This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Intermittent disconnected servers in Entreprise Console

Hello All,

Our environment contains one SEC 5.5.1 with server 2016, and is mainly use to protect Windows Server (2008R2, 2012R2,2016)

We are facing issues to have all servers connected to our console, numbers will go up and suddenly drop, and start to go up again

We have about 900 endpoints, where at max i will say we can see 300 connected all the rest is disconneted

On the SEC router log file we have many entries with

error code: 336462231 - error:140E0197:SSL routines:SSL_shutdown:shutdown while in init

I am assuming that all those actions are bring down the router service and that is why numbers dont go up and stay stable.

On the client side i can find various errors

19.05.2020 10:15:54 166C E ACE_SSL (5664|5740) error code: 336027804 - error:1407609C:SSL routines:SSL23_GET_CLIENT_HELLO:http request

some with

19.05.2020 15:41:38 AED8 E ParentLogon::RegisterParent: Caught CORBA system exception, ID 'IDL:omg.org/CORBA/TRANSIENT:1.0'
OMG minor code (2), described as '*unknown description*', completed = NO

Clients will get connected and the suddenly disconnected for some hours, and then comeback online.

Help and guidance, to where to start looking will be appreciated
I am not sure all servers are afected in the same way

Thanks in advance
Carlos

This thread was automatically locked due to age.

0 Shweta over 4 years ago

Hi Carlos Fernandez1

Wireshark would be more helpful here, please check this article and see if it helps you to give it a start.

Shweta

Community Support Engineer | Sophos Technical Support
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.

The New Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel
0 Carlos Fernandez1 over 4 years ago in reply to Shweta

Hi thanks for your answer

I checked already this part with wireshark, but unfortunately did not get any client with the filter set in this article

Regards,
Cancel
Vote Up 0 Vote Down

Cancel
0 DianneY over 4 years ago in reply to Carlos Fernandez1

Hello Carlos Fernandez1

Do the servers, by any chance, have Lightspeed Smart Agent installed?
Cancel
Vote Up 0 Vote Down

Cancel
0 jak over 4 years ago

On the management server, does it perform any other roles that could cause a lot of TCP connections? Could it be running out of ephemeral ports and having to recycle them?

This seems unlikely on a 2016 server though and you would get a Windows event log entry for this, that said you could run:

netsh int ipv4 show dynamicport tcp

This will print the starting port in the dynamic (ephemeral) range and how many ports there can be. What does that look like?

If when connections are being closed, what does

netstat.exe -ano | find.exe "ESTABLISHED" /c

return for the number of established TCP connections? Does this approach the limit of ephemeral ports as a guide?

Thanks,

Jak
Cancel
Vote Up 0 Vote Down

Cancel
0 Carlos Fernandez1 over 4 years ago in reply to DianneY

No Lightspeed agent installed

It is basically a dedicated server for Sophos

SQL and Sophos applications

Regards,

Carlos
Cancel
Vote Up 0 Vote Down

Cancel
0 Carlos Fernandez1 over 4 years ago in reply to jak

Hi Jak

TCP dynamics looks like this

Protocol tcp Dynamic Port Range
---------------------------------
Start Port : 49152
Number of Ports : 16384

and the Netstat returned 438, when I ran the command there was only 84 connected servers to the console

What I dont really get is why a server which is connected, would suddenly drop when nothing as change, even trying to restart the service "router" on the endpoint does not always re-connect the endpoint.

Hope this info helps a bit

Regards,

Carlos
Cancel
Vote Up 0 Vote Down

Cancel
0 jak over 4 years ago in reply to Carlos Fernandez1

Can you export the router reg key: HKLM\SOFTWARE\Wow6432Node\Sophos\Messaging System\Router\ to a .reg/txt and paste it here?

Thanks.
Cancel
Vote Up 0 Vote Down

Cancel

0 Carlos Fernandez1 over 4 years ago in reply to jak

Fullscreen SEC_router_key.txt Download

Key Name:          HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Sophos\Messaging System\Router
Class Name:        <NO CLASS>
Last Write Time:   18.05.2020 - 21:56
Value 0
  Name:            LegacyProtocolSupport
  Type:            REG_DWORD
  Data:            0

Value 1
  Name:            <NO NAME>
  Type:            REG_SZ
  Data:            

Value 2
  Name:            NumORBThreads
  Type:            REG_DWORD
  Data:            0x10

Value 3
  Name:            ParentAddress
  Type:            REG_SZ
  Data:            

Value 4
  Name:            ParentPort
  Type:            REG_DWORD
  Data:            0x2000

Value 5
  Name:            ConnectionCache
  Type:            REG_DWORD
  Data:            0x5020

Value 6
  Name:            NumSenderThreads
  Type:            REG_DWORD
  Data:            0x8

Value 7
  Name:            ConnectRetriesPause
  Type:            REG_DWORD
  Data:            0x64

Value 8
  Name:            TotalConnectRetryTimeSecs
  Type:            REG_DWORD
  Data:            0xa

Value 9
  Name:            GetterInterval
  Type:            REG_DWORD
  Data:            0x78

Value 10
  Name:            GetterShortInterval
  Type:            REG_DWORD
  Data:            0x78

Value 11
  Name:            NumNotificationThresholdThreads
  Type:            REG_DWORD
  Data:            0x4

Value 12
  Name:            IORSenderPort
  Type:            REG_DWORD
  Data:            0x2000

Value 13
  Name:            ServiceArgs
  Type:            REG_SZ
  Data:            -ORBListenEndpoints iiop://10.137.249.17:8193/ssl_port=8194

Value 14
  Name:            NotifyRouterUpdate
  Type:            REG_SZ
  Data:            EM

Value 15
  Name:            NotifyClientUpdate
  Type:            REG_SZ
  Data:            Router$esopvm1041.Agent

Value 16
  Name:            HostIPToParent
  Type:            REG_DWORD
  Data:            0

Value 17
  Name:            ServiceHomeDir
  Type:            REG_SZ
  Data:            E:\Sophos\Enterprise Console\Remote Management System\

Value 18
  Name:            ServiceDescription
  Type:            REG_SZ
  Data:            Message router for Sophos applications


