This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Endpoint Protection Installer - Installation failed. Could not download software.

Hello one and all,

 

I work in a corporate environment where we've been using Sophos Central and Endpoint with InterceptX for quite a while now. Just recently (probably within the last 2 weeks) I have been unable to install Sophos Endpoint Protection on any Windows 7 desktops or laptops...when running the through the installation - it'll get to the "downloading software" step - then produce the following error:

 

"Installation failed. Could not download software"

 

I have tried installing using the corporate network, corporate wifi and my own personal wifi hotspot (using mobile device) and it fails each time with the above error. Windows firewall is disabled on every device, so I know it's nothing to do with that. It is the "Complete Windows Installer" freshly downloaded from Sophos Central today. SophosCloudInstaller log below:

Started C:\Users\ADMIN-~1\AppData\Local\Temp\sfl-68e97440\Setup.exe
2018-03-14T11:52:47.6013557Z INFO : SophosInstall command line: "C:\\Users\\ADMIN-~1\\AppData\\Local\\Temp\\sfl-68e97440\\Setup.exe"
2018-03-14T11:52:47.6013557Z INFO : Command line: Quiet mode on: 0
2018-03-14T11:52:47.6013557Z INFO : Command line: Automatic Proxy detection disabled: 0
2018-03-14T11:52:47.6013557Z INFO : Command line: No feedback mode on: 0
2018-03-14T11:52:47.6013557Z INFO : Command line: Dump feedback enabled: 0
2018-03-14T11:52:47.6013557Z INFO : Command line: Bypass competitor removal: 0
2018-03-14T11:52:47.6013557Z INFO : Command line: Using CRT catalog file path: --
2018-03-14T11:52:47.6013557Z INFO : Command line: Only register endpoint with Central: 0
2018-03-14T11:52:47.6013557Z INFO : Command line: Using custom server: --
2018-03-14T11:52:47.6013557Z INFO : Command line: Using custom stage 2 filename: --
2018-03-14T11:52:47.6013557Z INFO : Command line: Using cloud user: --
2018-03-14T11:52:47.6013557Z INFO : Command line: Using cloud group: --
2018-03-14T11:52:47.6013557Z INFO : Command line: Overriding computer name: --
2018-03-14T11:52:47.6013557Z INFO : Command line: Overriding computer description: --
2018-03-14T11:52:47.6013557Z INFO : Command line: Overriding domain name: --
2018-03-14T11:52:47.6013557Z INFO : Command line: Language will be set to: --
2018-03-14T11:52:47.6013557Z INFO : Command line: Using message relays: --
2018-03-14T11:52:47.6013557Z INFO : Command line: Proxy address: --
2018-03-14T11:52:47.6013557Z INFO : Command line: Proxy user name: --
2018-03-14T11:52:47.6013557Z INFO : Command line: Using custom customer token: --
2018-03-14T11:52:47.6013557Z INFO : Command line: Using specified products: --
2018-03-14T11:52:47.6013557Z INFO : Command line: Using certificates from the MCS app data folder: 0
2018-03-14T11:52:47.6013557Z INFO : Sending HTTP 'GET' request to: full/central/windows/business/installer/latest.tar.gz
2018-03-14T11:52:47.6169567Z WARNING : WinHttpGetProxyForUrl returned: 12180
2018-03-14T11:52:47.6169567Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2018-03-14T11:52:47.6169567Z INFO : Set security protocol: 00000800
2018-03-14T11:52:47.6169567Z INFO : Opening connection to downloads.sophos.com
2018-03-14T11:52:47.6169567Z INFO : Opened connection to downloads.sophos.com
2018-03-14T11:52:47.6169567Z INFO : Request content size: 0
2018-03-14T11:52:47.7105627Z INFO : Sending request
2018-03-14T11:52:47.7105627Z INFO : Request sent
2018-03-14T11:52:47.9601787Z INFO : Response status code: 200
