This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

a problem in installation of Sophos Endpoint online package and offline package

I found a problem when installing Sophos intercept x for serve and user, as shown in the log file below. I resolved this problem by installing the offline package first, followed by the online one.

the log file when i install the Intercept package:

2022-05-21T14:50:35.7731477Z INFO : Running C:\\Users\\ADMINI~1.ALS\\AppData\\Local\\Temp\\1\\SophosSetup-814835088\\Setup.exe
2022-05-21T14:50:35.7731477Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:35.7731477Z INFO : Stage 1 command-line options:
2022-05-21T14:50:35.7731477Z INFO : ---
2022-05-21T14:50:35.7731477Z INFO : Quiet mode on: 0
2022-05-21T14:50:35.7731477Z INFO : Automatic Proxy detection disabled: 0
2022-05-21T14:50:35.7731477Z INFO : No feedback mode on: 0
2022-05-21T14:50:35.7731477Z INFO : Dump feedback enabled: 0
2022-05-21T14:50:35.7731477Z INFO : Bypass competitor removal: 0
2022-05-21T14:50:35.7731477Z INFO : Using CRT catalog file path: --
2022-05-21T14:50:35.7731477Z INFO : Only register endpoint with Central: 0
2022-05-21T14:50:35.7731477Z INFO : Log messages between endpoint and Central: 0
2022-05-21T14:50:35.7731477Z INFO : Log command-line passed to executables: 0
2022-05-21T14:50:35.7731477Z INFO : Using custom server that hosts the installer stage2 filename: --
2022-05-21T14:50:35.7731477Z INFO : Using cloud group: --
2022-05-21T14:50:35.7731477Z INFO : Overriding computer name: --
2022-05-21T14:50:35.7731477Z INFO : Overriding computer description: --
2022-05-21T14:50:35.7731477Z INFO : Overriding domain name: --
2022-05-21T14:50:35.7731477Z INFO : Language will be set to: --
2022-05-21T14:50:35.7731477Z INFO : Using message relays: --
2022-05-21T14:50:35.7731477Z INFO : Proxy address: --
2022-05-21T14:50:35.7731477Z INFO : Proxy user name: --
2022-05-21T14:50:35.7731477Z INFO : Using custom customer token: --
2022-05-21T14:50:35.7731477Z INFO : Using specified products: --
2022-05-21T14:50:35.7731477Z INFO : Using certificates from the program data folder: 0
2022-05-21T14:50:35.7731477Z INFO : Setting non-persistent image: 0
2022-05-21T14:50:35.7731477Z INFO : Setting gold image: 0
2022-05-21T14:50:35.7731477Z INFO : MCS registration timeout for golden image: --
2022-05-21T14:50:35.7731477Z INFO : Using custom customer ID: --
2022-05-21T14:50:35.7731477Z INFO : Using specified user ID: --
2022-05-21T14:50:35.7731477Z INFO : Using local install source: --
2022-05-21T14:50:35.7731477Z INFO : Invoked as part of SEC migration: 0
2022-05-21T14:50:35.7731477Z INFO : ---
2022-05-21T14:50:35.7887812Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:35.7887812Z INFO : Detected architecture: 2
2022-05-21T14:50:35.7887812Z INFO : Using x86 program files for stage 2
2022-05-21T14:50:35.7887812Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:35.7887812Z INFO : Target path: C:\\Program Files (x86)\\Sophos\\CloudInstaller
2022-05-21T14:50:35.8043652Z INFO : About to delete: C:\\Program Files (x86)\\Sophos\\CloudInstaller
2022-05-21T14:50:35.8043652Z INFO : Folder not present, nothing to delete
2022-05-21T14:50:35.8043652Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:35.8043652Z INFO : Running on x64, requesting x86 Stage2
2022-05-21T14:50:35.8043652Z INFO : Sending HTTP 'POST' request to: api/download/stage2-details/8d11b1bc-fa7c-4f15-8898-1b28c89a614b
2022-05-21T14:50:35.8199998Z INFO : Did not discover an URL for a PAC file
2022-05-21T14:50:35.8199998Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2022-05-21T14:50:35.8199998Z INFO : Set security protocol: 00000800
2022-05-21T14:50:35.8199998Z INFO : Opening connection to dzr-api-amzn-us-west-2-fa88.api-upe.p.hmr.sophos.com
2022-05-21T14:50:35.8199998Z INFO : Request content size: 31
2022-05-21T14:50:36.9639776Z INFO : Sending request
2022-05-21T14:50:36.9639776Z INFO : Request sent
2022-05-21T14:50:37.1984508Z INFO : Sending request
2022-05-21T14:50:37.1984508Z INFO : Request sent
2022-05-21T14:50:37.1984508Z INFO : Response status code: 200
2022-05-21T14:50:37.1984508Z INFO : Response data size: 176
2022-05-21T14:50:37.1984508Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2022-05-21T14:50:37.2452907Z INFO : Parsing message received for Stage 2 filename: '{"mcs_server":"mcs2-cloudstation-us-west-2.prod.hydra.sophos.com","stage2_filename":"stage2-1.14.293.0-9a635fa86787712b7e15d3664e62ac24f77b8b060359fc8f6631a285395f64a7.tar.gz"}'
2022-05-21T14:50:37.2452907Z INFO : Sending HTTP 'GET' request to: full/central/windows/business/installer/stage2-1.14.293.0-9a635fa86787712b7e15d3664e62ac24f77b8b060359fc8f6631a285395f64a7.tar.gz
2022-05-21T14:50:37.2452907Z INFO : Did not discover an URL for a PAC file
2022-05-21T14:50:37.2452907Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2022-05-21T14:50:37.2452907Z INFO : Set security protocol: 00000800
2022-05-21T14:50:37.2452907Z INFO : Opening connection to downloads.sophos.com
2022-05-21T14:50:37.2452907Z INFO : Request content size: 0
2022-05-21T14:50:37.9192419Z INFO : Sending request
2022-05-21T14:50:37.9192419Z INFO : Request sent
2022-05-21T14:50:41.5829312Z INFO : Response status code: 200
2022-05-21T14:50:41.5829312Z INFO : Response data size: 3180487
2022-05-21T14:50:41.5829312Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2022-05-21T14:50:41.5986032Z INFO : Extracting files:
2022-05-21T14:50:41.5986032Z INFO : integrity.dat
2022-05-21T14:50:41.5986032Z INFO : manifest.dat
2022-05-21T14:50:41.6141883Z INFO : scf.dat
2022-05-21T14:50:41.6141883Z INFO : SDDS3.dll
2022-05-21T14:50:41.6141883Z INFO : sof.dat
2022-05-21T14:50:41.6298402Z INFO : SophosSetup_Stage2.exe
2022-05-21T14:50:41.6454924Z INFO : su-setup32.exe
2022-05-21T14:50:41.6454924Z INFO : su-setup64.exe
2022-05-21T14:50:41.6610772Z INFO : SUL.dll
2022-05-21T14:50:41.6767547Z INFO : Management Certs/sophosca1.crl
2022-05-21T14:50:41.6767547Z INFO : Management Certs/sophosca1.crt
2022-05-21T14:50:41.6767547Z INFO : Management Certs/sophosca2.crl
2022-05-21T14:50:41.6767547Z INFO : Management Certs/sophosca2.crt
2022-05-21T14:50:41.6767547Z INFO : Management Certs/sophosca3.crl
2022-05-21T14:50:41.6767547Z INFO : Management Certs/sophosca3.crt
2022-05-21T14:50:41.6767547Z INFO : Management Certs/sophosca4.crl
2022-05-21T14:50:41.6767547Z INFO : Management Certs/sophosca4.crt
2022-05-21T14:50:41.6767547Z INFO : ManifestCerts/rootca.crl
2022-05-21T14:50:41.6767547Z INFO : ManifestCerts/rootca.crt
2022-05-21T14:50:41.6767547Z INFO : ManifestCerts/rootca384.crl
2022-05-21T14:50:41.6767547Z INFO : ManifestCerts/rootca384.crt