Key Name:          HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Sophos\Messaging System\Router\Private
Class Name:        <NO CLASS>
Last Write Time:   18.05.2020 - 19:50
Value 0
  Name:            pkp
  Type:            REG_BINARY
  Data:            
00000000   00 08 c0 c6 49 bd 12 06 - 4d 7c c1 98 70 50 4c 84  ..ÀÆI½..M|Á.pPL.
00000010   fe 7f a2 5c e9 9d 6a 9d - e2 08 a4 36 92 48 98 3d  þ.¢\é.j.â.¤6.H.=
00000020   a6 31 2e 8a 06 0c c3 af - 6e 57 00 fc eb e2 2b 00  ¦1....Ã¯nW.üëâ+.
00000030   dc 65 cc 8e 4a 67 09 15 - 56 2e eb 9e 4a c9 d5 c8  ÜeÌ.Jg	.V.ë.JÉÕÈ
00000040   f6 e1 c5 7e 7a 47 c4 a2 - bc 5f ea 77 78 f0 08 e1  öáÅ~zGÄ¢¼_êwxð.á
00000050   57 c1 4c 72 a4 15 3f 1a - 8a 66 c2 0c a5 25 02 57  WÁLr¤.?..fÂ.¥%.W
00000060   90 a4 57 40 88 ea d3 26 - e3 8c 36 9a 39 e3 8c 43  .¤W@.êÓ&ã.6.9ã.C
00000070   60 4e f1 7a 73 2f 3d 22 - 9a 95 cc cd 42 f8 a6 b7  `Nñzs/="..ÌÍBø¦·
00000080   28 b9 07 a6 fb 57 bc 93 - b6 1c f6 67 aa 3b a8 c4  (¹.¦ûW¼.¶.ögª;¨Ä
00000090   21 29 5e 65 3d a6 26 23 - 10 db 1e 23 58 1b 7f 67  !)^e=¦&#.Û.#X..g
000000a0   3a d5 de f8 d4 5d 60 85 - fd 49 ec 52 c7 76 fa 1e  :ÕÞøÔ]`.ýIìRÇvú.
000000b0   4b d1 78 55 4b 01 7d cb - e2 ac 8a d4 a7 04 6c 42  KÑxUK.}Ëâ¬.Ô§.lB
000000c0   bf 2d e4 67 c4 78 59 ec - 28 cc dc 79 03 db dd d0  ¿-ägÄxYì(ÌÜy.ÛÝÐ
000000d0   2c f4 ad 7c 95 4c 3b 41 - 01 d2 d1 e2 9a 3b 4c 0d  ,ô|.L;A.ÒÑâ.;L.
000000e0   87 57 1c e8 f8 b2 9c c3 - bd 65 3a 09 b8 d6 b7 ed  .W.èø².Ã½e:	¸Ö·í
000000f0   86 af 75 b8 16 77 d3 eb - 12 99 88 14 51 d8 72 31  .¯u¸.wÓë....QØr1
00000100   7d 66 c8 e4 06 24 bd ec - 6f 03 9c e3 48 df 50 da  }fÈä.$½ìo..ãHßPÚ
00000110   b1 3e 2f 53 2c ea 27 7e - 2a 57 eb aa 6b 33 43 84  ±>/S,ê'~*Wëªk3C.
00000120   1d 8d 71 d7 37 87 5e 76 - dd 93 3a bd 69 76 6f 2b  ..q×7.^vÝ.:½ivo+
00000130   90 0a 07 ad 5e 4e db b8 - 38 f1 50 2e 08 b2 72 ce  ...^NÛ¸8ñP..²rÎ
00000140   14 f6 e7 85 f5 de a3 dd - 92 c4 56 95 da 78 74 fd  .öç.õÞ£Ý.ÄV.Úxtý
00000150   60 9e 07 e1 0f 3d 06 41 - 0e 90 62 85 98 3c d1 9b  `..á.=.A..b..<Ñ.
00000160   6b c2 61 72 16 27 ec 73 - b3 9c c3 09 da 64 f3 02  kÂar.'ìs³.Ã	Údó.
00000170   e2 6f ce 31 7e fa e9 50 - 62 94 b7 1e a7 53 0f e3  âoÎ1~úéPb.·.§S.ã
00000180   d4 76 97 20 fe 60 8a 4c - f8 b9 a4 f6 d6 e6 82 6d  Ôv. þ`.Lø¹¤öÖæ.m
00000190   dd 74 0f 87 1c ce 95 bb - 1e c4 60 12 e1 35 17 3f  Ýt...Î.».Ä`.á5.?
000001a0   f4 64 7f 7c bd 4c 04 fb - 9f 8c 06 67 18 8a 16 8c  ôd.|½L.û...g....
000001b0   4e 61 8f 79 34 16 cf f1 - 35 52 65 47 09 1c 93 49  Na.y4.Ïñ5ReG	..I
000001c0   1e 81 fc 21 35 37 5f 1b - 17 2f 9c 04 ed ca 2e de  ..ü!57_../..íÊ.Þ
000001d0   84 79 85 ed bc 79 f4 73 - 6b ba b3 35 90 46 02 86  .y.í¼yôskº³5.F..
000001e0   63 8e c1 3c 5e 7a 87 47 - 6a 3b 42 87 36 d9 06 a9  c.Á<^z.Gj;B.6Ù.©
000001f0   0d 68 21 98 39 2c f7 ee - ee 90 68 89 f6 8d 46 60  .h!.9,÷îî.h.ö.F`
00000200   36 1f f2 ba ce 5f 92 af - 73 db 6d 86 28 05 4a 4c  6.òºÎ_.¯sÛm.(.JL
00000210   2e e3 b6 02 0c b6 92 1f - 77 22 b0 9d 91 4a 3b 78  .ã¶..¶..w"°..J;x
00000220   64 7a 78 ae 59 7b 45 33 - a2 85 47 27 39 8e 44 03  dzx®Y{E3¢.G'9.D.
00000230   12 1f 1f e5 9e 6c 04 8c - c8 7c 5d d2 c3 c0 7c 49  ...å.l..È|]ÒÃÀ|I
00000240   56 6c f9 9e 78 e1 d3 ab - 0c a9 58 41 9a 8f 32 e3  Vlù.xáÓ«.©XA..2ã