2018-03-14T11:52:47.9601787Z INFO : Response data size: 1674811
2018-03-14T11:52:47.9601787Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2018-03-14T11:52:47.9601787Z INFO : Extracting files:
2018-03-14T11:52:47.9601787Z INFO : integrity.dat
2018-03-14T11:52:47.9601787Z INFO : manifest.dat
2018-03-14T11:52:47.9601787Z INFO : rootca.crl
2018-03-14T11:52:47.9601787Z INFO : rootca.crt
2018-03-14T11:52:47.9601787Z INFO : scf.dat
2018-03-14T11:52:47.9601787Z INFO : sof.dat
2018-03-14T11:52:47.9601787Z INFO : SophosSetup_Stage2.exe
2018-03-14T11:52:47.9913807Z INFO : sul.dll
2018-03-14T11:52:48.0069817Z INFO : Management Certs/sophosca1.crl
2018-03-14T11:52:48.0069817Z INFO : Management Certs/sophosca1.crt
2018-03-14T11:52:48.0069817Z INFO : Management Certs/sophosca2.crl
2018-03-14T11:52:48.0225827Z INFO : Management Certs/sophosca2.crt
2018-03-14T11:52:48.0225827Z INFO : Management Certs/Sophos_SHA256_MCS_Root_CA3_exp20380504.crl
2018-03-14T11:52:48.0225827Z INFO : Management Certs/Sophos_SHA256_MCS_Root_CA3_exp20380504.crt
2018-03-14T11:52:48.0225827Z INFO : Management Certs/Sophos_SHA256_MCS_Root_CA4_exp20390504.crl
2018-03-14T11:52:48.0225827Z INFO : Management Certs/Sophos_SHA256_MCS_Root_CA4_exp20390504.crt
2018-03-14T11:52:48.0849867Z INFO : Running setup.
Started C:\Program Files (x86)\Sophos\CloudInstaller\SophosSetup_Stage2.exe
2018-03-14T11:52:48.1161887Z INFO : Setup command line: --mgmtserver="dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com" --logfile="C:\\ProgramData\\Sophos\\CloudInstaller\\Logs\\SophosCloudInstaller_20180314_115247.log" --parentpid="2056" --products="all" --customertoken="263389cb-41da-4e04-bd2e-b239d7317472" --pipewritehandle="1160" --mcscustomerid="710cbe79-4858-b440-6b6b-85b85b34e6be"
2018-03-14T11:52:48.1161887Z INFO : User name: admin-sjw
2018-03-14T11:52:48.1161887Z INFO : NameDnsDomain: FCLLP.LAN\\admin-sjw
2018-03-14T11:52:48.1161887Z INFO : dnsDomain: FCLLP.LAN
2018-03-14T11:52:48.3034007Z INFO : lpProfilePath:
2018-03-14T11:52:48.3346027Z INFO : User profile loaded
2018-03-14T11:52:48.3346027Z INFO : Net API buffer freed
2018-03-14T11:52:48.3346027Z INFO : Model::server value changed to: dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com
2018-03-14T11:52:48.3346027Z INFO : Model::messageRelays value changed to be size: 0
2018-03-14T11:52:48.3346027Z INFO : Model::user value changed to:
2018-03-14T11:52:48.3346027Z INFO : Model::group value changed to:
2018-03-14T11:52:48.3346027Z INFO : Model::parentPid value changed to: 2056
2018-03-14T11:52:48.3346027Z INFO : Model::products changed to: all
2018-03-14T11:52:48.3346027Z INFO : Model::customer token value changed to: 263389cb-41da-4e04-bd2e-b239d7317472
2018-03-14T11:52:48.3346027Z INFO : MCS Crts: C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\Sophos_SHA256_MCS_Root_CA3_exp20380504.crt,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\Sophos_SHA256_MCS_Root_CA4_exp20390504.crt
2018-03-14T11:52:48.3346027Z INFO : MCS CRLs: C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca1.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\sophosca2.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\Sophos_SHA256_MCS_Root_CA3_exp20380504.crl,C:\\Program Files (x86)\\Sophos\\CloudInstaller\\Management Certs\\Sophos_SHA256_MCS_Root_CA4_exp20390504.crl
2018-03-14T11:52:48.3346027Z INFO : Model:: MCS customer id value changed to: 710cbe79-4858-b440-6b6b-85b85b34e6be
2018-03-14T11:52:48.3346027Z INFO : Beginning command definition.
