU ReportStatus::FinishedUpdate: Failed to read UpdateSource value in the UpdateStatus registry key.
14.09.2018 16:37:19 17DC I SAUAdapter - SAU Update status information saved to C:\ProgramData\Sophos\AutoUpdate\data\status\AUAdapter.xml
14.09.2018 16:37:19 17DC I SAUAdapter - SAU IPCListener::Wait Waiting for more messages
Fullscreen Router-20180914-082651.log Download 
14.09.2018 16:26:51 0BEC I SOF: C:\ProgramData/Sophos/Remote Management System/3/Router/Logs/Router-20180914-082651.log
14.09.2018 16:26:51 0BEC I Sophos Messaging Router 4.1.1.127 starting...
14.09.2018 16:26:51 0BEC I Setting ACE_FD_SETSIZE to 138
14.09.2018 16:26:51 0BEC I Initializing CORBA...
14.09.2018 16:26:51 0BEC I Connection cache limit is 10
14.09.2018 16:26:52 0BEC I Router::ConfigureSslContext: keeping legacy compatibility of TLS 1 and TLS 1.1.
14.09.2018 16:26:52 0BEC I Creating ORB runner with 4 threads
14.09.2018 16:26:52 0BEC W No public key certificate found in the store. Requesting a new certificate.
14.09.2018 16:26:52 0BEC I Getting parent router IOR from 172.26.11.17:8192
14.09.2018 16:26:52 0BEC I This computer is part of the domain MCS2
14.09.2018 16:26:52 0BEC I Getting a new router certificate...
14.09.2018 16:27:34 0BEC I SSL handshake done, local IP address = 172.26.10.79
14.09.2018 16:28:16 0BEC I Current certificate name is 
14.09.2018 16:28:16 0BEC I Sending unique token request...
14.09.2018 16:29:41 0BEC I Got unique token: 18019
14.09.2018 16:29:41 0BEC I New certificate name is Router$140SVR1004:18019
14.09.2018 16:29:41 0BEC I Creating cryptographic key pair
14.09.2018 16:29:43 0BEC I Installing new router certificate...
14.09.2018 16:29:43 0BEC I Compliant certificate hashing algorithm.
14.09.2018 16:29:43 0BEC I This computer is part of the domain MCS2
14.09.2018 16:29:43 0BEC I This router's IOR:
IOR:010000002600000049444c3a536f70686f734d6573736167696e672f4d657373616765526f757465723a312e300000000100000000000000a4000000010102010d0000003137322e32362e31302e3739000001204100000014010f004e5550000000210000000001000000526f6f74504f4100526f7574657250657273697374656e740003000000010000004d657373616765526f7574657200000003000000000000000800000001d8ff00004f4154010000001800000001d8ff000100010001000000010001050901010000000000140000000800000001d8a60086000220
14.09.2018 16:29:43 0BEC I Successfully validated this router's IOR
14.09.2018 16:29:43 0BEC I Reading router table file
14.09.2018 16:29:43 0BEC I Host name: 140SVR1004
14.09.2018 16:29:43 0BEC I Local IP addresses: 172.26.10.79 
14.09.2018 16:29:43 0BEC I Resolved name: 140SVR1004.MCS2.local
14.09.2018 16:29:43 0BEC I Resolved alias/es: 
14.09.2018 16:29:43 0BEC I Resolved IP addresses: 172.26.10.79 
14.09.2018 16:29:43 0BEC I Resolved reverse names/aliases: 140SVR1004.MCS2.local 
14.09.2018 16:29:43 0BEC I Waiting for messages...
14.09.2018 16:29:43 1258 I Getting parent router IOR from 172.26.11.17:8192
14.09.2018 16:29:43 0BEC I RouterSystemCheck::onInfoPortsUsed() - number of user ports 6, max number of user ports 15360
14.09.2018 16:29:43 1258 I Received parent router's IOR:
IOR:010000002600000049444c3a536f70686f734d6573736167696e672f4d657373616765526f757465723a312e300000000400000000000000a4000000010102000e0000003139322e3136382e312e3137310001204100000014010f004e5550000000210000000001000000526f6f74504f4100526f7574657250657273697374656e740003000000010000004d657373616765526f757465727574650300000000000000080000000100a600004f415401000000180000000100a600010001000100000001000105090101000000000014000000080000000100a6008600022000000000a800000001010200100000003136392e3235342e3137332e31373200012000004100000014010f004e5550000000210000000001000000526f6f74504f4100526f7574657250657273697374656e740003000000010000004d657373616765526f757465720000000300000000000000080000000182a600004f415401000000180000000100a600010001000100000001000105090101000000000014000000080000000100a6008600022000000000a4000000010102000d0000003137322e32362e31312e3137003701204100000014010f004e5550000000210000000001000000526f6f74504f4100526f7574657250657273697374656e740003000000010000004d657373616765526f757465727574650300000000000000080000000100a600004f415401000000180000000100a600010001000100000001000105090101000000000014000000080000000100a6008600022000000000a4000000010102000d0000003137322e32362e31312e3138000201204100000014010f004e5550000000210000000001000000526f6f74504f4100526f7574657250657273697374656e740003000000010000004d657373616765526f757465720000000300000000000000080000000100a600004f415401000000180000000182a600010001000100000001000105090101000000000014000000080000000100a60086000220
14.09.2018 16:29:43 1258 I Successfully validated parent router's IOR
14.09.2018 16:29:43 1258 I Accessing parent
14.09.2018 16:29:48 0770 I Logged on Agent for certification
14.09.2018 16:29:50 15C0 I Routing to parent: id=039B717E, origin=Router$140SVR1004:18019.Agent, dest=CM, type=Certification.CertRequest
Fullscreen ReportData.xml Download 
<?xml version='1.0' encoding='UTF-16' ?>
<?xml-stylesheet type='text/xsl' href='transform.xslt' ?>
<RMS_status_report>
<string msg='explanation' />
<sections>
<section name='DNS'>
	<string msg='OK' />
</section>