2022-05-21T14:50:41.6767547Z INFO : Checking manifest:C:\\Program Files (x86)\\Sophos\\CloudInstaller\\extract_cache\\manifest.dat
2022-05-21T14:50:41.7392713Z INFO : Running setup.
2022-05-21T14:50:42.0049815Z INFO : Stage 2 command-line options:
2022-05-21T14:50:42.0049815Z INFO : ---
2022-05-21T14:50:42.0049815Z INFO : Parent PID: 8308
2022-05-21T14:50:42.0049815Z INFO : Server: mcs2-cloudstation-us-west-2.prod.hydra.sophos.com
2022-05-21T14:50:42.0049815Z INFO : Message relays: --
2022-05-21T14:50:42.0049815Z INFO : Suppressing feedback: 0
2022-05-21T14:50:42.0049815Z INFO : Dump feedback to disk: 0
2022-05-21T14:50:42.0049815Z INFO : Setting non-persistent image: 0
2022-05-21T14:50:42.0049815Z INFO : Setting gold image: 0
2022-05-21T14:50:42.0049815Z INFO : MCS registration timeout for golden image: --
2022-05-21T14:50:42.0049815Z INFO : Register only: 0
2022-05-21T14:50:42.0049815Z INFO : Trail logging: 0
2022-05-21T14:50:42.0049815Z INFO : Command-line logging: 0
2022-05-21T14:50:42.0049815Z INFO : Bypassing competitor removal: 0
2022-05-21T14:50:42.0049815Z INFO : CRT catalog: --
2022-05-21T14:50:42.0049815Z INFO : Language: --
2022-05-21T14:50:42.0049815Z INFO : Log files: C:\\ProgramData\\Sophos\\CloudInstaller\\Logs\\SophosCloudInstaller_20220521_145035.log
2022-05-21T14:50:42.0049815Z INFO : Group: --
2022-05-21T14:50:42.0049815Z INFO : Quiet: 0
2022-05-21T14:50:42.0049815Z INFO : Virtual appliance: 0
2022-05-21T14:50:42.0049815Z INFO : Proxy address: --
2022-05-21T14:50:42.0049815Z INFO : Proxy user: --
2022-05-21T14:50:42.0049815Z INFO : Overriding computer name: --
2022-05-21T14:50:42.0049815Z INFO : Overriding computer description: --
2022-05-21T14:50:42.0049815Z INFO : Overriding domain: --
2022-05-21T14:50:42.0049815Z INFO : Disable proxy detection: 0
2022-05-21T14:50:42.0049815Z INFO : Customer Token Specified: 8d11b1bc-fa7c-4f15-8898-1b28c89a614b
2022-05-21T14:50:42.0049815Z INFO : Products: all
2022-05-21T14:50:42.0049815Z INFO : Pipe write handle: 1464
2022-05-21T14:50:42.0049815Z INFO : MCS Certificates Folder: 0
2022-05-21T14:50:42.0049815Z INFO : MCS Customer Id: 1b3b5d1e-2046-5478-dadd-e027b81be96c
2022-05-21T14:50:42.0049815Z INFO : User Id: --
2022-05-21T14:50:42.0049815Z INFO : Local install source: --
2022-05-21T14:50:42.0049815Z INFO : Partner Id: --
2022-05-21T14:50:42.0049815Z INFO : Customer Estate Id: --
2022-05-21T14:50:42.0049815Z INFO : Invoked as part of SEC migration: 0
2022-05-21T14:50:42.0049815Z INFO : ---
2022-05-21T14:50:42.0049815Z INFO : User name: Administrator
2022-05-21T14:50:42.0049815Z INFO : NameDnsDomain: ALSHEMAL.COM\\Administrator
2022-05-21T14:50:42.0049815Z INFO : dnsDomain: ALSHEMAL.COM
2022-05-21T14:50:42.2708784Z INFO : lpProfilePath:
2022-05-21T14:50:42.2708784Z INFO : User profile loaded
2022-05-21T14:50:42.2708784Z INFO : Net API buffer freed
2022-05-21T14:50:42.2708784Z INFO : Model::server value changed to: mcs2-cloudstation-us-west-2.prod.hydra.sophos.com
2022-05-21T14:50:42.2708784Z INFO : Model::messageRelays value changed to be size: 0
2022-05-21T14:50:42.2708784Z INFO : Model::group value changed to:
2022-05-21T14:50:42.2708784Z INFO : Model::parentPid value changed to: 8308
2022-05-21T14:50:42.2708784Z INFO : Model::products changed to: all
2022-05-21T14:50:42.2708784Z INFO : Model::customer token value changed to: 8d11b1bc-fa7c-4f15-8898-1b28c89a614b
2022-05-21T14:50:42.2708784Z INFO : MCS Crts: C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca3.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca4.crt
2022-05-21T14:50:42.2708784Z INFO : MCS CRLs: C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca3.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca4.crl
2022-05-21T14:50:42.2708784Z INFO : Model:: MCS customer id value changed to: 1b3b5d1e-2046-5478-dadd-e027b81be96c
2022-05-21T14:50:42.2708784Z INFO : Sophos Endpoint Defense is not installed
2022-05-21T14:50:42.2708784Z INFO : Not tamper-protected by SED
2022-05-21T14:50:42.3021367Z INFO : detectedMsiInstalledMcs.installed: 0
2022-05-21T14:50:42.3021367Z INFO : Not migrating from SEC endpoint.
2022-05-21T14:50:42.3021367Z INFO : Beginning command definition.
2022-05-21T14:50:42.3021367Z INFO : Adding command to remove Sophos 'Image File Execution Options' keys.
2022-05-21T14:50:42.3021367Z INFO : Adding command to wait for SAU update to complete.
2022-05-21T14:50:42.3021367Z INFO : Adding competitor detection command.
2022-05-21T14:50:42.3021367Z INFO : Adding command to register with Sophos cloud.
2022-05-21T14:50:42.3021367Z INFO : Adding command to download product suite.
2022-05-21T14:50:42.3021367Z INFO : Adding command to uninstall existing products.
2022-05-21T14:50:42.3021367Z INFO : Adding command to remove existing installation of Sophos AutoUpdate
2022-05-21T14:50:42.3021367Z INFO : Adding command to allow tamper protected reinstalls.
2022-05-21T14:50:42.3021367Z INFO : Adding commands to uninstall remaining existing products.
2022-05-21T14:50:42.3021367Z INFO : Adding command to remove existing installation of Sophos System Protection
2022-05-21T14:50:42.3021367Z INFO : Adding command to remove existing installation of Sophos Heartbeat
2022-05-21T14:50:42.3021367Z INFO : Adding command to remove existing installation of Sophos Network Access Control
2022-05-21T14:50:42.3021367Z INFO : Adding command to remove existing installation of Sophos Client Firewall
2022-05-21T14:50:42.3021367Z INFO : Adding command to remove existing installation of Sophos Patch
2022-05-21T14:50:42.3021367Z INFO : Adding command to remove existing installation of Sophos Clean
2022-05-21T14:50:42.3021367Z INFO : Adding command to retrieve policy.
2022-05-21T14:50:42.3021367Z INFO : Adding command to prepare for installation.
2022-05-21T14:50:42.3021367Z INFO : Adding command to install Sophos agent.
2022-05-21T14:50:42.3021367Z INFO : Command definition complete.
2022-05-21T14:50:42.3021367Z INFO : Stage 1 version:1.14.293.0
2022-05-21T14:50:42.3021367Z INFO : Stage 2 version:1.14.293.0
2022-05-21T14:50:42.3021367Z INFO : OS version: 6.3.9600.
2022-05-21T14:50:42.3021367Z INFO : Service pack: 0.0.
2022-05-21T14:50:42.3021367Z INFO : System Language: 1033.
2022-05-21T14:50:42.3021367Z INFO : User Language: 1033.
2022-05-21T14:50:42.3021367Z INFO : 64 bit: yes.
2022-05-21T14:50:42.3021367Z INFO : FindMainWindow: pid=8308
2022-05-21T14:50:42.3021367Z INFO : Window is main control window of process
2022-05-21T14:50:42.3021367Z INFO : ::EnumWindows stopped early; window found
2022-05-21T14:50:42.3021367Z INFO : _bestHandle=0003020E
