Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 6 replies
  • Subscribers 4 subscribers
  • Views 3179 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AutoUpdate cannot update via HTTP

Daniel Gebler

Hi Guys,

 

I have a tricky error with AutoUpdate and I might be overlooking something obvious. Or might be a case for WireShark.

There are ~20 clients that have the same issue. They are not on a specific subnet. Thousands of other clients update from the same location via HTTP without issues. iconn.cfg is correct and identical to machines that update fine.

I can psexec to the client and from a powershell running invoke-webrequest to the master.upd file in the CID works just fine. But AutoUpdate complains not being able to download it, then the rest goes wrong from there. 

 

Trace(2019-Oct-30 09:24:33): Processing CID update location: http://SUM_FQDN/SophosUpdate/CIDs/S000/SAVSCFXP/

...

Trace(2019-Oct-30 09:24:33): Remote connection over HTTP.
Trace(2019-Oct-30 09:24:33): File master.upd not found (Remote). Return code 0x80040f04
Trace(2019-Oct-30 09:24:33): Unable to read file master.upd (Remote)
Trace(2019-Oct-30 09:24:33): Unable to synchronise file root.upd.
Trace(2019-Oct-30 09:24:33): Unable to synchronise file escdp.dat.
Trace(2019-Oct-30 09:24:33): Unable to synchronise file expired_credential.dat.

Full log is below.

Since I was wary of HTTP errors, my remediation script actually copies the whole CID to the local temp folder to the client, and installs and updates from there. At least this goes through fine. Then the machine connects to the management server and after switching to the correct updating policy any subsequent update fails with the same error.

ERROR:   Could not find a source for updated packages.

 

 