00000250   99 c6 ed 90 14 e5 3e d1 - 42 44 55 ed 5f c2 68 81  .Æí..å>ÑBDUí_Âh.
00000260   20 18 51 f6 47 58 1e 0c - a8 cd 85 09 c6 8e 5f d0   .QöGX..¨Í.	Æ._Ð
00000270   f7 9e 7e d6 38 fc 0f 99 - 9a 81 1f d1 1e 07 37 23  ÷.~Ö8ü.....Ñ..7#
00000280   cf b0 14 ab 23 ee 14 8a - 01 7b dc 46 19 13 d8 26  Ï°.«#î...{ÜF..Ø&
00000290   77 d1 c4 d7 9a 24 8f a2 - 87 64 fa 26 d0 63 cb 92  wÑÄ×.$.¢.dú&ÐcË.
000002a0   a3 04 bc 1a 1e 54 85 92 - 4d 74 3e 36 7f 20 72 e5  £.¼..T..Mt>6. rå
000002b0   e4 1d 74 35 74 d1 e9 80 - 7c b6 99 32 11 8a 9d 4f  ä.t5tÑé.|¶.2...O
000002c0   73 da 78 f5 7b 58 4a 81 - b6 dc 32 6c 49 0b 3b cb  sÚxõ{XJ.¶Ü2lI.;Ë
000002d0   5d bc 30 0c e0 1a 89 ee - 12 8f 55 e4 96 a1 10 cc  ]¼0.à..î..Uä.¡.Ì
000002e0   cb 13 a4 c9 ff 3a e8 d7 - a6 9d 55 11 51 df bc 5e  Ë.¤Éÿ:è×¦.U.Qß¼^
000002f0   6d 99 7c 06 0f d2 62 e6 - b0 f1 ce 79 96 a4 69 e3  m.|..Òbæ°ñÎy.¤iã
00000300   35 12 f2 42 76 18 8f 4b - 18 77 63 ce 68 87 e2 06  5.òBv..K.wcÎh.â.
00000310   57 68 fb 49 dd 22 be b2 - 5d 0c 2f 38 bc b0 fa e6  WhûIÝ"¾²]./8¼°úæ
00000320   e4 1d 71 aa 05 f4 75 44 - 9a 53 2f 77 db 08 e6 f6  ä.qª.ôuD.S/wÛ.æö
00000330   ee eb b0 ed ce ce a5 7b - 54 7a 64 a7 81 7c 34 4f  îë°íÎÎ¥{Tzd§.|4O
00000340   fb 96 a3 88 3e 93 2e 41 - c2 a5 e7 26 8d 90 6a d9  û.£.>..AÂ¥ç&..jÙ
00000350   8c 53 da 8a ad 0d d2 59 - 34 6d 0a e8 5a 73 4d a2  .SÚ..ÒY4m.èZsM¢
00000360   53 0c 93 cf 31 80 25 5d - f7 ad b6 24 ad e3 bf e5  S..Ï1.%]÷¶$ã¿å
00000370   c3 e9 94 a5 02 fd c8 3d - a7 ac 5e 2e 32 64 84 1c  Ãé.¥.ýÈ=§¬^.2d..
00000380   23 d4 1a 46 91 4f f7 8e - ad ec 4f e8 81 6c be 37  #Ô.F.O÷.ìOè.l¾7
00000390   85 9f a3 4a 53 1b f4 8f - 3f 6d 5d 88 93 1d a4 b2  ..£JS.ô.?m]...¤²
000003a0   21 f3 94 da 52 d7 6c 09 - 49 dd 67 91 7c 06 ee 76  !ó.ÚR×l	IÝg.|.îv
000003b0   fc 17 dd 06 d5 d8 1f 67 - dc 82 4e ba 28 79 73 b7  ü.Ý.ÕØ.gÜ.Nº(ys·
000003c0   83 09 00 39 2f a1 9a 68 - d3 6b 90 a2 b6 ae 3d 37  .	.9/¡.hÓk.¢¶®=7
000003d0   06 0e fb 65 f7 63 52 fd - ab e7 f6 3f 84 e5 40 e3  ..ûe÷cRý«çö?.å@ã
000003e0   52 95 8a 3f 3e 35 cd 4d - 07 d5 df 79 5b 93 74 00  R..?>5ÍM.Õßy[.t.
000003f0   61 a0 de 42 2f 54 44 0b - f7 a6 8c 55 43 c3 50 3c  a ÞB/TD.÷¦.UCÃP<
00000400   4c de 20 00 20 fd 08 f6 - e1 53 e7 92 ec 42 b0 16  LÞ . ý.öáSç.ìB°.
00000410   ca fe f7 26 c4 2d 12 1a - a2 56 02 2b a6 e1 5a 72  Êþ÷&Ä-..¢V.+¦áZr
00000420   bb 4a 07 82 1a bc b6 6f - bd 0a cf b2 4c d8 a1 24  »J...¼¶o½.Ï²LØ¡$
00000430   20 6b 03 d8 66 ea b7 08 - 83 23 7e 48 ae e7 ac 64   k.Øfê·..#~H®ç¬d
00000440   79 3c bb f6 72 a6 7c bc - fb 2b c3 4e 25 a4 c1 51  y<»ör¦|¼û+ÃN%¤ÁQ
00000450   b2 56 32 3b cf 4a fb dd - f7 e9 83 16 3e b5 00 b8  ²V2;ÏJûÝ÷é..>µ.¸
00000460   7a 51 f3 55 b1 15 f1 8a - e8 38 18 4c 19 5c 80 52  zQóU±.ñ.è8.L.\.R
00000470   e8 e1 b5 66 6c bc f0 a3 - 08 9f 8d b9 b8 7d 2b 98  èáµfl¼ð£...¹¸}+.
00000480   09 20 48 da ac f3 8e 62 - 32 b9 f2 63 1f b2 f4 dc  	 HÚ¬ó.b2¹òc.²ôÜ
00000490   2e 1b 9f 4a 70 84 4a a6 - 85 17 db 3d c4 48 f7 e1  ...Jp.J¦..Û=ÄH÷á
000004a0   92 69 b7 eb aa d6 99 7d - e7 fc 76 85 f6 17 92 a8  .i·ëªÖ.}çüv.ö..¨
000004b0   7f 95 71 5e be 8b 32 ce - 83 c3 80 6b 9d 2a cb 15  ..q^¾.2Î.Ã.k.*Ë.
000004c0   fa ed                                              úí