2022-05-21T14:50:42.5365776Z INFO : Running System Property Check: VerifyTrust ...
2022-05-21T14:50:42.5678386Z INFO : System Property Check: VerifyTrust - PASSED
2022-05-21T14:50:42.6304393Z INFO : Running System Property Check: HostnameLength ...
2022-05-21T14:50:42.6304393Z INFO : Initialized Winsock subsystem
2022-05-21T14:50:42.6304393Z INFO : Valid hostname length
2022-05-21T14:50:42.6304393Z INFO : System Property Check: HostnameLength - PASSED
2022-05-21T14:50:42.6929236Z INFO : Running System Property Check: GroupNameLength ...
2022-05-21T14:50:42.6929236Z INFO : System Property Check: GroupNameLength - PASSED
2022-05-21T14:50:42.7553930Z INFO : Running System Property Check: IsAdministrator ...
2022-05-21T14:50:42.7553930Z INFO : System Property Check: IsAdministrator - PASSED
2022-05-21T14:50:42.8179869Z INFO : Running System Property Check: JunctionPointsCheck ...
2022-05-21T14:50:42.8179869Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:42.8179869Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:42.8179869Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:42.8179869Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:42.8179869Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:42.8179869Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:42.8179869Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:42.8179869Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:42.8179869Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:42.8179869Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:42.8179869Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:42.8179869Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:42.8179869Z INFO : Scanned 65 Sophos paths for junction points
2022-05-21T14:50:42.8179869Z INFO : System Property Check: JunctionPointsCheck - PASSED
2022-05-21T14:50:42.8804791Z INFO : Running System Property Check: PendingReboots ...
2022-05-21T14:50:42.8804791Z INFO : System Property Check: PendingReboots - PASSED
2022-05-21T14:50:42.9430312Z INFO : Running System Property Check: PrimaryDriveSpace ...
2022-05-21T14:50:42.9430312Z INFO : Enough space: 1.00006e+06 Mb
2022-05-21T14:50:42.9430312Z INFO : System Property Check: PrimaryDriveSpace - PASSED
2022-05-21T14:50:43.0095454Z INFO : Running System Property Check: MsXml ...
2022-05-21T14:50:43.0095454Z INFO : System Property Check: MsXml - PASSED
2022-05-21T14:50:43.0720146Z INFO : Running System Property Check: NotFirewall ...
2022-05-21T14:50:43.0720146Z INFO : System Property Check: NotFirewall - PASSED
2022-05-21T14:50:43.1345746Z INFO : Running System Property Check: NotHitmanProAlertIncompatible ...
2022-05-21T14:50:43.1345746Z INFO : No HitmanPro.Alert Installed
2022-05-21T14:50:43.1345746Z INFO : System Property Check: NotHitmanProAlertIncompatible - PASSED
2022-05-21T14:50:43.1970888Z INFO : Running System Property Check: NotInvincea ...
2022-05-21T14:50:43.1970888Z INFO : System Property Check: NotInvincea - PASSED
2022-05-21T14:50:43.2595663Z INFO : Running System Property Check: NotMessageRelay ...
2022-05-21T14:50:43.2595663Z INFO : RMS is not installed on the endpoint
2022-05-21T14:50:43.2595663Z INFO : System Property Check: NotMessageRelay - PASSED
2022-05-21T14:50:43.3221244Z INFO : Running System Property Check: NotNac ...
2022-05-21T14:50:43.3221244Z INFO : System Property Check: NotNac - PASSED
2022-05-21T14:50:43.3846421Z INFO : Running System Property Check: NotPatch ...
2022-05-21T14:50:43.3846421Z INFO : System Property Check: NotPatch - PASSED
2022-05-21T14:50:43.4471662Z INFO : Running System Property Check: NotPureMessageDomino ...
2022-05-21T14:50:43.4471662Z INFO : System Property Check: NotPureMessageDomino - PASSED
2022-05-21T14:50:43.5096895Z INFO : Running System Property Check: NotPureMessageExchangeWithAntiSpam ...
2022-05-21T14:50:43.5096895Z INFO : System Property Check: NotPureMessageExchangeWithAntiSpam - PASSED
2022-05-21T14:50:43.5722053Z INFO : Running System Property Check: NotSharePoint ...
2022-05-21T14:50:43.5722053Z INFO : System Property Check: NotSharePoint - PASSED
2022-05-21T14:50:43.6346710Z INFO : Running System Property Check: NotSecServer ...
2022-05-21T14:50:43.6346710Z INFO : System Property Check: NotSecServer - PASSED
2022-05-21T14:50:43.6972408Z INFO : Running System Property Check: NotSum ...
2022-05-21T14:50:43.6972408Z INFO : System Property Check: NotSum - PASSED
2022-05-21T14:50:43.7597580Z INFO : Running System Property Check: NotBlockedByTamperProtection ...
2022-05-21T14:50:43.7597580Z INFO : Not tamper protected
2022-05-21T14:50:43.7597580Z INFO : System Property Check: NotBlockedByTamperProtection - PASSED
2022-05-21T14:50:43.8222718Z INFO : Running System Property Check: RAMSize ...
2022-05-21T14:50:43.8222718Z INFO : System Property Check: RAMSize - PASSED
2022-05-21T14:50:43.8847959Z INFO : Running System Property Check: SupportedArchitecture ...
2022-05-21T14:50:43.8847959Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:43.8847959Z INFO : Unable to detect architecture
2022-05-21T14:50:43.8847959Z INFO : System Property Check: SupportedArchitecture - PASSED
2022-05-21T14:50:43.9473050Z INFO : Running System Property Check: SupportedOS ...
2022-05-21T14:50:43.9473050Z INFO : Running on server.
2022-05-21T14:50:43.9473050Z INFO : System Property Check: SupportedOS - PASSED
2022-05-21T14:50:44.0098224Z INFO : Running System Property Check: SupportedPatches ...
2022-05-21T14:50:44.0098224Z INFO : System Property Check: SupportedPatches - PASSED
2022-05-21T14:50:44.0723382Z INFO : Running System Property Check: DotNetFramework ...
2022-05-21T14:50:44.0723382Z INFO : .NET version check skipped for non-Window 10 platforms with 'frozen' endpoint software
2022-05-21T14:50:44.0723382Z INFO : System Property Check: DotNetFramework - PASSED
2022-05-21T14:50:44.1348867Z INFO : Running System Property Check: ValidTempDirectory ...
2022-05-21T14:50:44.1348867Z INFO : Temp folder exists.
2022-05-21T14:50:44.1348867Z INFO : System Property Check: ValidTempDirectory - PASSED
2022-05-21T14:50:44.1973713Z INFO : Running System Property Check: ValidLocalInstallSourceDirectory ...
2022-05-21T14:50:44.1973713Z INFO : No local install source folder to validate.
2022-05-21T14:50:44.1973713Z INFO : System Property Check: ValidLocalInstallSourceDirectory - PASSED
2022-05-21T14:50:44.2598903Z INFO : Running System Property Check: ValidServer ...
2022-05-21T14:50:44.2598903Z INFO : System Property Check: ValidServer - PASSED
2022-05-21T14:50:44.3224132Z INFO : Running System Property Check: ValidDeploymentInfo ...
2022-05-21T14:50:44.3224132Z INFO : Current Time: 2022-05-21T14:50:44.322000