Trace(2019-Oct-30 09:24:33): =========================
Trace(2019-Oct-30 09:24:33): ALUpdate is starting.
Trace(2019-Oct-30 09:24:33): AutoUpdate version: 5.14
Trace(2019-Oct-30 09:24:33): Build : 212545
Trace(2019-Oct-30 09:24:33): Command line : -ManualUpdate
Trace(2019-Oct-30 09:24:33): =========================
Trace(2019-Oct-30 09:24:33): Process security set successfully
Trace(2019-Oct-30 09:24:33): Product iProductData.{390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92} has been added.
Trace(2019-Oct-30 09:24:33): Product iProductData.{390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92} is available from Sophos.
Trace(2019-Oct-30 09:24:33): Product iProductData.{390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92} is not the Spam Rules package.
Trace(2019-Oct-30 09:24:33): Product iProductData.{D752FAB9-5883-4b36-8740-61565B6BAD29} has not been added.
Trace(2019-Oct-30 09:24:33): Product iProductData.{E17FE03B-0501-4aaa-BC69-0129D965F311} has been added.
Trace(2019-Oct-30 09:24:33): Product iProductData.{E17FE03B-0501-4aaa-BC69-0129D965F311} is available from Sophos.
Trace(2019-Oct-30 09:24:33): Product iProductData.{E17FE03B-0501-4aaa-BC69-0129D965F311} is not the Spam Rules package.
Trace(2019-Oct-30 09:24:33): Product subscription is disabled: iProductData.{7998C326-2CA5-4830-B7D2-B792D2460975} action value is:0
Trace(2019-Oct-30 09:24:33): Product iProductData.{7998C326-2CA5-4830-B7D2-B792D2460975} has not been added.
Trace(2019-Oct-30 09:24:33): Product iProductData.{3B758ED7-87C1-4e89-BDE1-F49DFF1249F6} has not been added.
Trace(2019-Oct-30 09:24:33): Product iProductData.{B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} has been added.
Trace(2019-Oct-30 09:24:33): Product iProductData.{B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} is available from Sophos.
Trace(2019-Oct-30 09:24:33): Product iProductData.{B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} is the Spam Rules package.
Trace(2019-Oct-30 09:24:33): Computer is a not possible cluster
Trace(2019-Oct-30 09:24:33): PureMessageDetector::AreSpamRulesRequired - Could not open registry on Software\Sophos\MMEx\Config\Global
Trace(2019-Oct-30 09:24:33): ConfigurationImpl, considering PMSR 2.6: PureMessage not installed, PMSR package will not be updated without a subscription
Trace(2019-Oct-30 09:24:33): Considering subscribed products.
Trace(2019-Oct-30 09:24:33): Considering product {1129226C-32AB-4B72-85E1-A9CC8DFBC859}
Trace(2019-Oct-30 09:24:33): Product {1129226C-32AB-4B72-85E1-A9CC8DFBC859} is not already subscribed.
Trace(2019-Oct-30 09:24:33): Product {1129226C-32AB-4B72-85E1-A9CC8DFBC859} was added to the list.
Trace(2019-Oct-30 09:24:33): Considering product {8087796B-2289-4897-98A5-58FF23DAAFD0}
Trace(2019-Oct-30 09:24:33): Product {8087796B-2289-4897-98A5-58FF23DAAFD0} is not already subscribed.
Trace(2019-Oct-30 09:24:33): Product {8087796B-2289-4897-98A5-58FF23DAAFD0} was added to the list.
Trace(2019-Oct-30 09:24:33): Considering product {9BF40A4E-23AE-48be-9974-5A1F261DBEE8}
Trace(2019-Oct-30 09:24:33): Product {9BF40A4E-23AE-48be-9974-5A1F261DBEE8} is not already subscribed.
Trace(2019-Oct-30 09:24:33): Product {9BF40A4E-23AE-48be-9974-5A1F261DBEE8} was added to the list.
Trace(2019-Oct-30 09:24:33): Considering product {D918120F-5C45-4e77-BEBF-7D921273B2E0}
Trace(2019-Oct-30 09:24:33): Product {D918120F-5C45-4e77-BEBF-7D921273B2E0} is not already subscribed.
Trace(2019-Oct-30 09:24:33): Product {D918120F-5C45-4e77-BEBF-7D921273B2E0} is Patch
Trace(2019-Oct-30 09:24:33): Product {D918120F-5C45-4e77-BEBF-7D921273B2E0} was added to the list.
Trace(2019-Oct-30 09:24:33): Considering product {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E}
Trace(2019-Oct-30 09:24:33): Product {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E} is not already subscribed.
Trace(2019-Oct-30 09:24:33): Product {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E} was added to the list.
Trace(2019-Oct-30 09:24:33): Product {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E} is removable.
Trace(2019-Oct-30 09:24:33): Product {8087796B-2289-4897-98A5-58FF23DAAFD0} is removable.
Trace(2019-Oct-30 09:24:33): Product {1129226C-32AB-4B72-85E1-A9CC8DFBC859} is removable.
Trace(2019-Oct-30 09:24:33): Could not read registry entry containing Sophos address - using hardcoded value.
Trace(2019-Oct-30 09:24:33): GenerateCustomerID: complete
Trace(2019-Oct-30 09:24:33): Computer is a not possible cluster
Trace(2019-Oct-30 09:24:33): PureMessageDetector::AreSpamRulesRequired - Could not open registry on Software\Sophos\MMEx\Config\Global
Trace(2019-Oct-30 09:24:33): IPCBase::IPCBase: Connected to shared memory A32951C539924a12B3C8F2FDA5A268E4
Trace(2019-Oct-30 09:24:33): IPCSender::ProcessSend started
Trace(2019-Oct-30 09:24:33): IPCSender::ProcessSend: No messages in queue, starting to wait
Trace(2019-Oct-30 09:24:33): RMSMessageHandler: ALUpdateStart
Trace(2019-Oct-30 09:24:33): IPCSender::Write: Writing message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSStartUpdate" />
Trace(2019-Oct-30 09:24:33): IPCSender::ProcessSend: Send message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSStartUpdate" />
Trace(2019-Oct-30 09:24:33): IPCSender::ProcessSend: No messages in queue, starting to wait
Trace(2019-Oct-30 09:24:33): ALUpdate(AutoUpdate.Started):
Trace(2019-Oct-30 09:24:33): UpdateCoordinator::UpdateNow: Entering
Trace(2019-Oct-30 09:24:33): PopulateCache: Entering
Trace(2019-Oct-30 09:24:33): UpdateCoordinator::UpdateNow: current platform is WIN_7_X64 reelase:
Trace(2019-Oct-30 09:24:33): ProductFactory::Create: SimpleProduct: {390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92}
Trace(2019-Oct-30 09:24:33): ProductFactory::Create: SimpleProduct: {E17FE03B-0501-4aaa-BC69-0129D965F311}
Trace(2019-Oct-30 09:24:33): ProductFactory::Create: SimpleProduct: {1129226C-32AB-4B72-85E1-A9CC8DFBC859}
Trace(2019-Oct-30 09:24:33): ProductFactory::Create: SimpleProduct: {8087796B-2289-4897-98A5-58FF23DAAFD0}
Trace(2019-Oct-30 09:24:33): ProductFactory::Create: SAU Product
Trace(2019-Oct-30 09:24:33): ProductFactory::Create: SimpleProduct: {D918120F-5C45-4e77-BEBF-7D921273B2E0}
Trace(2019-Oct-30 09:24:33): ProductFactory::Create: SimpleProduct: {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E}
Trace(2019-Oct-30 09:24:33): RelativeCidUpdateSourceLocator::AugmentUpdateSources: Entering
Trace(2019-Oct-30 09:24:33): Processing CID update location: SUM_FQDN/.../
Trace(2019-Oct-30 09:24:33): Skipping SDDS2 update location: Sophos
Trace(2019-Oct-30 09:24:33): RelativeCidUpdateSourceLocator::AugmentUpdateSources: Finished. Number of new locations added: 0
Trace(2019-Oct-30 09:24:33): UpdateCoordinator::UpdateNow: About to Sync list of products
Trace(2019-Oct-30 09:24:33): UpdateLocationFacade::SyncProduct: Last Update Mechanism = Unknown
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Started:
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, creating update location
Trace(2019-Oct-30 09:24:33): Calling package_source_init
Trace(2019-Oct-30 09:24:33): TrySyncProduct, Calling BeginSync
Trace(2019-Oct-30 09:24:33): Custom certificate already present.
Trace(2019-Oct-30 09:24:33): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\escdp.dat
Trace(2019-Oct-30 09:24:33): Remote connection over HTTP.
