This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Endpoints not updating over HTTP

I have trouble updating Endpoints over HTTP. The following error occurs almost every day

Trace(2015-Sep-15 11:20:11): CIDUpdateLocation::SyncProduct - Updating Product: SAVXP
Trace(2015-Sep-15 11:20:11): CIDUpdate(SyncProduct.Start): Downloading product SAVXP from server www.mydomain.de/.../
Trace(2015-Sep-15 11:20:11): CIDUpdateLocation::Sync - Updating from http CID: www.mydomain.de/.../savxp
Trace(2015-Sep-15 11:20:11): CIDSync(CidSyncMessage): Starting HTTP connection
Trace(2015-Sep-15 11:20:11): CIDSync(CidSyncMessage): ERROR:   the operation failed due to an unknown error: 80040f06
Trace(2015-Sep-15 11:20:11): CIDSyncCallback, SynchronisationTerminated - Code = -2147217658
Trace(2015-Sep-15 11:20:11): CIDSyncCallback, SynchronisationTerminated - MapFile = C:\ProgramData\Sophos\AutoUpdate\cache\savxp.map
Trace(2015-Sep-15 11:20:11): CIDUpdateLocation::SyncProduct: Failed to update product (SAVXP) from "www.mydomain.de/.../", Error is :CIDSYNC_E_RCIDCFGERROR (Remote CidSync configuration file is corrupted.)
Trace(2015-Sep-15 11:20:11): CIDUpdate(CIDDownloadFailed): ERROR:   Download of SAVXP failed from server www.mydomain.de/.../

The only thing that worked so far is to delete the SAVSCFXP directory and forcing the SUM to update to recreate the directory. After that the Endpoints update successfully, but only for some time until the error appears again, which is worst case only a couple of hours.

I can navigate to the update location. If I were to delete the local cache folder the Endpoint downloads all the files but runs into the error again.

Enterprise Console 5.3.1

Endpoint 10.3 - Recommended

Any help how to solve this issue woud be appreciated.



This thread was automatically locked due to age.
  • Hello janb,

    has updating worked before (for a longer period) or is this a new installation and you had these troubles from the start? Do you have endpoints which update over SMB/UNC and if, do they encounter the same error?
    There seems to be an issue with cidsync.upd in the CIDs \savxp subfolder. Normally recreating the CID should take care of a potential glitch - but in  \savxp this file is updated every few hours anyway and SUM should detect a corruption. Are there any errors in the Update managers view in SEC? I'd suggest that you run ConfigCID.exe the next time the errors occurs (you don't have to make any changes to the CID.
    If there is no obvious error on the server side I'd download the file with a browser and compare it to the one on the server. Is the web server (IIS, Apache?) on the management server?

    Christian   

  • Hello Christian,

    yes updating has worked before. I don't have any enpoints which update over SMB/UNC they only install that way and it works fine.
    There are no errors concering SUM in the SEC.
    I've ran ConfigCID.exe but i'll do it again if the error occurs.
    The webserver is an Apache and does't run on the management server.

    Jan
  • Hello Jan,

    does Apache read from the SUM share or SUM deploy to Apache's server? I might be wrong but if there are no errors in SUM it sounds like Apache is not picking up the latest  \savxp\cidsync.upd (although I can't come up with a believable reason for this). When the error occurs browse to the CID (.../SAVSCFXP/), check the attributes of master.upd and \savxp\cidsync.upd.- timestamps should be identical, compare the size to the one on the SUM server.

    Christian

  • Hello Christian,

    thanks for you input. The SUM is deploying to the apache server. That seems to be the problem. Our webmaster proposed using rsync to get the data to the webserver. I still get some errors but only sporadically.

    Jan