2018-03-14T11:52:48.3346027Z INFO : Adding competitor detection command.
2018-03-14T11:52:48.3346027Z INFO : Adding command to register with Sophos cloud.
2018-03-14T11:52:48.3346027Z INFO : Adding MCS Override Registry keys if applicable; computer name, computer description, working group/domain name.
2018-03-14T11:52:48.3346027Z INFO : Adding command to download product suite.
2018-03-14T11:52:48.3346027Z INFO : Adding command to retrieve policy.
2018-03-14T11:52:48.3346027Z INFO : Adding command to prepare for installation.
2018-03-14T11:52:48.3346027Z INFO : Adding command to install Sophos cloud.
2018-03-14T11:52:48.3346027Z INFO : Adding command to persist installation and download status.
2018-03-14T11:52:48.3346027Z INFO : Command definition complete.
2018-03-14T11:52:48.3346027Z INFO : Stage 1 version:1.1.19.0
2018-03-14T11:52:48.3346027Z INFO : Stage 2 version:1.2.12
2018-03-14T11:52:48.3346027Z INFO : OS version: 6.1.7601.
2018-03-14T11:52:48.3346027Z INFO : Service pack: 1.0.
2018-03-14T11:52:48.3346027Z INFO : System Language: 1033.
2018-03-14T11:52:48.3346027Z INFO : User Language: 1033.
2018-03-14T11:52:48.3346027Z INFO : 64 bit: yes.
2018-03-14T11:52:48.7870317Z INFO : Running System Property Check: VerifyTrust ...
2018-03-14T11:52:48.8338347Z INFO : System Property Check: VerifyTrust - PASSED
2018-03-14T11:52:48.8962387Z INFO : Running System Property Check: HostnameLength ...
2018-03-14T11:52:48.8962387Z INFO : Initialized Winsock subsystem
2018-03-14T11:52:48.8962387Z INFO : Valid hostname length
2018-03-14T11:52:48.8962387Z INFO : System Property Check: HostnameLength - PASSED
2018-03-14T11:52:48.9586427Z INFO : Running System Property Check: GroupNameLength ...
2018-03-14T11:52:48.9586427Z INFO : System Property Check: GroupNameLength - PASSED
2018-03-14T11:52:49.0210467Z INFO : Running System Property Check: IsAdministrator ...
2018-03-14T11:52:49.0210467Z INFO : System Property Check: IsAdministrator - PASSED
2018-03-14T11:52:49.0834507Z INFO : Running System Property Check: PendingReboots ...
2018-03-14T11:52:49.0834507Z INFO : System Property Check: PendingReboots - PASSED
2018-03-14T11:52:49.1458547Z INFO : Running System Property Check: PrimaryDriveSpace ...
2018-03-14T11:52:49.1458547Z INFO : Enough space: 194964 Mb
2018-03-14T11:52:49.1458547Z INFO : System Property Check: PrimaryDriveSpace - PASSED
2018-03-14T11:52:49.2082587Z INFO : Running System Property Check: MsXml ...
2018-03-14T11:52:49.2082587Z INFO : System Property Check: MsXml - PASSED
2018-03-14T11:52:49.2706627Z INFO : Running System Property Check: NotFirewall ...
2018-03-14T11:52:49.2706627Z INFO : System Property Check: NotFirewall - PASSED
2018-03-14T11:52:49.3330667Z INFO : Running System Property Check: NotHitmanProAlertIncompatible ...