Trace(2019-Oct-30 09:24:33): File master.upd not found (Remote). Return code 0x80040f04
Trace(2019-Oct-30 09:24:33): Unable to read file master.upd (Remote)
Trace(2019-Oct-30 09:24:33): Unable to synchronise file root.upd.
Trace(2019-Oct-30 09:24:33): Unable to synchronise file escdp.dat.
Trace(2019-Oct-30 09:24:33): Unable to synchronise file expired_credential.dat.
Trace(2019-Oct-30 09:24:33): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\ProductID.dat
Trace(2019-Oct-30 09:24:33): Unable to synchronise file ProductID.dat.
Trace(2019-Oct-30 09:24:33): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\order.xml
Trace(2019-Oct-30 09:24:33): Unable to synchronise file order.xml.
Trace(2019-Oct-30 09:24:33): File root.upd recovered.
Trace(2019-Oct-30 09:24:33): File escdp.dat recovered.
Trace(2019-Oct-30 09:24:33): File ProductID.dat recovered.
Trace(2019-Oct-30 09:24:33): Unable to recover file expired_credential.dat.
Trace(2019-Oct-30 09:24:33): File order.xml recovered.
Trace(2019-Oct-30 09:24:33): Error -2147217660 in ReadCustomerIDFile
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Calling SyncProduct with {390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92}
Trace(2019-Oct-30 09:24:33): CIDUpdateLocation::SyncProduct - Updating Product: RMSNT
Trace(2019-Oct-30 09:24:33): CIDUpdate(SyncProduct.Start): RMSNT, SUM_FQDN/.../
Trace(2019-Oct-30 09:24:33): CIDUpdateLocation::Sync - Updating from http CID: SUM_FQDN/.../rms
Trace(2019-Oct-30 09:24:33): CIDSync(CidSyncMessage):
Trace(2019-Oct-30 09:24:33): CIDSync(CidSyncMessage):
Trace(2019-Oct-30 09:24:33): CIDSyncCallback, SynchronisationTerminated - Code = -2147217660
Trace(2019-Oct-30 09:24:33): CIDSyncCallback, SynchronisationTerminated - MapFile = C:\ProgramData\Sophos\AutoUpdate\cache\rms.map
Trace(2019-Oct-30 09:24:33): CIDUpdateLocation::SyncProduct: Failed to update product (RMSNT) from "SUM_FQDN/.../", Error is :CIDSYNC_E_FILESYNCERROR (Error during file download.)
Trace(2019-Oct-30 09:24:33): CIDUpdate(CIDDownloadFailed): RMSNT, SUM_FQDN/.../
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, SyncProduct returned - 0
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Ended - 0
Trace(2019-Oct-30 09:24:33): UpdateLocationFacade::SyncProduct: Last Update Mechanism = Unknown
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Started:
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, creating update location
Trace(2019-Oct-30 09:24:33): Calling package_source_init
Trace(2019-Oct-30 09:24:33): TrySyncProduct, Calling BeginSync
Trace(2019-Oct-30 09:24:33): Custom certificate already present.
Trace(2019-Oct-30 09:24:33): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\escdp.dat
Trace(2019-Oct-30 09:24:33): Remote connection over HTTP.
Trace(2019-Oct-30 09:24:33): File master.upd not found (Remote). Return code 0x80040f04
Trace(2019-Oct-30 09:24:33): Unable to read file master.upd (Remote)
Trace(2019-Oct-30 09:24:33): Unable to synchronise file root.upd.
Trace(2019-Oct-30 09:24:33): Unable to synchronise file escdp.dat.
Trace(2019-Oct-30 09:24:33): Unable to synchronise file expired_credential.dat.
Trace(2019-Oct-30 09:24:33): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\ProductID.dat
Trace(2019-Oct-30 09:24:33): Unable to synchronise file ProductID.dat.
Trace(2019-Oct-30 09:24:33): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\order.xml
Trace(2019-Oct-30 09:24:33): Unable to synchronise file order.xml.
Trace(2019-Oct-30 09:24:33): File root.upd recovered.
Trace(2019-Oct-30 09:24:33): File escdp.dat recovered.
Trace(2019-Oct-30 09:24:33): File ProductID.dat recovered.
Trace(2019-Oct-30 09:24:33): Unable to recover file expired_credential.dat.
Trace(2019-Oct-30 09:24:33): File order.xml recovered.
Trace(2019-Oct-30 09:24:33): Error -2147217660 in ReadCustomerIDFile
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Calling SyncProduct with {E17FE03B-0501-4aaa-BC69-0129D965F311}
Trace(2019-Oct-30 09:24:33): CIDUpdateLocation::SyncProduct - Updating Product: SAVXP
Trace(2019-Oct-30 09:24:33): CIDUpdate(SyncProduct.Start): SAVXP, SUM_FQDN/.../
Trace(2019-Oct-30 09:24:33): CIDUpdateLocation::Sync - Updating from http CID: SUM_FQDN/.../savxp
Trace(2019-Oct-30 09:24:33): CIDSync(CidSyncMessage):
Trace(2019-Oct-30 09:24:33): CIDSync(CidSyncMessage):
Trace(2019-Oct-30 09:24:33): CIDSyncCallback, SynchronisationTerminated - Code = -2147217660
Trace(2019-Oct-30 09:24:33): CIDSyncCallback, SynchronisationTerminated - MapFile = C:\ProgramData\Sophos\AutoUpdate\cache\savxp.map
Trace(2019-Oct-30 09:24:33): CIDUpdateLocation::SyncProduct: Failed to update product (SAVXP) from "SUM_FQDN/.../", Error is :CIDSYNC_E_FILESYNCERROR (Error during file download.)
Trace(2019-Oct-30 09:24:33): CIDUpdate(CIDDownloadFailed): SAVXP, SUM_FQDN/.../
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, SyncProduct returned - 0
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Ended - 0
Trace(2019-Oct-30 09:24:33): UpdateLocationFacade::SyncProduct: Last Update Mechanism = Unknown
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Started:
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, creating update location
Trace(2019-Oct-30 09:24:33): Calling package_source_init
Trace(2019-Oct-30 09:24:33): TrySyncProduct, Calling BeginSync
Trace(2019-Oct-30 09:24:33): Custom certificate already present.
Trace(2019-Oct-30 09:24:33): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\escdp.dat
Trace(2019-Oct-30 09:24:33): Remote connection over HTTP.
Trace(2019-Oct-30 09:24:33): File master.upd not found (Remote). Return code 0x80040f04
Trace(2019-Oct-30 09:24:33): Unable to read file master.upd (Remote)
Trace(2019-Oct-30 09:24:33): Unable to synchronise file root.upd.
Trace(2019-Oct-30 09:24:33): Unable to synchronise file escdp.dat.
Trace(2019-Oct-30 09:24:33): Unable to synchronise file expired_credential.dat.
Trace(2019-Oct-30 09:24:33): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\ProductID.dat
Trace(2019-Oct-30 09:24:33): Unable to synchronise file ProductID.dat.
Trace(2019-Oct-30 09:24:33): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\order.xml
Trace(2019-Oct-30 09:24:33): Unable to synchronise file order.xml.
Trace(2019-Oct-30 09:24:33): File root.upd recovered.
Trace(2019-Oct-30 09:24:33): File escdp.dat recovered.
Trace(2019-Oct-30 09:24:33): File ProductID.dat recovered.
Trace(2019-Oct-30 09:24:33): Unable to recover file expired_credential.dat.
Trace(2019-Oct-30 09:24:33): File order.xml recovered.
Trace(2019-Oct-30 09:24:33): Error -2147217660 in ReadCustomerIDFile
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Calling SyncProduct with {1129226C-32AB-4B72-85E1-A9CC8DFBC859}
Trace(2019-Oct-30 09:24:33): CIDUpdateLocation::SyncProduct - Updating Product: Sophos Endpoint Defense
Trace(2019-Oct-30 09:24:33): CIDUpdate(SyncProduct.Start): Sophos Endpoint Defense, SUM_FQDN/.../
Trace(2019-Oct-30 09:24:33): CIDUpdateLocation::Sync - Updating from http CID: SUM_FQDN/.../sed64
Trace(2019-Oct-30 09:24:33): CIDSync(CidSyncMessage):
Trace(2019-Oct-30 09:24:33): CIDSync(CidSyncMessage):
Trace(2019-Oct-30 09:24:33): CIDSyncCallback, SynchronisationTerminated - Code = -2147217660
Trace(2019-Oct-30 09:24:33): CIDSyncCallback, SynchronisationTerminated - MapFile = C:\ProgramData\Sophos\AutoUpdate\cache\sed64.map