Value 1
  Name:            pkc
  Type:            REG_BINARY
  Data:            
00000000   30 82 03 29 30 82 02 11 - a0 03 02 01 02 02 03 04  0..)0... .......
00000010   1e d2 30 0d 06 09 2a 86 - 48 86 f7 0d 01 01 0b 05  .Ò0..	*.H.÷.....
00000020   00 30 11 31 0f 30 0d 06 - 03 55 04 03 0c 06 45 4d  .0.1.0...U....EM
00000030   32 5f 43 41 30 1e 17 0d - 32 30 30 35 30 36 31 31  2_CA0...20050611
00000040   32 39 33 37 5a 17 0d 34 - 30 30 35 30 32 31 31 32  2937Z..400502112
00000050   39 33 37 5a 30 1c 31 1a - 30 18 06 03 55 04 03 0c  937Z0.1.0...U...
00000060   11 52 6f 75 74 65 72 24 - 65 73 6f 70 76 6d 31 30  .Router$esopvm10
00000070   34 31 30 82 01 22 30 0d - 06 09 2a 86 48 86 f7 0d  410.."0..	*.H.÷.
00000080   01 01 01 05 00 03 82 01 - 0f 00 30 82 01 0a 02 82  ..........0.....
00000090   01 01 00 be 68 d4 cb 19 - 77 17 f8 6a 85 b9 7e df  ...¾hÔË.w.øj.¹~ß
000000a0   4d 9d e3 2a 21 21 10 1a - 8f fb e2 59 c8 4c 89 a4  M.ã*!!...ûâYÈL.¤
000000b0   ba c3 2b 9d 5e f0 4b 95 - ce 7f 02 a7 e0 96 4e 89  ºÃ+.^ðK.Î..§à.N.
000000c0   56 97 71 8b e5 e9 78 60 - 3c 76 e3 9d 5f a5 86 18  V.q.åéx`<vã._¥..
000000d0   02 c2 52 b1 8e 3a a1 50 - cb 2b ca 52 e4 56 bd b6  .ÂR±.:¡PË+ÊRäV½¶
000000e0   69 e5 c0 ea e1 ac d9 91 - a1 10 82 66 4f 7d ed d5  iåÀêá¬Ù.¡..fO}íÕ
000000f0   bb 13 e8 96 63 11 75 03 - ef d3 07 1d 85 b4 8c 13  ».è.c.u.ïÓ...´..
00000100   2a 1f e2 90 d6 fe 1a 83 - eb 8c c0 f6 ca a7 2a d6  *.â.Öþ..ë.ÀöÊ§*Ö
00000110   82 c9 9f 7f 10 d8 fa a7 - d3 a5 db 49 5a 82 06 6f  .É...Øú§Ó¥ÛIZ..o
00000120   66 67 1f 05 9f 46 9f 38 - b2 94 f8 ad c1 3e cb 0c  fg...F.8².øÁ>Ë.
00000130   a3 bc 44 b4 72 43 37 46 - 62 31 30 27 cb f5 f2 7c  £¼D´rC7Fb10'Ëõò|
00000140   f1 a5 d4 1c 7e 6b a4 f7 - 57 58 e4 97 0f 82 1e 29  ñ¥Ô.~k¤÷WXä....)
00000150   31 d7 6c 0d c7 89 c6 50 - 82 c0 9c 3f 01 61 f3 56  1×l.Ç.ÆP.À.?.aóV
00000160   e5 71 2a 4b c0 a8 4a 50 - c8 2e 82 8a a8 ec 2c 0b  åq*KÀ¨JPÈ...¨ì,.
00000170   09 21 12 7f fe e7 b5 fb - 78 3f e1 1a 14 73 6f d0  	!..þçµûx?á..soÐ
00000180   fc 09 f8 8c 76 0e fa 2f - 78 80 83 e2 a5 fb 67 4a  ü	ø.v.ú/x..â¥ûgJ
00000190   05 02 4b 02 03 01 00 01 - a3 7f 30 7d 30 1d 06 03  ..K.....£.0}0...
000001a0   55 1d 0e 04 16 04 14 7a - 32 f2 72 59 ce 8a 78 ad  U......z2òrYÎ.x
000001b0   46 ba ed e5 9e ad d7 ac - 83 b2 91 30 39 06 03 55  Fºíå.×¬.².09..U
000001c0   1d 23 04 32 30 30 80 14 - bd bd 54 13 cd ab d7 a8  .#.200..½½T.Í«×¨
000001d0   d4 da a4 7c 47 24 62 94 - 37 a3 a9 70 a1 15 a4 13  ÔÚ¤|G$b.7£©p¡.¤.
000001e0   30 11 31 0f 30 0d 06 03 - 55 04 03 0c 06 45 4d 32  0.1.0...U....EM2
000001f0   5f 43 41 82 01 01 30 09 - 06 03 55 1d 13 04 02 30  _CA...0	..U....0
00000200   00 30 0e 06 03 55 1d 0f - 01 01 ff 04 04 03 02 05  .0...U....ÿ.....
00000210   a0 30 06 06 02 77 01 04 - 00 30 0d 06 09 2a 86 48   0...w...0..	*.H
00000220   86 f7 0d 01 01 0b 05 00 - 03 82 01 01 00 3f 1a 63  .÷...........?.c
00000230   be 28 3f 77 c3 b9 9d fd - 68 92 3e 43 58 12 5e 0b  ¾(?wÃ¹.ýh.>CX.^.
00000240   aa f4 32 62 90 92 94 e3 - d8 f4 84 c6 a1 88 a6 2e  ªô2b...ãØô.Æ¡.¦.
00000250   3e f9 79 48 9b dd fd f7 - 49 a0 63 69 69 15 65 d8  >ùyH.Ýý÷I cii.eØ
00000260   72 54 dd 34 4b 7b be f4 - df bc 06 43 80 9e 17 34  rTÝ4K{¾ôß¼.C...4
00000270   eb 89 15 ab 8a ae ab a9 - 00 37 59 b4 9a 27 0f 2b  ë..«.®«©.7Y´.'.+
00000280   15 d4 67 36 c6 95 7a a4 - 79 e3 60 fb c8 5b 9e b0  .Ôg6Æ.z¤yã`ûÈ[.°
00000290   0f dc 8b 92 90 36 e4 e5 - eb 08 79 7f 5f 7d e6 22  .Ü...6äåë.y._}æ"
000002a0   83 0c 29 82 d9 91 14 78 - fd 29 0f 09 63 98 3c e4  ..).Ù..xý).	c.<ä
000002b0   8b 52 02 10 6c 01 f0 bb - 9a 75 ca 70 06 db 45 e0  .R..l.ð».uÊp.ÛEà
000002c0   42 4b dc 65 0c 12 bd 01 - e6 01 07 d0 13 1b a9 04  BKÜe..½.æ..Ð..©.
000002d0   10 e3 6c 10 84 48 1d d1 - fb f6 42 e9 62 d8 c4 0c  .ãl..H.ÑûöBébØÄ.
000002e0   c2 86 8c ae 71 88 f2 66 - 9c 88 75 d1 b9 9e 64 65  Â..®q.òf..uÑ¹.de
000002f0   81 d1 1c 3f 16 c4 fd 80 - 54 2a 4a 4d 0c d5 95 be  .Ñ.?.Äý.T*JM.Õ.¾
00000300   7d d1 22 38 4c 55 fe 8a - ab 0b 23 53 26 91 ad b8  }Ñ"8LUþ.«.#S&.¸
00000310   67 44 fa d9 62 7a 11 fe - 3b c8 8a d4 6f 9f 13 aa  gDúÙbz.þ;È.Ôo..ª
00000320   c2 52 a8 78 47 3f 9f 7f - c3 b9 d1 52 51           ÂR¨xG?..Ã¹ÑRQ