2018-03-14T11:52:49.3330667Z INFO : No HitmanPro.Alert Installed
2018-03-14T11:52:49.3330667Z INFO : System Property Check: NotHitmanProAlertIncompatible - PASSED
2018-03-14T11:52:49.3954707Z INFO : Running System Property Check: NotInvincea ...
2018-03-14T11:52:49.3954707Z INFO : System Property Check: NotInvincea - PASSED
2018-03-14T11:52:49.4578747Z INFO : Running System Property Check: NotMessageRelay ...
2018-03-14T11:52:49.4578747Z INFO : RMS is not installed on the endpoint
2018-03-14T11:52:49.4578747Z INFO : System Property Check: NotMessageRelay - PASSED
2018-03-14T11:52:49.5202787Z INFO : Running System Property Check: NotNac ...
2018-03-14T11:52:49.5202787Z INFO : System Property Check: NotNac - PASSED
2018-03-14T11:52:49.5826827Z INFO : Running System Property Check: NotPatch ...
2018-03-14T11:52:49.5826827Z INFO : System Property Check: NotPatch - PASSED
2018-03-14T11:52:49.6450867Z INFO : Running System Property Check: NotPureMessageDomino ...
2018-03-14T11:52:49.6450867Z INFO : System Property Check: NotPureMessageDomino - PASSED
2018-03-14T11:52:49.7074907Z INFO : Running System Property Check: NotPureMessageExchangeWithAntiSpam ...
2018-03-14T11:52:49.7074907Z INFO : System Property Check: NotPureMessageExchangeWithAntiSpam - PASSED
2018-03-14T11:52:49.7698947Z INFO : Running System Property Check: NotSharePoint ...
2018-03-14T11:52:49.7698947Z INFO : System Property Check: NotSharePoint - PASSED
2018-03-14T11:52:49.8322987Z INFO : Running System Property Check: NotSecServer ...
2018-03-14T11:52:49.8322987Z INFO : System Property Check: NotSecServer - PASSED
2018-03-14T11:52:49.8947027Z INFO : Running System Property Check: NotSum ...
2018-03-14T11:52:49.8947027Z INFO : System Property Check: NotSum - PASSED
2018-03-14T11:52:49.9571067Z INFO : Running System Property Check: NotTamperProtected ...
2018-03-14T11:52:49.9571067Z INFO : Sophos Endpoint Defense is not installed
2018-03-14T11:52:49.9571067Z INFO : System Property Check: NotTamperProtected - PASSED
2018-03-14T11:52:50.0195107Z INFO : Running System Property Check: RAMSize ...
2018-03-14T11:52:50.0195107Z INFO : System Property Check: RAMSize - PASSED
2018-03-14T11:52:50.0819147Z INFO : Running System Property Check: SupportedOS ...
2018-03-14T11:52:50.0819147Z INFO : Running on workstation.
2018-03-14T11:52:50.0819147Z INFO : System Property Check: SupportedOS - PASSED
2018-03-14T11:52:50.1443187Z INFO : Running System Property Check: ValidTempDirectory ...
2018-03-14T11:52:50.1443187Z INFO : Temp folder exists.
2018-03-14T11:52:50.1443187Z INFO : System Property Check: ValidTempDirectory - PASSED
2018-03-14T11:52:50.2067227Z INFO : Running System Property Check: ValidServer ...
2018-03-14T11:52:50.2067227Z INFO : System Property Check: ValidServer - PASSED
2018-03-14T11:52:50.2691267Z INFO : Running System Property Check: ValidDeploymentInfo ...
2018-03-14T11:52:50.2691267Z INFO : Current Time: 2018-03-14T11:52:50.269000
2018-03-14T11:52:50.2691267Z INFO : This computer is part of the domain FCLLP
2018-03-14T11:52:50.2691267Z INFO : Domain Name: FCLLP
2018-03-14T11:52:50.2691267Z INFO : Computer Name: FCCL52VN
2018-03-14T11:52:50.2691267Z INFO : Computer Description is not available.