2022-05-21T14:50:44.3224132Z INFO : This computer is part of the domain ALSHEMAL
2022-05-21T14:50:44.3224132Z INFO : Domain Name: ALSHEMAL
2022-05-21T14:50:44.3224132Z INFO : Computer Name: MAIN-SRV
2022-05-21T14:50:44.3224132Z INFO : Computer Description is not available.
2022-05-21T14:50:44.3224132Z INFO : Operating system friendly name: Windows Server 2012 R2 Standard
2022-05-21T14:50:44.3224132Z INFO : Operating system for status: WIN2012R2SERVER
2022-05-21T14:50:44.3224132Z INFO : ProductType: 7
2022-05-21T14:50:44.3224132Z INFO : Session user: ALSHEMAL\\Administrator
2022-05-21T14:50:44.3224132Z INFO : Last logged on user: ALSHEMAL\\Administrator
2022-05-21T14:50:44.3224132Z INFO : User principal name: Administrator@alshemal.com
2022-05-21T14:50:44.3224132Z INFO : Fully Qualified Domain Name: MAIN-SRV.alshemal.com
2022-05-21T14:50:44.3224132Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:44.3224132Z INFO : Processor architecture: x64
2022-05-21T14:50:44.3224132Z INFO : OS Major Version: 6 and OS Minor Version: 3
2022-05-21T14:50:44.3224132Z INFO : Friendly OS Name: WIN2012R2SERVER
2022-05-21T14:50:44.3224132Z INFO : Is server?: 1
2022-05-21T14:50:44.5255333Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/deployment-info/3
2022-05-21T14:50:44.5255333Z INFO : Did not discover an URL for a PAC file
2022-05-21T14:50:44.5255333Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2022-05-21T14:50:44.5255333Z INFO : Set security protocol: 00000800
2022-05-21T14:50:44.5255333Z INFO : Opening connection to mcs2-cloudstation-us-west-2.prod.hydra.sophos.com
2022-05-21T14:50:44.5255333Z INFO : Sending request for connection confirmation through potential proxy
2022-05-21T14:50:44.5255333Z INFO : Request content size: 0
2022-05-21T14:50:45.5887254Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-05-21T14:50:45.6044408Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-05-21T14:50:45.6044408Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-05-21T14:50:45.6200267Z INFO : Certificate check succeeded
2022-05-21T14:50:45.6200267Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-05-21T14:50:45.8544705Z INFO : Response status code: 200
2022-05-21T14:50:45.8544705Z INFO : Response data size: 168
2022-05-21T14:50:45.8544705Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2022-05-21T14:50:45.8544705Z INFO : Request content size: 1696
2022-05-21T14:50:45.8544705Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-05-21T14:50:45.8544705Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-05-21T14:50:45.8544705Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-05-21T14:50:45.8544705Z INFO : Certificate check succeeded
2022-05-21T14:50:45.8544705Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-05-21T14:50:46.1045261Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-05-21T14:50:46.1045261Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-05-21T14:50:46.1045261Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-05-21T14:50:46.1201474Z INFO : Certificate check succeeded
2022-05-21T14:50:46.1201474Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-05-21T14:50:46.1201474Z INFO : Response status code: 200
2022-05-21T14:50:46.1201474Z INFO : Response data size: 220
2022-05-21T14:50:46.1201474Z INFO : Parsing message received for deployment token: {"registrationToken":"5d77115c3cbba1cf18178ffceeeb2508710b3d368b2f5a05db16b8cb18d27d6e","dciFileName":"bc82f40ffe7078265210e67cc986463c","products":[{"product":"SERVER_INTERCEPT_ADVANCED","supported":true,"reasons":[]}]}
2022-05-21T14:50:46.1201474Z INFO : Model::token value changed to: 5d77115c3cbba1cf18178ffceeeb2508710b3d368b2f5a05db16b8cb18d27d6e
2022-05-21T14:50:46.1201474Z INFO : Licenses available: SERVER_INTERCEPT_ADVANCED
2022-05-21T14:50:46.1827002Z INFO : Running System Property Check: InstallationInProgress ...
2022-05-21T14:50:46.1827002Z INFO : System Property Check: InstallationInProgress - PASSED
2022-05-21T14:50:46.2451868Z INFO : Running System Property Check: SafeGuardEncryption ...
2022-05-21T14:50:46.2451868Z INFO : Entered installedProductCode, upgradeCode={BA2F47D3-1C17-40E7-8DE7-1CD733442B6C}
2022-05-21T14:50:46.2451868Z INFO : Product is not installed
2022-05-21T14:50:46.2451868Z INFO : licensesContainFeature(DEVICE_ENCRYPTION): false
2022-05-21T14:50:46.2451868Z INFO : System Property Check: SafeGuardEncryption - PASSED
2022-05-21T14:50:48.8238423Z INFO : Starting installation process.
2022-05-21T14:50:48.8238423Z INFO : About to execute command: CleanSophosIfeoKeysCommand
2022-05-21T14:50:48.8238423Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:48.8238423Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:48.8238423Z INFO : Command 'CleanSophosIfeoKeysCommand' completed with success with reboot code '0' and error message ''.
2022-05-21T14:50:48.8238423Z INFO : About to execute command: WaitForSauUpdateCommand
2022-05-21T14:50:48.8238423Z INFO : Waiting for operation to succeed within 900000ms.
2022-05-21T14:50:48.8238423Z INFO : AutoUpdate folder: C:\\Program Files (x86)\\Sophos\\AutoUpdate
2022-05-21T14:50:48.8238423Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2022-05-21T14:50:48.8238423Z INFO : Cache folder: C:\\ProgramData\\Sophos\\AutoUpdate\\cache
2022-05-21T14:50:48.8238423Z INFO : SAU not updating - continuing with installation
2022-05-21T14:50:48.8238423Z INFO : Command 'WaitForSauUpdateCommand' completed with success with reboot code '0' and error message ''.
2022-05-21T14:50:48.8238423Z INFO : About to execute command: CompetitorDetector
2022-05-21T14:50:48.8238423Z INFO : Command 'CompetitorDetector' completed with success with reboot code '0' and error message ''.
2022-05-21T14:50:48.8238423Z INFO : About to execute command: Register
2022-05-21T14:50:48.8238423Z INFO : Ensuring any MCS client service is stopped to prevent race for policy retrieval
2022-05-21T14:50:48.8238423Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/register
2022-05-21T14:50:48.8395137Z INFO : Did not discover an URL for a PAC file
2022-05-21T14:50:48.8395137Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2022-05-21T14:50:48.8395137Z INFO : Set security protocol: 00000800
2022-05-21T14:50:48.8395137Z INFO : Opening connection to mcs2-cloudstation-us-west-2.prod.hydra.sophos.com
2022-05-21T14:50:48.8395137Z INFO : Sending request for connection confirmation through potential proxy
2022-05-21T14:50:48.8395137Z INFO : Request content size: 0
2022-05-21T14:50:48.8395137Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-05-21T14:50:48.8395137Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-05-21T14:50:48.8395137Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-05-21T14:50:48.8395137Z INFO : Certificate check succeeded