This is the SEC router registry keys, I have added the IP after the iiop:// as part of my tests

0 Carlos Fernandez1 over 4 years ago in reply to jak

Fullscreen Client_router_key.txt Download

Key Name:          HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Sophos\Messaging System\Router
Class Name:        <NO CLASS>
Last Write Time:   20.05.2020 - 06:00
Value 0
  Name:            ServiceDescription
  Type:            REG_SZ
  Data:            Message router for Sophos applications

Value 1
  Name:            ServiceHomeDir
  Type:            REG_SZ
  Data:            C:\Program Files (x86)\Sophos\Remote Management System\

Value 2
  Name:            ParentAddress
  Type:            REG_SZ
  Data:            10.137.249.17,esopvm1041.cas.res,esopvm1041

Value 3
  Name:            ParentPort
  Type:            REG_DWORD
  Data:            0x2000

Value 4
  Name:            ConnectionCache
  Type:            REG_DWORD
  Data:            0xa

Value 5
  Name:            NumSenderThreads
  Type:            REG_DWORD
  Data:            0x3

Value 6
  Name:            NumORBThreads
  Type:            REG_DWORD
  Data:            0x4

Value 7
  Name:            IORSenderPort
  Type:            REG_DWORD
  Data:            0x2000

Value 8
  Name:            ServiceArgs
  Type:            REG_SZ
  Data:            -ORBListenEndpoints iiop://:8193/ssl_port=8194

Value 9
  Name:            NotifyRouterUpdate
  Type:            REG_SZ
  Data:            EM

Value 10
  Name:            HostIPToParent
  Type:            REG_DWORD
  Data:            0

Value 11
  Name:            NotifyClientUpdate
  Type:            REG_SZ
  Data:            Router$AZQLSADFS01:153456.Agent

Value 12
  Name:            ConnectRetriesPause
  Type:            REG_DWORD
  Data:            0x7d0

Value 13
  Name:            TotalConnectRetryTimeSecs
  Type:            REG_DWORD
  Data:            0x12c

Value 14
  Name:            GetterInterval
  Type:            REG_DWORD
  Data:            0x384

Value 15
  Name:            GetterShortInterval
  Type:            REG_DWORD
  Data:            0x78

Value 16
  Name:            NumNotificationThresholdThreads
  Type:            REG_DWORD
  Data:            0