2018-03-14T11:52:50.2691267Z INFO : Operating System: WIN7
2018-03-14T11:52:50.2691267Z INFO : ProductType: 48
2018-03-14T11:52:50.2691267Z INFO : Last logged on user was: FCLLP\\admin-sjw
2018-03-14T11:52:50.2691267Z INFO : Fully Qualified Domain Name: FCCL52VN.fcllp.lan
2018-03-14T11:52:50.2691267Z INFO : Processor architecture: x64
2018-03-14T11:52:50.2691267Z INFO : OS Major Version: 6 and OS Minor Version: 1
2018-03-14T11:52:50.2691267Z INFO : Friendly OS Name: WIN7
2018-03-14T11:52:50.2691267Z INFO : Is server?: 0
2018-03-14T11:52:50.2691267Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/deployment-info
2018-03-14T11:52:50.2847277Z WARNING : WinHttpGetProxyForUrl returned: 12180
2018-03-14T11:52:50.2847277Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2018-03-14T11:52:50.2847277Z INFO : Set security protocol: 00000800
2018-03-14T11:52:50.2847277Z INFO : Opening connection to dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com
2018-03-14T11:52:50.2847277Z INFO : Sending request for connection confirmation through potential proxy
2018-03-14T11:52:50.2847277Z INFO : Request content size: 0
2018-03-14T11:52:50.8775657Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2018-03-14T11:52:50.8775657Z INFO : Certificate check succeeded
2018-03-14T11:52:50.8775657Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2018-03-14T11:52:51.0491767Z INFO : Response status code: 200
2018-03-14T11:52:51.0491767Z INFO : Response data size: 168
2018-03-14T11:52:51.0491767Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2018-03-14T11:52:51.0491767Z INFO : Request content size: 1106
2018-03-14T11:52:51.0491767Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2018-03-14T11:52:51.0491767Z INFO : Certificate check succeeded
2018-03-14T11:52:51.0491767Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2018-03-14T11:52:51.2207877Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2018-03-14T11:52:51.2363887Z INFO : Certificate check succeeded
2018-03-14T11:52:51.2363887Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2018-03-14T11:52:51.2363887Z INFO : Response status code: 200
2018-03-14T11:52:51.2363887Z INFO : Response data size: 390
2018-03-14T11:52:51.2363887Z INFO : Parsing message received for deployment token: {"registrationToken":"33951144eeea23aa1812336a29a7670a11ec80042dd580c7b2d5db63b77dbea5","products":[{"product":"ENDPOINT_ADVANCED","supported":true,"reasons":[]},{"product":"INTERCEPT","supported":true,"reasons":[]},{"product":"DEVICE_ENCRYPTION","supported":false,"reasons":["UNLICENSED","UNSUPPORTED_OS_VERSION"]},{"product":"FILE_ENCRYPTION","supported":false,"reasons":["UNLICENSED"]}]}
2018-03-14T11:52:51.2363887Z INFO : Model::token value changed to: 33951144eeea23aa1812336a29a7670a11ec80042dd580c7b2d5db63b77dbea5
2018-03-14T11:52:51.2363887Z INFO : Licenses available: ENDPOINT_ADVANCED INTERCEPT
2018-03-14T11:52:51.2987927Z INFO : Running System Property Check: InstallationInProgress ...
2018-03-14T11:52:51.2987927Z INFO : System Property Check: InstallationInProgress - PASSED
2018-03-14T11:52:51.3611967Z INFO : Running System Property Check: SafeGuardEncryption ...
2018-03-14T11:52:51.3611967Z INFO : Entered installedProductCode, upgradeCode={BA2F47D3-1C17-40E7-8DE7-1CD733442B6C}
2018-03-14T11:52:51.3611967Z INFO : Product is not installed
2018-03-14T11:52:51.3611967Z INFO : Entered installedProductCode, upgradeCode={C48CCEDE-A264-411F-AB82-BC9D67B8344B}
2018-03-14T11:52:51.3611967Z INFO : Product is not installed
2018-03-14T11:52:51.3611967Z INFO : licensesContainFeature(FILE_ENCRYPTION): false
2018-03-14T11:52:51.3611967Z INFO : licensesContainFeature(DEVICE_ENCRYPTION): false
2018-03-14T11:52:51.3611967Z INFO : System Property Check: SafeGuardEncryption - PASSED
2018-03-14T11:53:20.6286727Z INFO : Starting installation process.