2022-05-21T14:50:48.8395137Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-05-21T14:50:49.0739484Z INFO : Response status code: 200
2022-05-21T14:50:49.0739484Z INFO : Response data size: 168
2022-05-21T14:50:49.0739484Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2022-05-21T14:50:49.0739484Z INFO : Request content size: 1696
2022-05-21T14:50:49.0739484Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-05-21T14:50:49.0739484Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-05-21T14:50:49.0739484Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-05-21T14:50:49.0739484Z INFO : Certificate check succeeded
2022-05-21T14:50:49.0739484Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-05-21T14:50:49.4802857Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-05-21T14:50:49.4802857Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-05-21T14:50:49.4802857Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-05-21T14:50:49.4959014Z INFO : Certificate check succeeded
2022-05-21T14:50:49.4959014Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-05-21T14:50:49.4959014Z INFO : Response status code: 200
2022-05-21T14:50:49.4959014Z INFO : Response data size: 72
2022-05-21T14:50:49.4959014Z INFO : Retrieved endpoint id: a3ba9d95-800b-d4db-7aa2-590a988542be
2022-05-21T14:50:50.5019062Z INFO : Sending HTTP 'GET' request to: sophos/management/ep/install/flags/endpoint/a3ba9d95-800b-d4db-7aa2-590a988542be
2022-05-21T14:50:50.5019062Z INFO : Request content size: 0
2022-05-21T14:50:50.5019062Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-05-21T14:50:50.5019062Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-05-21T14:50:50.5019062Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-05-21T14:50:50.5019062Z INFO : Certificate check succeeded
2022-05-21T14:50:50.5019062Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-05-21T14:50:50.7363371Z INFO : Response status code: 200
2022-05-21T14:50:50.7363371Z INFO : Response data size: 2672
2022-05-21T14:50:50.7363371Z INFO : Loaded 72 endpoint flags
2022-05-21T14:50:50.7363371Z INFO : Using SDDS3: Enabled in Central AND SED is not installed
2022-05-21T14:50:50.7363371Z INFO : Setting sdds3 download to: true
2022-05-21T14:50:50.7363371Z INFO : Sending HTTP 'PUT' request to: sophos/management/ep/install/statuses/endpoint/a3ba9d95-800b-d4db-7aa2-590a988542be
2022-05-21T14:50:50.7363371Z INFO : Request content size: 990
2022-05-21T14:50:50.7363371Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-05-21T14:50:50.7363371Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-05-21T14:50:50.7519502Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-05-21T14:50:50.7519502Z INFO : Certificate check succeeded
2022-05-21T14:50:50.7519502Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-05-21T14:50:51.0020092Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-05-21T14:50:51.0020092Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-05-21T14:50:51.0020092Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-05-21T14:50:51.0176282Z INFO : Certificate check succeeded
2022-05-21T14:50:51.0176282Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-05-21T14:50:51.0176282Z INFO : Response status code: 200
2022-05-21T14:50:51.0176282Z INFO : Response data size: 0
2022-05-21T14:50:51.0176282Z INFO : Attempt to retrieve policy.
2022-05-21T14:50:51.0176282Z INFO : Sending HTTP 'GET' request to: sophos/management/ep/install/commands/applications/APPSPROXY;ALC/endpoint/a3ba9d95-800b-d4db-7aa2-590a988542be
2022-05-21T14:50:51.0176282Z INFO : Request content size: 0
2022-05-21T14:50:51.0176282Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-05-21T14:50:51.0176282Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-05-21T14:50:51.0176282Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-05-21T14:50:51.0176282Z INFO : Certificate check succeeded
2022-05-21T14:50:51.0176282Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-05-21T14:50:51.2520580Z INFO : Response status code: 200
2022-05-21T14:50:51.2520580Z INFO : Response data size: 790
2022-05-21T14:50:51.2520580Z INFO : Successfully retrieved policy with policyId='96d91f8be00c9bcea0be265505083fb4d9bd0c9bfa8c02bdd31efd21f79114de'.
2022-05-21T14:50:51.2520580Z INFO : Sending HTTP 'DELETE' request to: sophos/management/ep/install/commands/endpoint/a3ba9d95-800b-d4db-7aa2-590a988542be/76
2022-05-21T14:50:51.2520580Z INFO : Request content size: 0
2022-05-21T14:50:51.2520580Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-05-21T14:50:51.2520580Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-05-21T14:50:51.2520580Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-05-21T14:50:51.2676754Z INFO : Certificate check succeeded
2022-05-21T14:50:51.2676754Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-05-21T14:50:51.5021067Z INFO : Response status code: 200
2022-05-21T14:50:51.5021067Z INFO : Response data size: 0
2022-05-21T14:50:51.5021067Z INFO : Sending HTTP 'GET' request to: sophos/management/ep/install/policy/application/ALC/96d91f8be00c9bcea0be265505083fb4d9bd0c9bfa8c02bdd31efd21f79114de
2022-05-21T14:50:51.5021067Z INFO : Request content size: 0
2022-05-21T14:50:51.5021067Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-05-21T14:50:51.5177233Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-05-21T14:50:51.5177233Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-05-21T14:50:51.5177233Z INFO : Certificate check succeeded
2022-05-21T14:50:51.5177233Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-05-21T14:50:51.8146396Z INFO : Response status code: 200
2022-05-21T14:50:51.8146396Z INFO : Response data size: 2768
2022-05-21T14:50:51.8146396Z INFO : Assume obfuscated SAU password
2022-05-21T14:50:51.9552680Z INFO : Updating subscription created with id: Base, rigidname: WindowsCloudServer, baseversion: 1, tag: RECOMMENDED, fixedversion:
2022-05-21T14:50:51.9552680Z INFO : Updating subscription created with id: CloudAV, rigidname: WindowsCloudServerAV, baseversion: 1, tag: RECOMMENDED, fixedversion:
2022-05-21T14:50:51.9552680Z INFO : Updating subscription created with id: HitmanProAlert, rigidname: WindowsCloudServerHitmanProAlert, baseversion: 1, tag: RECOMMENDED, fixedversion:
2022-05-21T14:50:51.9552680Z INFO : Features: APPCNTRL
2022-05-21T14:50:51.9552680Z INFO : Features: AV
2022-05-21T14:50:51.9552680Z INFO : Features: CLEAN
2022-05-21T14:50:51.9552680Z INFO : Features: CORE
2022-05-21T14:50:51.9552680Z INFO : Features: DLP