Trace(2019-Oct-30 09:24:33): CIDUpdateLocation::SyncProduct: Failed to update product (Sophos Endpoint Defense) from "SUM_FQDN/.../", Error is :CIDSYNC_E_FILESYNCERROR (Error during file download.)
Trace(2019-Oct-30 09:24:33): CIDUpdate(CIDDownloadFailed): Sophos Endpoint Defense, SUM_FQDN/.../
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, SyncProduct returned - 0
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Ended - 0
Trace(2019-Oct-30 09:24:33): UpdateLocationFacade::SyncProduct: Last Update Mechanism = Unknown
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Started:
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, creating update location
Trace(2019-Oct-30 09:24:33): Calling package_source_init
Trace(2019-Oct-30 09:24:33): TrySyncProduct, Calling BeginSync
Trace(2019-Oct-30 09:24:33): Custom certificate already present.
Trace(2019-Oct-30 09:24:33): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\escdp.dat
Trace(2019-Oct-30 09:24:33): Remote connection over HTTP.
Trace(2019-Oct-30 09:24:33): File master.upd not found (Remote). Return code 0x80040f04
Trace(2019-Oct-30 09:24:33): Unable to read file master.upd (Remote)
Trace(2019-Oct-30 09:24:33): Unable to synchronise file root.upd.
Trace(2019-Oct-30 09:24:33): Unable to synchronise file escdp.dat.
Trace(2019-Oct-30 09:24:33): Unable to synchronise file expired_credential.dat.
Trace(2019-Oct-30 09:24:33): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\ProductID.dat
Trace(2019-Oct-30 09:24:33): Unable to synchronise file ProductID.dat.
Trace(2019-Oct-30 09:24:33): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\order.xml
Trace(2019-Oct-30 09:24:33): Unable to synchronise file order.xml.
Trace(2019-Oct-30 09:24:33): File root.upd recovered.
Trace(2019-Oct-30 09:24:33): File escdp.dat recovered.
Trace(2019-Oct-30 09:24:33): File ProductID.dat recovered.
Trace(2019-Oct-30 09:24:33): Unable to recover file expired_credential.dat.
Trace(2019-Oct-30 09:24:33): File order.xml recovered.
Trace(2019-Oct-30 09:24:33): Error -2147217660 in ReadCustomerIDFile
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Calling SyncProduct with {8087796B-2289-4897-98A5-58FF23DAAFD0}
Trace(2019-Oct-30 09:24:33): CIDUpdateLocation::SyncProduct - Updating Product: Sophos Network Threat Protection
Trace(2019-Oct-30 09:24:33): CIDUpdate(SyncProduct.Start): Sophos Network Threat Protection, SUM_FQDN/.../
Trace(2019-Oct-30 09:24:33): CIDUpdateLocation::Sync - Updating from http CID: SUM_FQDN/.../ntp64
Trace(2019-Oct-30 09:24:33): CIDSync(CidSyncMessage):
Trace(2019-Oct-30 09:24:33): CIDSync(CidSyncMessage):
Trace(2019-Oct-30 09:24:33): CIDSyncCallback, SynchronisationTerminated - Code = -2147217660
Trace(2019-Oct-30 09:24:33): CIDSyncCallback, SynchronisationTerminated - MapFile = C:\ProgramData\Sophos\AutoUpdate\cache\ntp64.map
Trace(2019-Oct-30 09:24:33): CIDUpdateLocation::SyncProduct: Failed to update product (Sophos Network Threat Protection) from "SUM_FQDN/.../", Error is :CIDSYNC_E_FILESYNCERROR (Error during file download.)
Trace(2019-Oct-30 09:24:33): CIDUpdate(CIDDownloadFailed): Sophos Network Threat Protection, SUM_FQDN/.../
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, SyncProduct returned - 0
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Ended - 0
Trace(2019-Oct-30 09:24:33): UpdateLocationFacade::SyncProduct: Last Update Mechanism = Unknown
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Started:
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, creating update location
Trace(2019-Oct-30 09:24:33): Calling package_source_init
Trace(2019-Oct-30 09:24:33): TrySyncProduct, Calling BeginSync
Trace(2019-Oct-30 09:24:33): Custom certificate already present.
Trace(2019-Oct-30 09:24:33): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\escdp.dat
Trace(2019-Oct-30 09:24:33): Remote connection over HTTP.
Trace(2019-Oct-30 09:24:33): File master.upd not found (Remote). Return code 0x80040f04
Trace(2019-Oct-30 09:24:33): Unable to read file master.upd (Remote)
Trace(2019-Oct-30 09:24:33): Unable to synchronise file root.upd.
Trace(2019-Oct-30 09:24:33): Unable to synchronise file escdp.dat.
Trace(2019-Oct-30 09:24:33): Unable to synchronise file expired_credential.dat.
Trace(2019-Oct-30 09:24:33): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\ProductID.dat
Trace(2019-Oct-30 09:24:33): Unable to synchronise file ProductID.dat.
Trace(2019-Oct-30 09:24:33): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\order.xml
Trace(2019-Oct-30 09:24:33): Unable to synchronise file order.xml.
Trace(2019-Oct-30 09:24:33): File root.upd recovered.
Trace(2019-Oct-30 09:24:33): File escdp.dat recovered.
Trace(2019-Oct-30 09:24:33): File ProductID.dat recovered.
Trace(2019-Oct-30 09:24:33): Unable to recover file expired_credential.dat.
Trace(2019-Oct-30 09:24:33): File order.xml recovered.
Trace(2019-Oct-30 09:24:33): Error -2147217660 in ReadCustomerIDFile
Trace(2019-Oct-30 09:24:33): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Calling SyncProduct with {9BF40A4E-23AE-48be-9974-5A1F261DBEE8}
Trace(2019-Oct-30 09:24:33): CIDUpdateLocation::SyncProduct - Updating Product: Sophos AutoUpdate
Trace(2019-Oct-30 09:24:33): CIDUpdate(SyncProduct.Start): Sophos AutoUpdate, SUM_FQDN/.../
Trace(2019-Oct-30 09:24:33): CIDUpdateLocation::Sync - Updating from http CID: SUM_FQDN/.../sau
Trace(2019-Oct-30 09:24:33): CIDSync(CidSyncMessage):
Trace(2019-Oct-30 09:24:34): CIDSync(CidSyncMessage):
Trace(2019-Oct-30 09:24:34): CIDSyncCallback, SynchronisationTerminated - Code = -2147217660
Trace(2019-Oct-30 09:24:34): CIDSyncCallback, SynchronisationTerminated - MapFile = C:\ProgramData\Sophos\AutoUpdate\cache\sau.map
Trace(2019-Oct-30 09:24:34): CIDUpdateLocation::SyncProduct: Failed to update product (Sophos AutoUpdate) from "SUM_FQDN/.../", Error is :CIDSYNC_E_FILESYNCERROR (Error during file download.)
Trace(2019-Oct-30 09:24:34): CIDUpdate(CIDDownloadFailed): Sophos AutoUpdate, SUM_FQDN/.../
Trace(2019-Oct-30 09:24:34): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, SyncProduct returned - 0
Trace(2019-Oct-30 09:24:34): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Ended - 0
Trace(2019-Oct-30 09:24:34): UpdateLocationFacade::SyncProduct: Last Update Mechanism = Unknown
Trace(2019-Oct-30 09:24:34): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Started:
Trace(2019-Oct-30 09:24:34): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, creating update location
Trace(2019-Oct-30 09:24:34): Calling package_source_init
Trace(2019-Oct-30 09:24:34): TrySyncProduct, Calling BeginSync
Trace(2019-Oct-30 09:24:34): Custom certificate already present.
Trace(2019-Oct-30 09:24:34): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\escdp.dat
Trace(2019-Oct-30 09:24:34): Remote connection over HTTP.
Trace(2019-Oct-30 09:24:34): File master.upd not found (Remote). Return code 0x80040f04
Trace(2019-Oct-30 09:24:34): Unable to read file master.upd (Remote)
Trace(2019-Oct-30 09:24:34): Unable to synchronise file root.upd.
Trace(2019-Oct-30 09:24:34): Unable to synchronise file escdp.dat.
Trace(2019-Oct-30 09:24:34): Unable to synchronise file expired_credential.dat.
Trace(2019-Oct-30 09:24:34): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\ProductID.dat
Trace(2019-Oct-30 09:24:34): Unable to synchronise file ProductID.dat.