Key Name:          HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Sophos\Messaging System\Router\Private
Class Name:        <NO CLASS>
Last Write Time:   10.07.2019 - 13:48
Value 0
  Name:            pkp
  Type:            REG_BINARY
  Data:            
00000000   00 08 36 1b 0f 90 c5 28 - c7 d6 12 ff a0 5f a1 73  ..6...Å(ÇÖ.ÿ _¡s
00000010   0d 04 ce dc c3 cf 4e 6f - 29 b5 27 a7 a9 b2 2f 8a  ..ÎÜÃÏNo)µ'§©²/.
00000020   07 fc 7c 9d 8c 2b f1 23 - f3 6e 5c 53 82 70 ae 75  .ü|..+ñ#ón\S.p®u
00000030   dd 1f a8 52 4a 2d e5 9e - f5 2b a6 78 3b 76 20 c8  Ý.¨RJ-å.õ+¦x;v È
00000040   f4 c8 3a 76 66 db 38 db - e7 42 bc ea d2 cf df 53  ôÈ:vfÛ8ÛçB¼êÒÏßS
00000050   f4 c8 db d4 0c 84 21 58 - 8e 19 f1 b4 b4 c1 03 d9  ôÈÛÔ..!X..ñ´´Á.Ù
00000060   ca b8 c7 c0 41 21 f9 72 - 96 04 4f cc 39 d1 c5 eb  Ê¸ÇÀA!ùr..OÌ9ÑÅë
00000070   57 63 15 d9 42 fb 1a 4e - bd 0e 8d e1 d0 2c bb bf  Wc.ÙBû.N½..áÐ,»¿
00000080   4b 2e 93 8f 42 45 f5 53 - dd f1 4d 24 60 52 46 33  K...BEõSÝñM$`RF3
00000090   c9 97 42 d8 cd c6 1b a7 - a5 97 9b df 31 96 6b eb  É.BØÍÆ.§¥..ß1.kë
000000a0   c7 eb 02 e9 cf c0 8f 03 - 65 f4 08 7a 6f a4 b2 d0  Çë.éÏÀ..eô.zo¤²Ð
000000b0   34 b4 2e ca 39 41 5a 90 - f3 e8 f4 47 b1 47 43 3d  4´.Ê9AZ.óèôG±GC=
000000c0   8e 47 f7 06 52 4a 01 db - 0a 3a f3 24 e1 43 91 66  .G÷.RJ.Û.:ó$áC.f
000000d0   b1 06 be ce e0 c9 43 a4 - 55 c9 e6 8a 8e 5c c0 f2  ±.¾ÎàÉC¤UÉæ..\Àò
000000e0   44 a7 af f2 74 7e 5d fb - 5c d1 59 9a 70 c8 7d 63  D§¯òt~]û\ÑY.pÈ}c
000000f0   f4 99 0b 1e 36 a8 b0 c1 - 32 9e b8 06 0c c6 3d 71  ô...6¨°Á2.¸..Æ=q
00000100   17 d2 74 f1 04 42 48 17 - 08 c7 7c 07 08 ee e7 9b  .Òtñ.BH..Ç|..îç.
00000110   79 47 e0 c1 6b e6 3a e9 - fd 76 7b 03 d3 f7 82 a0  yGàÁkæ:éýv{.Ó÷. 
00000120   1a 16 53 b2 eb 97 fe c0 - bb 35 16 2a e7 47 e5 bf  ..S²ë.þÀ»5.*çGå¿
00000130   76 16 c2 15 ac 81 af 70 - ae 5a 19 09 96 3a 6a 46  v.Â.¬.¯p®Z.	.:jF
00000140   de c5 a9 ef cf 6c 64 48 - 76 56 db 5d b7 d8 d0 44  ÞÅ©ïÏldHvVÛ]·ØÐD
00000150   d6 69 ff 63 28 ec 78 15 - 96 91 bf 34 5b 17 44 e2  Öiÿc(ìx...¿4[.Dâ
00000160   fe d0 dc 1b 9c 07 ed a3 - b9 49 e0 e1 44 ac 07 ee  þÐÜ...í£¹IàáD¬.î
00000170   e4 a8 4a 44 3a 6e 2e 71 - 1d 39 45 d7 5a fb 0e d1  ä¨JD:n.q.9E×Zû.Ñ
00000180   94 90 f8 5b 41 e9 1e 25 - 38 93 81 0e c2 48 ac 37  ..ø[Aé.%8...ÂH¬7
00000190   cd 9c da 71 ad 32 78 bc - 11 45 99 da 4b 8b 30 c0  Í.Úq2x¼.E.ÚK.0À
000001a0   f1 91 d1 c9 a8 f7 da 9e - 4e 55 0a f0 f9 15 9c 24  ñ.ÑÉ¨÷Ú.NU.ðù..$
000001b0   75 80 ce c3 19 eb 34 9c - bb 4c 35 27 8d 9d ad fe  u.ÎÃ.ë4.»L5'..þ
000001c0   90 a0 75 f3 38 34 23 12 - d3 8f 24 3c fd 70 89 df  . uó84#.Ó.$<ýp.ß
000001d0   50 19 56 ee 77 60 47 58 - 7d a2 4a a6 5e 81 f6 30  P.Vîw`GX}¢J¦^.ö0
000001e0   72 cf 2f 50 3e ad 76 7f - f4 8d 20 1b e4 ba f9 24  rÏ/P>v.ô. .äºù$
000001f0   d2 8d 12 c5 dd 09 35 44 - d0 38 ca ba c2 cf fa 07  Ò..ÅÝ	5DÐ8ÊºÂÏú.
00000200   20 b4 11 3b 2a 4b 57 06 - 7c 3f 20 90 47 b9 61 62   ´.;*KW.|? .G¹ab
00000210   ee 97 b7 e0 1f c7 f3 fb - db 65 9e e9 17 9d 20 e2  î.·à.ÇóûÛe.é.. â
00000220   7c 90 0a 19 19 eb d0 c4 - a7 c6 73 06 cb fe c5 db  |....ëÐÄ§Æs.ËþÅÛ
00000230   07 17 ba eb ad a2 a3 85 - 8d 3f d7 80 e2 77 83 57  ..ºë¢£..?×.âw.W
00000240   55 db 4e 7e f1 da dc 21 - 34 5d 64 4e 49 ad 57 94  UÛN~ñÚÜ!4]dNIW.