2022-05-21T14:50:51.9552680Z INFO : Features: DVCCNTRL
2022-05-21T14:50:51.9552680Z INFO : Features: EFW
2022-05-21T14:50:51.9552680Z INFO : Features: FIM
2022-05-21T14:50:51.9552680Z INFO : Features: HBT
2022-05-21T14:50:51.9552680Z INFO : Features: MTD
2022-05-21T14:50:51.9552680Z INFO : Features: NTP
2022-05-21T14:50:51.9552680Z INFO : Features: SAV
2022-05-21T14:50:51.9552680Z INFO : Features: SDU
2022-05-21T14:50:51.9709363Z INFO : Features: WEBCNTRL
2022-05-21T14:50:51.9709363Z INFO : Features: XPD
2022-05-21T14:50:51.9709363Z INFO : Setting https download to: true
2022-05-21T14:50:51.9709363Z INFO : Updating credentials created with username: VNJUN9QBQ7
2022-05-21T14:50:51.9709363Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/authenticate/endpoint/a3ba9d95-800b-d4db-7aa2-590a988542be/role/endpoint
2022-05-21T14:50:51.9709363Z INFO : Request content size: 0
2022-05-21T14:50:51.9709363Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-05-21T14:50:51.9709363Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-05-21T14:50:51.9709363Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-05-21T14:50:51.9709363Z INFO : Certificate check succeeded
2022-05-21T14:50:51.9709363Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-05-21T14:50:52.8210367Z INFO : Response status code: 200
2022-05-21T14:50:52.8210367Z INFO : Response data size: 1116
2022-05-21T14:50:52.8210367Z INFO : Retrieved mcs auth: tenant_id=b1b3d5e1-0264-4587-addd-0e728bb19ec6 device_id=3aabd959-08b0-4dbd-a72a-95a0895824eb
2022-05-21T14:50:52.8366536Z INFO : Restarting MCS Client service if stopped
2022-05-21T14:50:52.8366536Z INFO : Command 'Register' completed with success with reboot code '0' and error message ''.
2022-05-21T14:50:52.8366536Z INFO : About to execute command: Download
2022-05-21T14:50:52.8366536Z INFO : Update Cache Cert Path folder: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
2022-05-21T14:50:52.8366536Z INFO : About to create directory: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\data\\repo
2022-05-21T14:50:52.8366536Z INFO : Created directory: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\data\\repo
2022-05-21T14:50:52.8366536Z INFO : About to set security DACL on: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\data
2022-05-21T14:50:52.8522977Z INFO : Set security DACL on: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\data
2022-05-21T14:50:52.8522977Z INFO : About to create directory: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded
2022-05-21T14:50:52.8522977Z INFO : Created directory: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded
2022-05-21T14:50:52.8522977Z INFO : About to set security DACL on: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded
2022-05-21T14:50:52.8678676Z INFO : Set security DACL on: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded
2022-05-21T14:50:52.8678676Z INFO : About to create directory: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
2022-05-21T14:50:52.8678676Z INFO : Created directory: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
2022-05-21T14:50:52.8678676Z INFO : About to set security DACL on: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
2022-05-21T14:50:52.8678676Z INFO : Set security DACL on: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
2022-05-21T14:50:52.8678676Z INFO : CRT required: adding 'CRT' feature
2022-05-21T14:50:52.8834964Z INFO : IsWow64Process2 not available on older platforms
2022-05-21T14:50:52.8834964Z INFO : No manually configured proxy
2022-05-21T14:50:52.8834964Z INFO : WinHttp default proxy not set
2022-05-21T14:50:52.9148257Z INFO : WinHttp discovered proxies not found
2022-05-21T14:50:52.9148257Z INFO : Trying update service url sus.sophosupd.com/.../3aabd959-08b0-4dbd-a72a-95a0895824eb with proxy: <direct; no proxy>
2022-05-21T14:50:53.7431132Z INFO : 200 from sus.sophosupd.com/.../3aabd959-08b0-4dbd-a72a-95a0895824eb with proxy: <direct; no proxy> (peer address 52.31.79.43)
2022-05-21T14:50:53.7587012Z INFO : No update caches configured
2022-05-21T14:50:53.7587012Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.com with proxy: <direct; no proxy>
2022-05-21T14:50:54.5088515Z INFO : 403 from sdds3.sophosupd.com/.../sdds3.WindowsCloudServerAV_1.3.95.273bb7fbb9.dat with proxy: <direct; no proxy>
2022-05-21T14:50:54.7901472Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.com with proxy: <direct; no proxy> (try 2 of 5)
2022-05-21T14:50:54.8682863Z INFO : 403 from sdds3.sophosupd.com/.../sdds3.WindowsCloudServerAV_1.3.95.273bb7fbb9.dat with proxy: <direct; no proxy>
2022-05-21T14:50:55.8840876Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.com with proxy: <direct; no proxy> (try 3 of 5)
2022-05-21T14:50:55.9778566Z INFO : 403 from sdds3.sophosupd.com/.../sdds3.WindowsCloudServerAV_1.3.95.273bb7fbb9.dat with proxy: <direct; no proxy>
2022-05-21T14:51:00.9942984Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.com with proxy: <direct; no proxy> (try 4 of 5)
2022-05-21T14:51:01.0724431Z INFO : 403 from sdds3.sophosupd.com/.../sdds3.WindowsCloudServerAV_1.3.95.273bb7fbb9.dat with proxy: <direct; no proxy>
2022-05-21T14:51:31.0922661Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.com with proxy: <direct; no proxy> (try 5 of 5)
2022-05-21T14:51:31.1703665Z INFO : 403 from sdds3.sophosupd.com/.../sdds3.WindowsCloudServerAV_1.3.95.273bb7fbb9.dat with proxy: <direct; no proxy>
2022-05-21T14:51:31.1703665Z INFO : No manually configured proxy
2022-05-21T14:51:31.1703665Z INFO : WinHttp default proxy not set
2022-05-21T14:51:31.1703665Z INFO : WinHttp discovered proxies not found
2022-05-21T14:51:31.1703665Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.com with proxy: <direct; no proxy>
2022-05-21T14:51:31.2485006Z INFO : 403 from sdds3.sophosupd.com/.../sdds3.WindowsCloudServerAV_1.3.95.273bb7fbb9.dat with proxy: <direct; no proxy>
2022-05-21T14:51:31.5141646Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.com with proxy: <direct; no proxy> (try 2 of 5)
2022-05-21T14:51:31.5923302Z INFO : 403 from sdds3.sophosupd.com/.../sdds3.WindowsCloudServerAV_1.3.95.273bb7fbb9.dat with proxy: <direct; no proxy>
2022-05-21T14:51:32.6080789Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.com with proxy: <direct; no proxy> (try 3 of 5)
2022-05-21T14:51:32.7017653Z INFO : 403 from sdds3.sophosupd.com/.../sdds3.WindowsCloudServerAV_1.3.95.273bb7fbb9.dat with proxy: <direct; no proxy>
2022-05-21T14:51:37.7147280Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.com with proxy: <direct; no proxy> (try 4 of 5)