Trace(2019-Oct-30 09:24:34): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\order.xml
Trace(2019-Oct-30 09:24:34): Unable to synchronise file order.xml.
Trace(2019-Oct-30 09:24:34): File root.upd recovered.
Trace(2019-Oct-30 09:24:34): File escdp.dat recovered.
Trace(2019-Oct-30 09:24:34): File ProductID.dat recovered.
Trace(2019-Oct-30 09:24:34): Unable to recover file expired_credential.dat.
Trace(2019-Oct-30 09:24:34): File order.xml recovered.
Trace(2019-Oct-30 09:24:34): Error -2147217660 in ReadCustomerIDFile
Trace(2019-Oct-30 09:24:34): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Calling SyncProduct with {D918120F-5C45-4e77-BEBF-7D921273B2E0}
Trace(2019-Oct-30 09:24:34): CIDUpdateLocation::SyncProduct - Updating Product: Sophos Patch Agent
Trace(2019-Oct-30 09:24:34): CIDUpdate(SyncProduct.Start): Sophos Patch Agent, SUM_FQDN/.../
Trace(2019-Oct-30 09:24:34): CIDUpdateLocation::Sync - Updating from http CID: SUM_FQDN/.../spa64
Trace(2019-Oct-30 09:24:34): CIDSync(CidSyncMessage):
Trace(2019-Oct-30 09:24:34): CIDSync(CidSyncMessage):
Trace(2019-Oct-30 09:24:34): CIDSyncCallback, SynchronisationTerminated - Code = -2147217660
Trace(2019-Oct-30 09:24:34): CIDSyncCallback, SynchronisationTerminated - MapFile = C:\ProgramData\Sophos\AutoUpdate\cache\spa64.map
Trace(2019-Oct-30 09:24:34): CIDUpdateLocation::SyncProduct: Failed to update product (Sophos Patch Agent) from "SUM_FQDN/.../", Error is :CIDSYNC_E_FILESYNCERROR (Error during file download.)
Trace(2019-Oct-30 09:24:34): CIDUpdate(CIDDownloadFailed): Sophos Patch Agent, SUM_FQDN/.../
Trace(2019-Oct-30 09:24:34): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, SyncProduct returned - 0
Trace(2019-Oct-30 09:24:34): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Ended - 0
Trace(2019-Oct-30 09:24:34): UpdateLocationFacade::SyncProduct: Last Update Mechanism = Unknown
Trace(2019-Oct-30 09:24:34): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Started:
Trace(2019-Oct-30 09:24:34): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, creating update location
Trace(2019-Oct-30 09:24:34): Calling package_source_init
Trace(2019-Oct-30 09:24:34): TrySyncProduct, Calling BeginSync
Trace(2019-Oct-30 09:24:34): Custom certificate already present.
Trace(2019-Oct-30 09:24:34): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\escdp.dat
Trace(2019-Oct-30 09:24:34): Remote connection over HTTP.
Trace(2019-Oct-30 09:24:34): File master.upd not found (Remote). Return code 0x80040f04
Trace(2019-Oct-30 09:24:34): Unable to read file master.upd (Remote)
Trace(2019-Oct-30 09:24:34): Unable to synchronise file root.upd.
Trace(2019-Oct-30 09:24:34): Unable to synchronise file escdp.dat.
Trace(2019-Oct-30 09:24:34): Unable to synchronise file expired_credential.dat.
Trace(2019-Oct-30 09:24:34): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\ProductID.dat
Trace(2019-Oct-30 09:24:34): Unable to synchronise file ProductID.dat.
Trace(2019-Oct-30 09:24:34): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\order.xml
Trace(2019-Oct-30 09:24:34): Unable to synchronise file order.xml.
Trace(2019-Oct-30 09:24:34): File root.upd recovered.
Trace(2019-Oct-30 09:24:34): File escdp.dat recovered.
Trace(2019-Oct-30 09:24:34): File ProductID.dat recovered.
Trace(2019-Oct-30 09:24:34): Unable to recover file expired_credential.dat.
Trace(2019-Oct-30 09:24:34): File order.xml recovered.
Trace(2019-Oct-30 09:24:34): Error -2147217660 in ReadCustomerIDFile
Trace(2019-Oct-30 09:24:34): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Calling SyncProduct with {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E}
Trace(2019-Oct-30 09:24:34): CIDUpdateLocation::SyncProduct - Updating Product: Sophos System Protection
Trace(2019-Oct-30 09:24:34): CIDUpdate(SyncProduct.Start): Sophos System Protection, SUM_FQDN/.../
Trace(2019-Oct-30 09:24:34): CIDUpdateLocation::Sync - Updating from http CID: SUM_FQDN/.../ssp
Trace(2019-Oct-30 09:24:34): CIDSync(CidSyncMessage):
Trace(2019-Oct-30 09:24:34): CIDSync(CidSyncMessage):
Trace(2019-Oct-30 09:24:34): CIDSyncCallback, SynchronisationTerminated - Code = -2147217660
Trace(2019-Oct-30 09:24:34): CIDSyncCallback, SynchronisationTerminated - MapFile = C:\ProgramData\Sophos\AutoUpdate\cache\ssp.map
Trace(2019-Oct-30 09:24:34): CIDUpdateLocation::SyncProduct: Failed to update product (Sophos System Protection) from "SUM_FQDN/.../", Error is :CIDSYNC_E_FILESYNCERROR (Error during file download.)
Trace(2019-Oct-30 09:24:34): CIDUpdate(CIDDownloadFailed): Sophos System Protection, SUM_FQDN/.../
Trace(2019-Oct-30 09:24:34): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, SyncProduct returned - 0
Trace(2019-Oct-30 09:24:34): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Ended - 0
Trace(2019-Oct-30 09:24:34): UpdateLocationFacade::SyncProduct: Last Update Mechanism = Unknown
Trace(2019-Oct-30 09:24:34): TrySyncProduct<class SDDS2::SULUpdateLocation>, Started:
Trace(2019-Oct-30 09:24:34): TrySyncProduct<class SDDS2::SULUpdateLocation>, creating update location
Trace(2019-Oct-30 09:24:34): Could not read registry entry containing Sophos address - using hardcoded value.
Trace(2019-Oct-30 09:24:34): SULUpdateLocation created!
Trace(2019-Oct-30 09:24:34): TrySyncProduct, Calling BeginSync
Trace(2019-Oct-30 09:24:34): SULUpdateLocation: BeginSync
Trace(2019-Oct-30 09:24:34): Path to decode files to: C:\Program Files (x86)\Sophos\AutoUpdate\decode
Trace(2019-Oct-30 09:24:34): SDDS2Update(SyncProduct.Start): Sophos Endpoint Security and Control, sophos
Trace(2019-Oct-30 09:24:34): Calling SULDownloader Setup...
Trace(2019-Oct-30 09:24:34): warehousePath: "C:\ProgramData\Sophos\AutoUpdate\data\warehouse"
Trace(2019-Oct-30 09:24:34): decodePath: "C:\Program Files (x86)\Sophos\AutoUpdate\decode"
Trace(2019-Oct-30 09:24:34): certPath: "C:\Program Files (x86)\Sophos\AutoUpdate"
Trace(2019-Oct-30 09:24:34): server = sophos
Trace(2019-Oct-30 09:24:34): Adding Sophos Update Location: dci.sophosupd.com/update
Trace(2019-Oct-30 09:24:34): Adding Sophos Update Location: dci.sophosupd.net/update
Trace(2019-Oct-30 09:24:34): No manually configured proxy.
Trace(2019-Oct-30 09:24:34): SULDownloader setup successful.
Trace(2019-Oct-30 09:24:34): SubscriptionProvider: F26F7EC0-1302-4DA7-8B6B-A5383051D41A/10.8.2.4.3741.1/
Trace(2019-Oct-30 09:24:35): Enumerating available product versions...
Trace(2019-Oct-30 09:24:35): Out of sources
Trace(2019-Oct-30 09:24:35): SubscriptionProvider: F26F7EC0-1302-4DA7-8B6B-A5383051D41A/10.8.2.4.3741.1/
Trace(2019-Oct-30 09:24:37): Out of sources
Trace(2019-Oct-30 09:24:37): Failed: SDDS2 CheckResubscription failed
Trace(2019-Oct-30 09:24:37): TrySyncProduct<class SDDS2::SULUpdateLocation>, Ended - 0
Trace(2019-Oct-30 09:24:37): UpdateLocationFacade::SyncProduct: Last Update Mechanism = Unknown
Trace(2019-Oct-30 09:24:37): TrySyncProduct<class SDDS2::SULUpdateLocation>, Started:
Trace(2019-Oct-30 09:24:37): TrySyncProduct<class SDDS2::SULUpdateLocation>, creating update location
Trace(2019-Oct-30 09:24:37): Could not read registry entry containing Sophos address - using hardcoded value.
Trace(2019-Oct-30 09:24:37): SULUpdateLocation created!
Trace(2019-Oct-30 09:24:37): TrySyncProduct, Calling BeginSync
Trace(2019-Oct-30 09:24:37): SULUpdateLocation: BeginSync