<!-- And another -->
<section name='Certification'>
	<string msg='OK' />
</section>

<!-- And another -->
<section name='Incoming'>
	<string msg='OK' />
</section>

<!-- And another -->
<section name='Outgoing'>
	<string msg='OK' />
</section>

<!-- And another -->
</sections>
<computer_data>
<language>
en_SG
</language>
<local_time>
Friday, 14 September 2018 4:29:43 PM
</local_time>
<GMT>
Friday, 14 September 2018 8:29:43 AM
</GMT>
<computer_name>
140SVR1004
</computer_name>
<domain>
MCS2
</domain>
<router_name>
Router$140SVR1004:18019
</router_name>
<IOR_port>8192</IOR_port>
<SSLIOP_port>8194</SSLIOP_port>
<parent_addresses>
172.26.11.17,i82dnc1002.mcs2.local,I82DNC1002
</parent_addresses>
<actual_parent>
172.26.11.17
</actual_parent>
<router_type>
endpoint
</router_type>
</computer_data>
</RMS_status_report>
 



This thread was automatically locked due to age.
  • 0

    Hello Boon Ken Tan,

    these aren't the complete logs, are they? Specifically the Router log stops at 16:29:50 when it requests a certificate from the management server. The installation might have succeeded but as long as the endpoint hasn't registered with the server it can't send its status.

    Christian

  • 0

    Any update on this? I've got Sophos working on it, and they tell me they can replicate the issue in house. At least the only error in my client agent log is SAUAdapter - SAU RegistryWatcher: Failed to open registry key SOFTWARE\Sophos\AutoUpdate\UpdateStatus\Details with error 2

    Weird one though, while the error is generated the installation is actually continuing. If you let it go, the SEC error goes away and the machine shows as protected. If you remove all the components and delete the registry key in the error the installation doesn't generate a message at all. This is a new issue for the last month or so.

    I can replicate this on two different domains, one server being 2008r2 and the other 2012r2

Unfiltered HTML