2018-03-14T11:53:20.6286727Z INFO : About to execute command: CompetitorDetector
2018-03-14T11:53:20.6442737Z INFO : Command 'CompetitorDetector' completed with success with reboot code '0' and error message ''.
2018-03-14T11:53:20.6442737Z INFO : About to execute command: Register
2018-03-14T11:53:20.6442737Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/register
2018-03-14T11:53:20.6442737Z WARNING : WinHttpGetProxyForUrl returned: 12180
2018-03-14T11:53:20.6442737Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2018-03-14T11:53:20.6442737Z INFO : Set security protocol: 00000800
2018-03-14T11:53:20.6442737Z INFO : Opening connection to dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com
2018-03-14T11:53:20.6442737Z INFO : Sending request for connection confirmation through potential proxy
2018-03-14T11:53:20.6442737Z INFO : Request content size: 0
2018-03-14T11:53:20.6442737Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2018-03-14T11:53:20.6442737Z INFO : Certificate check succeeded
2018-03-14T11:53:20.6442737Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2018-03-14T11:53:20.8158847Z INFO : Response status code: 200
2018-03-14T11:53:20.8158847Z INFO : Response data size: 168
2018-03-14T11:53:20.8158847Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2018-03-14T11:53:20.8158847Z INFO : Request content size: 1106
2018-03-14T11:53:20.8158847Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2018-03-14T11:53:20.8314857Z INFO : Certificate check succeeded
2018-03-14T11:53:20.8314857Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2018-03-14T11:53:21.1123037Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2018-03-14T11:53:21.1123037Z INFO : Certificate check succeeded
2018-03-14T11:53:21.1123037Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2018-03-14T11:53:21.1123037Z INFO : Response status code: 200
2018-03-14T11:53:21.1123037Z INFO : Response data size: 72
2018-03-14T11:53:21.1123037Z INFO : Retrieved endpoint id: cbf33cc6-ff98-b478-2b24-6942e66b4a5b
2018-03-14T11:53:21.1123037Z INFO : MCS Endpoint folder: C:\\ProgramData\\Sophos\\Management Communications System\\Endpoint\\
2018-03-14T11:53:21.1123037Z INFO : MCS Endpoint folder: C:\\ProgramData\\Sophos\\Management Communications System\\Endpoint\\
2018-03-14T11:53:21.1123037Z INFO : Retrieved customer id: 710cbe79-4858-b440-6b6b-85b85b34e6be
2018-03-14T11:53:21.1123037Z INFO : MCS Endpoint folder: C:\\ProgramData\\Sophos\\Management Communications System\\Endpoint\\
2018-03-14T11:53:22.1263687Z INFO : Sending HTTP 'PUT' request to: sophos/management/ep/install/statuses/endpoint/cbf33cc6-ff98-b478-2b24-6942e66b4a5b
2018-03-14T11:53:22.1263687Z INFO : Request content size: 952
2018-03-14T11:53:22.1263687Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2018-03-14T11:53:22.1263687Z INFO : Certificate check succeeded
2018-03-14T11:53:22.1263687Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2018-03-14T11:53:22.3291817Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2018-03-14T11:53:22.3291817Z INFO : Certificate check succeeded
2018-03-14T11:53:22.3291817Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2018-03-14T11:53:22.3291817Z INFO : Response status code: 200
2018-03-14T11:53:22.3291817Z INFO : Response data size: 0
2018-03-14T11:53:22.3291817Z INFO : Attempt to retrieve policy.