Trace(2019-Oct-30 09:24:37): Path to decode files to: C:\Program Files (x86)\Sophos\AutoUpdate\decode
Trace(2019-Oct-30 09:24:37): SDDS2Update(SyncProduct.Start): Sophos Endpoint Security and Control, sophos
Trace(2019-Oct-30 09:24:37): Calling SULDownloader Setup...
Trace(2019-Oct-30 09:24:37): warehousePath: "C:\ProgramData\Sophos\AutoUpdate\data\warehouse"
Trace(2019-Oct-30 09:24:37): decodePath: "C:\Program Files (x86)\Sophos\AutoUpdate\decode"
Trace(2019-Oct-30 09:24:37): certPath: "C:\Program Files (x86)\Sophos\AutoUpdate"
Trace(2019-Oct-30 09:24:37): server = sophos
Trace(2019-Oct-30 09:24:37): Adding Sophos Update Location: dci.sophosupd.com/update
Trace(2019-Oct-30 09:24:37): Adding Sophos Update Location: dci.sophosupd.net/update
Trace(2019-Oct-30 09:24:37): No manually configured proxy.
Trace(2019-Oct-30 09:24:37): SULDownloader setup successful.
Trace(2019-Oct-30 09:24:37): SubscriptionProvider: F26F7EC0-1302-4DA7-8B6B-A5383051D41A/10.8.2.4.3741.1/
Trace(2019-Oct-30 09:24:38): Enumerating available product versions...
Trace(2019-Oct-30 09:24:38): Out of sources
Trace(2019-Oct-30 09:24:38): SubscriptionProvider: F26F7EC0-1302-4DA7-8B6B-A5383051D41A/10.8.2.4.3741.1/
Trace(2019-Oct-30 09:24:40): Out of sources
Trace(2019-Oct-30 09:24:40): Failed: SDDS2 CheckResubscription failed
Trace(2019-Oct-30 09:24:40): TrySyncProduct<class SDDS2::SULUpdateLocation>, Ended - 0
Trace(2019-Oct-30 09:24:40): UpdateLocationFacade::SyncProduct: Last Update Mechanism = Unknown
Trace(2019-Oct-30 09:24:40): TrySyncProduct<class SDDS2::SULUpdateLocation>, Started:
Trace(2019-Oct-30 09:24:40): TrySyncProduct<class SDDS2::SULUpdateLocation>, creating update location
Trace(2019-Oct-30 09:24:40): Could not read registry entry containing Sophos address - using hardcoded value.
Trace(2019-Oct-30 09:24:40): SULUpdateLocation created!
Trace(2019-Oct-30 09:24:40): TrySyncProduct, Calling BeginSync
Trace(2019-Oct-30 09:24:40): SULUpdateLocation: BeginSync
Trace(2019-Oct-30 09:24:40): Path to decode files to: C:\Program Files (x86)\Sophos\AutoUpdate\decode
Trace(2019-Oct-30 09:24:40): SDDS2Update(SyncProduct.Start): Sophos Endpoint Security and Control, sophos
Trace(2019-Oct-30 09:24:40): Calling SULDownloader Setup...
Trace(2019-Oct-30 09:24:40): warehousePath: "C:\ProgramData\Sophos\AutoUpdate\data\warehouse"
Trace(2019-Oct-30 09:24:40): decodePath: "C:\Program Files (x86)\Sophos\AutoUpdate\decode"
Trace(2019-Oct-30 09:24:40): certPath: "C:\Program Files (x86)\Sophos\AutoUpdate"
Trace(2019-Oct-30 09:24:40): server = sophos
Trace(2019-Oct-30 09:24:40): Adding Sophos Update Location: dci.sophosupd.com/update
Trace(2019-Oct-30 09:24:40): Adding Sophos Update Location: dci.sophosupd.net/update
Trace(2019-Oct-30 09:24:40): No manually configured proxy.
Trace(2019-Oct-30 09:24:40): SULDownloader setup successful.
Trace(2019-Oct-30 09:24:40): SubscriptionProvider: F26F7EC0-1302-4DA7-8B6B-A5383051D41A/10.8.2.4.3741.1/
Trace(2019-Oct-30 09:24:41): Enumerating available product versions...
Trace(2019-Oct-30 09:24:41): Out of sources
Trace(2019-Oct-30 09:24:41): SubscriptionProvider: F26F7EC0-1302-4DA7-8B6B-A5383051D41A/10.8.2.4.3741.1/
Trace(2019-Oct-30 09:24:43): Out of sources
Trace(2019-Oct-30 09:24:43): Failed: SDDS2 CheckResubscription failed
Trace(2019-Oct-30 09:24:43): TrySyncProduct<class SDDS2::SULUpdateLocation>, Ended - 0
Trace(2019-Oct-30 09:24:43): UpdateLocationFacade::SyncProduct: Last Update Mechanism = Unknown
Trace(2019-Oct-30 09:24:43): TrySyncProduct<class SDDS2::SULUpdateLocation>, Started:
Trace(2019-Oct-30 09:24:43): TrySyncProduct<class SDDS2::SULUpdateLocation>, creating update location
Trace(2019-Oct-30 09:24:43): Could not read registry entry containing Sophos address - using hardcoded value.
Trace(2019-Oct-30 09:24:43): SULUpdateLocation created!
Trace(2019-Oct-30 09:24:43): TrySyncProduct, Calling BeginSync
Trace(2019-Oct-30 09:24:43): SULUpdateLocation: BeginSync
Trace(2019-Oct-30 09:24:43): Path to decode files to: C:\Program Files (x86)\Sophos\AutoUpdate\decode
Trace(2019-Oct-30 09:24:43): SDDS2Update(SyncProduct.Start): Sophos Endpoint Security and Control, sophos
Trace(2019-Oct-30 09:24:43): Calling SULDownloader Setup...
Trace(2019-Oct-30 09:24:43): warehousePath: "C:\ProgramData\Sophos\AutoUpdate\data\warehouse"
Trace(2019-Oct-30 09:24:43): decodePath: "C:\Program Files (x86)\Sophos\AutoUpdate\decode"
Trace(2019-Oct-30 09:24:43): certPath: "C:\Program Files (x86)\Sophos\AutoUpdate"
Trace(2019-Oct-30 09:24:43): server = sophos
Trace(2019-Oct-30 09:24:43): Adding Sophos Update Location: dci.sophosupd.com/update
Trace(2019-Oct-30 09:24:43): Adding Sophos Update Location: dci.sophosupd.net/update
Trace(2019-Oct-30 09:24:43): No manually configured proxy.
Trace(2019-Oct-30 09:24:43): SULDownloader setup successful.
Trace(2019-Oct-30 09:24:43): SubscriptionProvider: F26F7EC0-1302-4DA7-8B6B-A5383051D41A/10.8.2.4.3741.1/
Trace(2019-Oct-30 09:24:44): Enumerating available product versions...
Trace(2019-Oct-30 09:24:44): Out of sources
Trace(2019-Oct-30 09:24:44): SubscriptionProvider: F26F7EC0-1302-4DA7-8B6B-A5383051D41A/10.8.2.4.3741.1/
Trace(2019-Oct-30 09:24:46): Out of sources
Trace(2019-Oct-30 09:24:46): Failed: SDDS2 CheckResubscription failed
Trace(2019-Oct-30 09:24:46): TrySyncProduct<class SDDS2::SULUpdateLocation>, Ended - 0
Trace(2019-Oct-30 09:24:46): UpdateLocationFacade::SyncProduct: Last Update Mechanism = Unknown
Trace(2019-Oct-30 09:24:46): TrySyncProduct<class SDDS2::SULUpdateLocation>, Started:
Trace(2019-Oct-30 09:24:46): TrySyncProduct<class SDDS2::SULUpdateLocation>, creating update location
Trace(2019-Oct-30 09:24:46): Could not read registry entry containing Sophos address - using hardcoded value.
Trace(2019-Oct-30 09:24:46): SULUpdateLocation created!
Trace(2019-Oct-30 09:24:46): TrySyncProduct, Calling BeginSync
Trace(2019-Oct-30 09:24:46): SULUpdateLocation: BeginSync
Trace(2019-Oct-30 09:24:46): Path to decode files to: C:\Program Files (x86)\Sophos\AutoUpdate\decode
Trace(2019-Oct-30 09:24:46): SDDS2Update(SyncProduct.Start): Sophos Endpoint Security and Control, sophos
Trace(2019-Oct-30 09:24:46): Calling SULDownloader Setup...
Trace(2019-Oct-30 09:24:46): warehousePath: "C:\ProgramData\Sophos\AutoUpdate\data\warehouse"
Trace(2019-Oct-30 09:24:46): decodePath: "C:\Program Files (x86)\Sophos\AutoUpdate\decode"
Trace(2019-Oct-30 09:24:46): certPath: "C:\Program Files (x86)\Sophos\AutoUpdate"
Trace(2019-Oct-30 09:24:46): server = sophos
Trace(2019-Oct-30 09:24:46): Adding Sophos Update Location: dci.sophosupd.com/update
Trace(2019-Oct-30 09:24:46): Adding Sophos Update Location: dci.sophosupd.net/update
Trace(2019-Oct-30 09:24:46): No manually configured proxy.
Trace(2019-Oct-30 09:24:46): SULDownloader setup successful.
Trace(2019-Oct-30 09:24:46): SubscriptionProvider: F26F7EC0-1302-4DA7-8B6B-A5383051D41A/10.8.2.4.3741.1/
Trace(2019-Oct-30 09:24:47): Enumerating available product versions...
Trace(2019-Oct-30 09:24:47): Out of sources
Trace(2019-Oct-30 09:24:47): SubscriptionProvider: F26F7EC0-1302-4DA7-8B6B-A5383051D41A/10.8.2.4.3741.1/
Trace(2019-Oct-30 09:24:49): Out of sources
Trace(2019-Oct-30 09:24:49): Failed: SDDS2 CheckResubscription failed
Trace(2019-Oct-30 09:24:49): TrySyncProduct<class SDDS2::SULUpdateLocation>, Ended - 0
Trace(2019-Oct-30 09:24:49): ALUpdate(ProductUnavailable): Sophos Patch Agent, Sophos