2022-05-21T14:51:37.9178752Z INFO : 403 from sdds3.sophosupd.com/.../sdds3.WindowsCloudServerAV_1.3.95.273bb7fbb9.dat with proxy: <direct; no proxy>
2022-05-21T14:52:07.9330250Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.com with proxy: <direct; no proxy> (try 5 of 5)
2022-05-21T14:52:08.0111610Z INFO : 403 from sdds3.sophosupd.com/.../sdds3.WindowsCloudServerAV_1.3.95.273bb7fbb9.dat with proxy: <direct; no proxy>
2022-05-21T14:52:08.0111610Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.net with proxy: <direct; no proxy>
2022-05-21T14:52:08.3237034Z WARNING : Error from https://sdds3.sophosupd.net with proxy: <direct; no proxy>: WinHttpSendRequest failed: The context has expired and can no longer be used. (590615)
2022-05-21T14:52:08.5893647Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.net with proxy: <direct; no proxy> (try 2 of 5)
2022-05-21T14:52:08.7456324Z WARNING : Error from https://sdds3.sophosupd.net with proxy: <direct; no proxy>: WinHttpSendRequest failed: The context has expired and can no longer be used. (590615)
2022-05-21T14:52:09.7613952Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.net with proxy: <direct; no proxy> (try 3 of 5)
2022-05-21T14:52:09.9176621Z WARNING : Error from https://sdds3.sophosupd.net with proxy: <direct; no proxy>: WinHttpSendRequest failed: The context has expired and can no longer be used. (590615)
2022-05-21T14:52:14.9339436Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.net with proxy: <direct; no proxy> (try 4 of 5)
2022-05-21T14:52:15.0902144Z WARNING : Error from https://sdds3.sophosupd.net with proxy: <direct; no proxy>: WinHttpSendRequest failed: The context has expired and can no longer be used. (590615)
2022-05-21T14:52:45.1078742Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.net with proxy: <direct; no proxy> (try 5 of 5)
2022-05-21T14:52:45.2641616Z WARNING : Error from https://sdds3.sophosupd.net with proxy: <direct; no proxy>: WinHttpSendRequest failed: The context has expired and can no longer be used. (590615)
2022-05-21T14:52:45.2641616Z INFO : No manually configured proxy
2022-05-21T14:52:45.2641616Z INFO : WinHttp default proxy not set
2022-05-21T14:52:45.2641616Z INFO : WinHttp discovered proxies not found
2022-05-21T14:52:45.2641616Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.net with proxy: <direct; no proxy>
2022-05-21T14:52:45.4360594Z WARNING : Error from https://sdds3.sophosupd.net with proxy: <direct; no proxy>: WinHttpSendRequest failed: The context has expired and can no longer be used. (590615)
2022-05-21T14:52:45.7016927Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.net with proxy: <direct; no proxy> (try 2 of 5)
2022-05-21T14:52:45.8579639Z WARNING : Error from https://sdds3.sophosupd.net with proxy: <direct; no proxy>: WinHttpSendRequest failed: The context has expired and can no longer be used. (590615)
2022-05-21T14:52:46.8737271Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.net with proxy: <direct; no proxy> (try 3 of 5)
2022-05-21T14:52:47.0300271Z WARNING : Error from https://sdds3.sophosupd.net with proxy: <direct; no proxy>: WinHttpSendRequest failed: The context has expired and can no longer be used. (590615)
2022-05-21T14:52:52.0462760Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.net with proxy: <direct; no proxy> (try 4 of 5)
2022-05-21T14:52:52.2025444Z WARNING : Error from https://sdds3.sophosupd.net with proxy: <direct; no proxy>: WinHttpSendRequest failed: The context has expired and can no longer be used. (590615)
2022-05-21T14:53:22.2117568Z INFO : Trying SDDS3 CDN url https://sdds3.sophosupd.net with proxy: <direct; no proxy> (try 5 of 5)
2022-05-21T14:53:22.4930424Z WARNING : Error from https://sdds3.sophosupd.net with proxy: <direct; no proxy>: WinHttpSendRequest failed: The context has expired and can no longer be used. (590615)
2022-05-21T14:53:22.4930424Z WARNING : No reachable update locations
2022-05-21T14:53:22.4930424Z ERROR : Error: Failed to open C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\data\\repo\\suite\\sdds3.WindowsCloudServerAV_1.3.95.273bb7fbb9.dat: The system cannot find the path specified. (3)
2022-05-21T14:53:22.4930424Z ERROR : DownloadCommand::onRun() failed with std::exception: SDDS3 sync failed
2022-05-21T14:53:22.4930424Z INFO : Command 'Download' completed with failure with reboot code '0' and error message 'Could not download software'.
2022-05-21T14:53:22.4930424Z ERROR : Installation failed.
2022-05-21T14:53:22.4930424Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/events/endpoint/a3ba9d95-800b-d4db-7aa2-590a988542be
2022-05-21T14:53:22.5086722Z INFO : Did not discover an URL for a PAC file
2022-05-21T14:53:22.5086722Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2022-05-21T14:53:22.5086722Z INFO : Set security protocol: 00000800
2022-05-21T14:53:22.5086722Z INFO : Opening connection to mcs2-cloudstation-us-west-2.prod.hydra.sophos.com
2022-05-21T14:53:22.5086722Z INFO : Sending request for connection confirmation through potential proxy
2022-05-21T14:53:22.5086722Z INFO : Request content size: 0
2022-05-21T14:53:23.3681496Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-05-21T14:53:23.3681496Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-05-21T14:53:23.3681496Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-05-21T14:53:23.3837770Z INFO : Certificate check succeeded
2022-05-21T14:53:23.3837770Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-05-21T14:53:23.6103926Z INFO : Response status code: 200
2022-05-21T14:53:23.6103926Z INFO : Response data size: 168
2022-05-21T14:53:23.6103926Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2022-05-21T14:53:23.6103926Z INFO : Request content size: 973
2022-05-21T14:53:23.6103926Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-05-21T14:53:23.6260102Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-05-21T14:53:23.6260102Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-05-21T14:53:23.6260102Z INFO : Certificate check succeeded
2022-05-21T14:53:23.6260102Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-05-21T14:53:23.8916762Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2022-05-21T14:53:23.8916762Z INFO : Subject certificate failed validation against root CA: SophosCA1
2022-05-21T14:53:23.9072965Z INFO : Subject certificate failed validation against root CA: SophosCA2
2022-05-21T14:53:23.9072965Z INFO : Certificate check succeeded
2022-05-21T14:53:23.9072965Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2022-05-21T14:53:23.9072965Z INFO : Response status code: 200
2022-05-21T14:53:23.9072965Z INFO : Response data size: 0
 