00000250   2d 47 b2 43 93 88 52 a4 - 79 35 42 00 e4 22 92 fb  -G²C..R¤y5B.ä".û
00000260   80 0b ff d5 77 36 75 1e - ca 88 92 88 56 52 be 99  ..ÿÕw6u.Ê...VR¾.
00000270   3f ea 03 7b d5 30 d1 45 - 8d db 68 ea 89 65 8d 8f  ?ê.{Õ0ÑE.Ûhê.e..
00000280   c6 3e 9a 39 fb 4a 47 f2 - 2d 3c 11 2e 20 71 23 60  Æ>.9ûJGò-<.. q#`
00000290   74 f9 e1 fb 7d 62 32 3f - 5b 60 ff 4e ac 1b 36 55  tùáû}b2?[`ÿN¬.6U
000002a0   4c d2 a5 15 0f 01 98 4d - 50 61 41 d5 e9 a0 2b 49  LÒ¥....MPaAÕé +I
000002b0   a4 8c 1b 46 95 97 82 19 - 3b 64 66 db 04 7e 72 11  ¤..F....;dfÛ.~r.
000002c0   d8 b3 1e 9c 75 71 5f c9 - 1c e2 98 64 94 bf c7 fc  Ø³..uq_É.â.d.¿Çü
000002d0   9a c1 d3 0f 1b 3d 6a 6d - 66 c0 6a d5 f6 78 30 51  .ÁÓ..=jmfÀjÕöx0Q
000002e0   99 88 c6 fd ac 1b 4a d8 - 1e c7 a3 18 61 24 d3 72  ..Æý¬.JØ.Ç£.a$Ór
000002f0   65 14 8c b0 a6 6d ef e0 - 03 78 01 71 50 99 3a 78  e..°¦mïà.x.qP.:x
00000300   8a d9 37 24 4c 17 b6 63 - 55 ac d8 8b 61 5c 00 c4  .Ù7$L.¶cU¬Ø.a\.Ä
00000310   22 aa 79 54 f1 15 ad 58 - a5 c1 41 20 77 9f 3a 18  "ªyTñ.X¥ÁA w.:.
00000320   95 b4 7e 6b 45 09 3e 0f - 3f 54 93 f9 f9 d2 57 55  .´~kE	>.?T.ùùÒWU
00000330   fc 8b da 1c 06 20 1b 8b - 02 4c c2 a3 27 ab ee df  ü.Ú.. ...LÂ£'«îß
00000340   e5 ed db f1 82 44 88 cc - ff da 30 99 4d d2 08 82  åíÛñ.D.ÌÿÚ0.MÒ..
00000350   24 a8 61 3f 7e 8a cb f4 - 76 d7 25 79 36 9b 61 8b  $¨a?~.Ëôv×%y6.a.
00000360   9d c3 97 d7 d0 d6 f7 fd - c8 e8 07 59 d8 2d b5 71  .Ã.×ÐÖ÷ýÈè.YØ-µq
00000370   78 dc e2 60 71 3b 3b 16 - 58 ba cf 80 e0 5e f8 72  xÜâ`q;;.XºÏ.à^ør
00000380   39 85 2f d3 0f 8a 8c 8a - 93 73 bc 4a ff 59 f0 ee  9./Ó.....s¼JÿYðî
00000390   68 86 51 53 12 0d 38 b1 - 81 0d fd 04 a2 f4 45 11  h.QS..8±..ý.¢ôE.
000003a0   48 df de ee 07 d8 55 8d - 9c e2 a1 1a b4 43 b6 81  HßÞî.ØU..â¡.´C¶.
000003b0   9a 77 5b d6 d1 32 1f 37 - 88 10 eb c7 33 f5 57 1a  .w[ÖÑ2.7..ëÇ3õW.
000003c0   fe 4b db b0 58 d7 4a 03 - ab 5c c8 b3 ee b5 10 19  þKÛ°X×J.«\È³îµ..
000003d0   2b 6e e5 4a d9 de 01 30 - a8 6b 60 39 90 b3 b2 f2  +nåJÙÞ.0¨k`9.³²ò
000003e0   4d 06 09 da c2 1c c6 bb - d9 49 39 62 f7 43 10 e9  M.	ÚÂ.Æ»ÙI9b÷C.é
000003f0   48 79 2e 18 38 22 e0 85 - 44 27 7c 6f 0c 05 bc 38  Hy..8"à.D'|o..¼8
00000400   6e 18 88 67 fa 02 a3 86 - 19 5e 29 05 5d f3 c7 3a  n..gú.£..^).]óÇ:
00000410   4d da 50 35 cf b6 19 49 - 8c 76 18 e1 44 96 a8 d1  MÚP5Ï¶.I.v.áD.¨Ñ
00000420   d3 6f 35 66 c9 0a 50 2b - cc d7 da 93 4f 68 01 19  Óo5fÉ.P+Ì×Ú.Oh..
00000430   30 32 d7 d4 ba e2 2f 56 - 3e d0 d2 ba de 46 ba 0f  02×Ôºâ/V>ÐÒºÞFº.
00000440   21 6f e1 c6 95 85 8c d4 - c6 66 43 b9 60 81 d8 ac  !oáÆ...ÔÆfC¹`.Ø¬
00000450   2f d4 94 90 47 64 d7 89 - f9 9b 19 54 c7 6c ac 40  /Ô..Gd×.ù..TÇl¬@
00000460   6f bf dc 18 ca a2 d6 4d - 7f cd 78 63 64 62 78 ef  o¿Ü.Ê¢ÖM.Íxcdbxï
00000470   65 69 02 67 31 d4 b3 92 - 15 8b 53 d9 20 25 5b de  ei.g1Ô³...SÙ %[Þ
00000480   28 3f db b3 0b a7 5d 99 - 57 e3 4e 55 8f d2 8f eb  (?Û³.§].WãNU.Ò.ë
00000490   f5 fe 45 91 97 52 3a 8c - ba 76 1f 80 db b8 48 b6  õþE..R:.ºv..Û¸H¶
000004a0   f8 87 ae a9 fd ce 32 ca - 09 92 bf 50 0e f1 f7 b6  ø.®©ýÎ2Ê	.¿P.ñ÷¶
000004b0   14 67 c2 be ac 34 52 dc - 47 4b 23 66 e5 9b b3 10  .gÂ¾¬4RÜGK#få.³.
000004c0   6d 38                                              m8