Trace(2019-Oct-30 09:24:49): UpdateLocationFacade::SyncProduct: Last Update Mechanism = Unknown
Trace(2019-Oct-30 09:24:49): TrySyncProduct<class SDDS2::SULUpdateLocation>, Started:
Trace(2019-Oct-30 09:24:49): TrySyncProduct<class SDDS2::SULUpdateLocation>, creating update location
Trace(2019-Oct-30 09:24:49): Could not read registry entry containing Sophos address - using hardcoded value.
Trace(2019-Oct-30 09:24:49): SULUpdateLocation created!
Trace(2019-Oct-30 09:24:49): TrySyncProduct, Calling BeginSync
Trace(2019-Oct-30 09:24:49): SULUpdateLocation: BeginSync
Trace(2019-Oct-30 09:24:49): Path to decode files to: C:\Program Files (x86)\Sophos\AutoUpdate\decode
Trace(2019-Oct-30 09:24:49): SDDS2Update(SyncProduct.Start): Sophos Endpoint Security and Control, sophos
Trace(2019-Oct-30 09:24:49): Calling SULDownloader Setup...
Trace(2019-Oct-30 09:24:49): warehousePath: "C:\ProgramData\Sophos\AutoUpdate\data\warehouse"
Trace(2019-Oct-30 09:24:49): decodePath: "C:\Program Files (x86)\Sophos\AutoUpdate\decode"
Trace(2019-Oct-30 09:24:49): certPath: "C:\Program Files (x86)\Sophos\AutoUpdate"
Trace(2019-Oct-30 09:24:49): server = sophos
Trace(2019-Oct-30 09:24:49): Adding Sophos Update Location: dci.sophosupd.com/update
Trace(2019-Oct-30 09:24:49): Adding Sophos Update Location: dci.sophosupd.net/update
Trace(2019-Oct-30 09:24:49): No manually configured proxy.
Trace(2019-Oct-30 09:24:49): SULDownloader setup successful.
Trace(2019-Oct-30 09:24:49): SubscriptionProvider: F26F7EC0-1302-4DA7-8B6B-A5383051D41A/10.8.2.4.3741.1/
Trace(2019-Oct-30 09:24:50): Enumerating available product versions...
Trace(2019-Oct-30 09:24:50): Out of sources
Trace(2019-Oct-30 09:24:50): SubscriptionProvider: F26F7EC0-1302-4DA7-8B6B-A5383051D41A/10.8.2.4.3741.1/
Trace(2019-Oct-30 09:24:52): Out of sources
Trace(2019-Oct-30 09:24:52): Failed: SDDS2 CheckResubscription failed
Trace(2019-Oct-30 09:24:52): TrySyncProduct<class SDDS2::SULUpdateLocation>, Ended - 0
Trace(2019-Oct-30 09:24:52): ALUpdate():
Trace(2019-Oct-30 09:24:52): ALUpdate(DownloadEnded):
Trace(2019-Oct-30 09:24:52): UpdateCoordinator::UpdateNow: loading SAUControl.xml
Trace(2019-Oct-30 09:24:52): SAUControlConfigParser:: Cache path: ""
Trace(2019-Oct-30 09:24:52): SAUControlConfigParser: SAUControl config path is: "sau\saucontrol\saucontrol.xml"
Trace(2019-Oct-30 09:24:52): SAUControlConfigParser:: Caught runtime_error exception: SAUControl config is not available
Trace(2019-Oct-30 09:24:52): UpdateCoordinator::UpdateNow: loading order.xml
Trace(2019-Oct-30 09:24:52): InstallSequencer:: Cache path: ""
Trace(2019-Oct-30 09:24:52): InstallSequencer:: Caught runtime_error exception: Invalid cache path.
Trace(2019-Oct-30 09:24:52): UpdateCoordinator::UpdateNow: Failed to process order.xml.
Trace(2019-Oct-30 09:24:52): UpdateCoordinator::UpdateNow: Sorting products in order of install sequence
Trace(2019-Oct-30 09:24:52): UpdateCoordinator::UpdateNow: About to Action list of products
Trace(2019-Oct-30 09:24:52): UpdateCoordinator::UpdateNow: Update Mode for RMSNT is: 0
Trace(2019-Oct-30 09:24:52): SimpleProduct::DoAction isLater=false, skipAction=false, isUninstall=false, m_lastUpdateSucceeded=false, numfilestocahce=1, Actiontype=Setup, Not preinstalled product
Trace(2019-Oct-30 09:24:52): SimpleProduct::DoAction for {390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92}
Trace(2019-Oct-30 09:24:52): UpdateCoordinator::UpdateNow: Update Mode for SAVXP is: 0
Trace(2019-Oct-30 09:24:52): SimpleProduct::DoAction isLater=false, skipAction=false, isUninstall=false, m_lastUpdateSucceeded=false, numfilestocahce=1, Actiontype=Setup, Not preinstalled product
Trace(2019-Oct-30 09:24:52): SimpleProduct::DoAction for {E17FE03B-0501-4aaa-BC69-0129D965F311}
Trace(2019-Oct-30 09:24:52): UpdateCoordinator::UpdateNow: Update Mode for Sophos Endpoint Defense is: 0
Trace(2019-Oct-30 09:24:52): SimpleProduct::DoAction isLater=false, skipAction=false, isUninstall=false, m_lastUpdateSucceeded=false, numfilestocahce=1, Actiontype=Setup, Not preinstalled product
Trace(2019-Oct-30 09:24:52): SimpleProduct::DoAction for {1129226C-32AB-4B72-85E1-A9CC8DFBC859}
Trace(2019-Oct-30 09:24:52): UpdateCoordinator::UpdateNow: Update Mode for Sophos Network Threat Protection is: 0
Trace(2019-Oct-30 09:24:52): SimpleProduct::DoAction isLater=false, skipAction=false, isUninstall=false, m_lastUpdateSucceeded=false, numfilestocahce=1, Actiontype=Setup, Not preinstalled product
Trace(2019-Oct-30 09:24:52): SimpleProduct::DoAction for {8087796B-2289-4897-98A5-58FF23DAAFD0}
Trace(2019-Oct-30 09:24:52): UpdateCoordinator::UpdateNow: Update Mode for Sophos Patch Agent is: 0
Trace(2019-Oct-30 09:24:52): SimpleProduct::DoAction isLater=false, skipAction=true, isUninstall=false, m_lastUpdateSucceeded=true, numfilestocahce=1, Actiontype=Setup, Not preinstalled product
Trace(2019-Oct-30 09:24:52): SimpleProduct::DoAction for {D918120F-5C45-4e77-BEBF-7D921273B2E0}
Trace(2019-Oct-30 09:24:52): DoAction Skipping
Trace(2019-Oct-30 09:24:52): UpdateCoordinator::UpdateNow: Update Mode for Sophos System Protection is: 0
Trace(2019-Oct-30 09:24:52): SimpleProduct::DoAction isLater=false, skipAction=false, isUninstall=false, m_lastUpdateSucceeded=false, numfilestocahce=1, Actiontype=Setup, Not preinstalled product
Trace(2019-Oct-30 09:24:52): SimpleProduct::DoAction for {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E}
Trace(2019-Oct-30 09:24:52): UpdateCoordinator::UpdateNow: Update Mode for Sophos AutoUpdate is: 0
Trace(2019-Oct-30 09:24:52): SimpleProduct::DoAction isLater=false, skipAction=false, isUninstall=false, m_lastUpdateSucceeded=false, numfilestocahce=1, Actiontype=Setup, Not preinstalled product
Trace(2019-Oct-30 09:24:52): SimpleProduct::DoAction for {9BF40A4E-23AE-48be-9974-5A1F261DBEE8}
Trace(2019-Oct-30 09:24:52): RMSMessageHandler: ALUpdateEnd
Trace(2019-Oct-30 09:24:52): Sending message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate"><ErrorMessage><ID></ID><StringID>113</StringID><Sender>ALUpdate</Sender></ErrorMessage></Config>
Trace(2019-Oct-30 09:24:52): IPCSender::Write: Writing message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate"><ErrorMessage><ID></ID><StringID>113</StringID><Sender>ALUpdate</Sender></ErrorMessage></Config>
Trace(2019-Oct-30 09:24:52): IPCSender::ProcessSend: Send message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate"><ErrorMessage><ID></ID><StringID>113</StringID><Sender>ALUpdate</Sender></ErrorMessage></Config>
Trace(2019-Oct-30 09:24:52): IPCSender::ProcessSend: No messages in queue, starting to wait
Trace(2019-Oct-30 09:24:52): Telemetry::LoadTelemetrySupplement 344: Telemetry Interval set to 86400 seconds
Trace(2019-Oct-30 09:24:52): Telemetry::LoadDocument 218: C:\ProgramData\Sophos\AutoUpdate\\Config\TelemetryConfig.json loaded
Trace(2019-Oct-30 09:24:52): Telemetry::LoadTelemetrySupplement 385: Telemetry Interval updated to 86400 seconds
Trace(2019-Oct-30 09:24:52): Telemetry::CalculateLastTelemtryTime 134: Telemetry last ran at 2019-10-29 19:26:37, Offset 3124, Offset Time 2019-10-29 20:18:41
Trace(2019-Oct-30 09:24:52): Telemetry::HasTelemetrySchedulePeriodElapsed 157: Telemetry schedule has not elapsed.
Trace(2019-Oct-30 09:24:53): IPCSender::ProcessSend exiting
Trace(2019-Oct-30 09:24:53): ALUpdate finished