however, I have a server 2012 R2 I have the same problem when installing the offline package as when installing the online package.

Note:i updating the windows and made sure there is no old antiviures , i have another server 2012 R2 the intercpt X install perfectly



This thread was automatically locked due to age.
Parents
  • Hello There,

    Thank you for reaching us, on the logs I can see that there are domains that are not yet allowed on your FW/Proxy server. Those domains are part of the new endpoint architect that we introduce. which needs to be added in order to proceed with the installation.

    • sus.sophosupd.com
    • sdds3.sophosupd.com
    • sdds3.sophosupd.net

    For more details, you may refer to this knowledge base article

    F
    or your On-prem installation, Kindly share the logs to further check the issue. 

    Glenn ArchieSeñas (GlennSen)
    Global Community Support Engineer

    The New Home of Sophos Support Videos!  Visit Sophos Techvids
Reply
  • Hello There,

    Thank you for reaching us, on the logs I can see that there are domains that are not yet allowed on your FW/Proxy server. Those domains are part of the new endpoint architect that we introduce. which needs to be added in order to proceed with the installation.

    • sus.sophosupd.com
    • sdds3.sophosupd.com
    • sdds3.sophosupd.net

    For more details, you may refer to this knowledge base article

    F
    or your On-prem installation, Kindly share the logs to further check the issue. 

    Glenn ArchieSeñas (GlennSen)
    Global Community Support Engineer

    The New Home of Sophos Support Videos!  Visit Sophos Techvids
Children
No Data