Value 1
  Name:            pkc
  Type:            REG_BINARY
  Data:            
00000000   30 82 03 71 30 82 02 59 - a0 03 02 01 02 02 03 02  0..q0..Y .......
00000010   9b 91 30 0d 06 09 2a 86 - 48 86 f7 0d 01 01 0b 05  ..0..	*.H.÷.....
00000020   00 30 11 31 0f 30 0d 06 - 03 55 04 03 0c 06 45 4d  .0.1.0...U....EM
00000030   32 5f 43 41 30 1e 17 0d - 31 39 30 36 30 36 31 30  2_CA0...19060610
00000040   35 39 31 30 5a 17 0d 33 - 39 30 36 30 32 31 30 35  5910Z..390602105
00000050   39 31 30 5a 30 24 31 22 - 30 20 06 03 55 04 03 0c  910Z0$1"0 ..U...
00000060   19 52 6f 75 74 65 72 24 - 41 5a 51 4c 53 41 44 46  .Router$AZQLSADF
00000070   53 30 31 3a 31 35 33 34 - 35 36 30 82 01 22 30 0d  S01:1534560.."0.
00000080   06 09 2a 86 48 86 f7 0d - 01 01 01 05 00 03 82 01  .	*.H.÷.........
00000090   0f 00 30 82 01 0a 02 82 - 01 01 00 96 fd 9c 8c 0e  ..0.........ý...
000000a0   46 4a be 1e 3b 90 8d 61 - fc 5e a1 99 3a b9 17 11  FJ¾.;..aü^¡.:¹..
000000b0   2c 79 42 e8 46 63 43 b9 - 58 3e f8 30 54 11 5e 3c  ,yBèFcC¹X>ø0T.^<
000000c0   44 9b 47 75 ab 6f 6f a8 - 1b ef f4 be 5d c2 6b 62  D.Gu«oo¨.ïô¾]Âkb
000000d0   f5 cf 16 a5 58 19 52 41 - 18 61 5e ef c2 af ed 28  õÏ.¥X.RA.a^ïÂ¯í(
000000e0   30 5c 4c f9 8f 9b d4 00 - 09 33 23 82 fe 97 a2 9e  0\Lù..Ô.	3#.þ.¢.
000000f0   81 50 54 24 eb 16 d0 30 - f3 e0 bc 6b a6 74 40 be  .PT$ë.Ð0óà¼k¦t@¾
00000100   f9 ac 57 c8 24 6a c8 b9 - 39 2a 94 d4 82 f4 d5 b4  ù¬WÈ$jÈ¹9*.Ô.ôÕ´
00000110   4c 1e e6 41 37 3d 4b 87 - ec 96 cb 16 06 2b 06 60  L.æA7=K.ì.Ë..+.`
00000120   a1 1c f1 6a bd 81 49 40 - 23 91 e9 97 bf 5e 33 a3  ¡.ñj½.I@#.é.¿^3£
00000130   19 05 0a 52 be 06 f8 3c - dc cc 07 0a a0 50 14 78  ...R¾.ø<ÜÌ.. P.x
00000140   a4 bb b8 0d 0b bd 11 b7 - c6 13 73 90 14 54 7b 70  ¤»¸..½.·Æ.s..T{p
00000150   39 3a a2 da 09 e4 a3 1d - f6 4f b9 1f fa d1 07 f1  9:¢Ú	ä£.öO¹.úÑ.ñ
00000160   38 77 04 93 65 ab f6 d2 - d4 a3 d6 60 b7 b6 4e b3  8w..e«öÒÔ£Ö`·¶N³
00000170   6e 21 ef b5 77 f3 43 34 - a2 45 58 ba 79 2a 87 cf  n!ïµwóC4¢EXºy*.Ï
00000180   bf 01 f2 22 0f 6d 3a 8c - 37 87 97 75 de 3c 70 e8  ¿.ò".m:.7..uÞ<pè
00000190   ac 1f 51 2a 46 35 69 a0 - e2 dc 8f 02 03 01 00 01  ¬.Q*F5i âÜ......
000001a0   a3 81 be 30 81 bb 30 1d - 06 03 55 1d 0e 04 16 04  £.¾0.»0...U.....
000001b0   14 35 36 ba 15 40 25 0a - 6b 7e 1b c6 81 a7 de ff  .56º.@%.k~.Æ.§Þÿ
000001c0   5f 86 ff d4 b3 30 39 06 - 03 55 1d 23 04 32 30 30  _.ÿÔ³09..U.#.200
000001d0   80 14 bd bd 54 13 cd ab - d7 a8 d4 da a4 7c 47 24  ..½½T.Í«×¨ÔÚ¤|G$
000001e0   62 94 37 a3 a9 70 a1 15 - a4 13 30 11 31 0f 30 0d  b.7£©p¡.¤.0.1.0.
000001f0   06 03 55 04 03 0c 06 45 - 4d 32 5f 43 41 82 01 01  ..U....EM2_CA...
00000200   30 09 06 03 55 1d 13 04 - 02 30 00 30 0e 06 03 55  0	..U....0.0...U
00000210   1d 0f 01 01 ff 04 04 03 - 02 05 a0 30 3c 06 09 60  ....ÿ..... 0<.	`
00000220   86 48 01 86 f8 42 01 0d - 04 2f 16 2d 49 73 73 75  .H..øB.../.-Issu
00000230   65 64 20 62 79 20 74 68 - 65 20 53 6f 70 68 6f 73  ed by the Sophos
00000240   20 45 4d 20 43 65 72 74 - 69 66 69 63 61 74 69 6f   EM Certificatio
00000250   6e 20 4d 61 6e 61 67 65 - 72 30 06 06 02 77 01 04  n Manager0...w..
00000260   00 30 0d 06 09 2a 86 48 - 86 f7 0d 01 01 0b 05 00  .0..	*.H.÷......
00000270   03 82 01 01 00 b1 c5 eb - 4c 1d 04 3f ff 4f 49 90  .....±ÅëL..?ÿOI.
00000280   d7 ce d4 3c 57 02 b9 b2 - 3c c0 2a ce 23 07 24 cf  ×ÎÔ<W.¹²<À*Î#.$Ï
00000290   84 5c 10 42 bd 17 96 ac - 9c 7d c7 ac fa ab 88 6d  .\.B½..¬.}Ç¬ú«.m
000002a0   fa 1f 25 c8 e8 90 58 ab - 2c d5 a4 2d 8c 1c aa 86  ú.%Èè.X«,Õ¤-..ª.
000002b0   04 0e b1 c6 3d 91 2c 1e - 53 9e fa 7f ab 66 bf ce  ..±Æ=.,.S.ú.«f¿Î
000002c0   a7 ff ce 50 16 12 bd 90 - 41 c7 3e 8e 5f 0e 55 5c  §ÿÎP..½.AÇ>._.U\
000002d0   0a f6 86 2e 1e 59 9e b2 - f3 09 e5 4c e9 06 fb e8  .ö...Y.²ó	åLé.ûè
000002e0   70 a9 f1 f5 58 99 54 eb - 5e 17 ca 50 c2 ba c7 0a  p©ñõX.Të^.ÊPÂºÇ.
000002f0   21 1b 4e e9 46 55 c7 28 - 29 57 6f 1b 90 50 33 1f  !.NéFUÇ()Wo..P3.
00000300   47 52 90 02 54 c0 e5 32 - 3a 58 3e 46 d6 c5 f4 a4  GR..TÀå2:X>FÖÅô¤
00000310   58 cd af 4c c5 8f 4f bd - 04 48 54 11 d3 e1 eb 1d  XÍ¯LÅ.O½.HT.Óáë.
00000320   3d 26 cd 8e 56 53 45 f9 - 00 56 78 60 6e b0 18 07  =&Í.VSEù.Vx`n°..
00000330   78 84 51 3b 15 1a 92 9d - 3c 49 eb e5 44 65 9b 4a  x.Q;....<IëåDe.J
00000340   c8 f4 f1 59 db 1b 29 9a - 99 a9 72 8a 35 a6 13 3d  ÈôñYÛ.)..©r.5¦.=
00000350   1d e3 c0 2c 9c 78 bc 7a - 2e ab 2d 90 2a 09 c2 4a  .ãÀ,.x¼z.«-.*	ÂJ
00000360   a3 60 15 51 10 3c c1 e1 - c8 d2 9a f9 f1 fe 9f 13  £`.Q.<ÁáÈÒ.ùñþ..
00000370   c3 8f 5b f7 58                                     Ã.[÷X

Here is a client router registry key

Regards

Carlos

0 QC over 4 years ago in reply to Carlos Fernandez1

Hello Carlos,

no surprise that the filter shows no endpoints as it looks for connection attempts using TLS v1.0. They'd have to run an outdated version of RMS (lower than 4.x, from mid-2017), or there's have to be some intermediary device that tries to downgrade the protocol, or RMS on the endpoints is configured (I think this is possible) to use TLS v1.0. All this is more than unlikely.

From your initial post I see error 0x1407609C(336027804 decimal), the full message text is HTTP spoken on HTTPS port. If you can't detect a pattern (that could help to narrow down on the problem) I'd suggest you try to identify an endpoint that "reliably" fails to connect and trace the attempted handshake with Wireshark - both on server and endpoint (filtering on port 8194 and endpoint or server IP respectively. As the connection is taken down early and there is no other chatter on this port the trace comprises only a few packets.

Christian
Cancel
Vote Up 0 Vote Down

Cancel