 

 

 

 

 



This thread was automatically locked due to age.
Parents
  • 0

    Hello DanZi,

    thanks for the log. There is at least some additional information. Apparently the server can be located and contacted, the subsequent failure is immediate. Trying the individual components CIDSYNC_E_FILESYNCERROR is returned. I'm not sure but I don't think it's a regular HTTP error like File not found. I'd consult Wireshark, it might give a hint.
    BTW: I see that Sophos is configured as Secondary and it also fails.

    Christian

  • 0 in reply to QC

    Hi Christian,

     

    Sophos is set to 2nd update location - but internally it is not accessible. Only when machines (e.g. laptops) are off site. (don't ask :D I know it is weird, but beyond my reach unfortunately).

    I'll try wireshark when I get the chance. :)

    Dani 

  • 0 in reply to Daniel Gebler

    HI,

     

    Could you please check the "Logviewer.EXE" under  C:\Program Files (x86)\Sophos\Enterprise Console\SUMInstaller\Update Manager Folder.

    It will give you the correct error message.

     

    Location:

    32-bit: C:\Program Files\Sophos\Update Manager\

    64-bit: C:\Program Files (x86)\Sophos\Enterprise Console\SUMInstaller\Update Manager

    SAJ
    Community Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.
  • 0 in reply to SAJ

    Hello SAJ,

     

    Sorry for the delay...

     

    Clients all use WPAD for automatic proxy configuration.

    From powershell (which to my knowledge bypasses proxy) I can use Invoke-WebRequest to the CID and to its contents. Also can browse the CID from Chrome and IE.

    AutoUpdate picks up the policy alright, it has no proxy setting and I cannot find any relation between the clients having this issue.

    They will just go to a completely different IP, although the DNS settings are also correct on the machine, and querying the CIDlocation by machine name returns a correct IP.

     

    Used wireshark and checked the logs on the webserver that hosts the CID. The web server cannot even see the machine trying to update. (but it DOES pick up the manual tries, when checking it via browsers or powershell).

    Can we turn on verbose logging for AutoUpdate? For now, it just throws back the CIDSYNC error and a file not found for master.upd. 

     

    LogViewer only sees logs on the server - but I think it's clearly on clients' end. 

    But for now, even the networking people are scratching their heads...

     

    DanZi

Reply
  • 0 in reply to SAJ

    Hello SAJ,

     

    Sorry for the delay...

     

    Clients all use WPAD for automatic proxy configuration.

    From powershell (which to my knowledge bypasses proxy) I can use Invoke-WebRequest to the CID and to its contents. Also can browse the CID from Chrome and IE.

    AutoUpdate picks up the policy alright, it has no proxy setting and I cannot find any relation between the clients having this issue.

    They will just go to a completely different IP, although the DNS settings are also correct on the machine, and querying the CIDlocation by machine name returns a correct IP.

     

    Used wireshark and checked the logs on the webserver that hosts the CID. The web server cannot even see the machine trying to update. (but it DOES pick up the manual tries, when checking it via browsers or powershell).

    Can we turn on verbose logging for AutoUpdate? For now, it just throws back the CIDSYNC error and a file not found for master.upd. 

     

    LogViewer only sees logs on the server - but I think it's clearly on clients' end. 

    But for now, even the networking people are scratching their heads...

     

    DanZi

Children
  • 0 in reply to Daniel Gebler

    Hello DanZi,

    [they] go to a completely different IP
    same IP for both the request to the local CID and the one(s) to Sophos? Same IP on all affected endpoints (though this is probably not easy to check)? Does the IP ring a bell?
    I'm not aware of a more verbose logging for AutoUpdate.

    Christian

  • +1 in reply to QC

    Hi Christian,

     

    Was just about to admit with a blush on my face, one very important thing was discovered.

     

    SET command returned a http_proxy= environment variable in the clients, and apparently, regardless of the Sophos update policiy's proxy configuration which is set to direct connection - this local environment variable is picked up by AutoUpdate...

    this was the key puzzle piece, it's been weeks of struggel :D

     

    thanks for everyone in giving ideas and help!

     

Unfiltered HTML