2018-03-14T11:53:22.3291817Z INFO : Sending HTTP 'GET' request to: sophos/management/ep/install/commands/applications/APPSPROXY;ALC/endpoint/cbf33cc6-ff98-b478-2b24-6942e66b4a5b
2018-03-14T11:53:22.3291817Z INFO : Request content size: 0
2018-03-14T11:53:22.3291817Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2018-03-14T11:53:22.3291817Z INFO : Certificate check succeeded
2018-03-14T11:53:22.3447827Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2018-03-14T11:53:22.5163937Z INFO : Response status code: 200
2018-03-14T11:53:22.5163937Z INFO : Response data size: 725
2018-03-14T11:53:22.5163937Z INFO : Successfully retrieved policy: commandID='64' policyId='369eed2f8e3e0aeef289cb8a7a91c9c229485eeb0946bd9a991d0256772d9c88'.
2018-03-14T11:53:22.5163937Z INFO : Sending HTTP 'DELETE' request to: sophos/management/ep/install/commands/endpoint/cbf33cc6-ff98-b478-2b24-6942e66b4a5b/64
2018-03-14T11:53:22.5163937Z INFO : Request content size: 0
2018-03-14T11:53:22.5163937Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2018-03-14T11:53:22.5163937Z INFO : Certificate check succeeded
2018-03-14T11:53:22.5163937Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2018-03-14T11:53:22.7036057Z INFO : Response status code: 200
2018-03-14T11:53:22.7036057Z INFO : Response data size: 0
2018-03-14T11:53:22.7036057Z INFO : Sending HTTP 'GET' request to: sophos/management/ep/install/policy/application/ALC/369eed2f8e3e0aeef289cb8a7a91c9c229485eeb0946bd9a991d0256772d9c88
2018-03-14T11:53:22.7036057Z INFO : Request content size: 0
2018-03-14T11:53:22.7036057Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2018-03-14T11:53:22.7036057Z INFO : Certificate check succeeded
2018-03-14T11:53:22.7036057Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2018-03-14T11:53:22.9376207Z INFO : Response status code: 200
2018-03-14T11:53:22.9376207Z INFO : Response data size: 8016
2018-03-14T11:53:22.9376207Z INFO : OverwritingSAUPolicy file C:\\ProgramData\\Sophos\\Remote Management System\\3\\Agent\\AdapterStorage\\ALC\\SAUPolicy
2018-03-14T11:53:22.9376207Z INFO : New SAU, assume obfuscated password
2018-03-14T11:53:23.2808427Z INFO : Updating subscription created with id: Base, rigidname: WindowsCloudNextGen, baseversion: 11, tag: RECOMMENDED, fixedversion:
2018-03-14T11:53:23.2808427Z INFO : Updating subscription created with id: Clean, rigidname: WindowsCloudClean, baseversion: 1, tag: RECOMMENDED, fixedversion:
2018-03-14T11:53:23.2808427Z INFO : Updating subscription created with id: CloudAV, rigidname: WindowsCloudAV, baseversion: 11, tag: RECOMMENDED, fixedversion:
2018-03-14T11:53:23.2808427Z INFO : Updating subscription created with id: HitmanProAlert, rigidname: WindowsCloudHitmanProAlert, baseversion: 1, tag: RECOMMENDED, fixedversion:
2018-03-14T11:53:23.2808427Z INFO : Features: APPCNTRL
2018-03-14T11:53:23.2808427Z INFO : Features: AV
2018-03-14T11:53:23.2808427Z INFO : Features: CLEAN
2018-03-14T11:53:23.2808427Z INFO : Features: CORE
2018-03-14T11:53:23.2808427Z INFO : Features: DLP
2018-03-14T11:53:23.2808427Z INFO : Features: DVCCNTRL
2018-03-14T11:53:23.2808427Z INFO : Features: EFW
2018-03-14T11:53:23.2808427Z INFO : Features: HBT
2018-03-14T11:53:23.2808427Z INFO : Features: NTP
2018-03-14T11:53:23.2808427Z INFO : Features: SAV
2018-03-14T11:53:23.2808427Z INFO : Features: SDU
2018-03-14T11:53:23.2808427Z INFO : Features: WEBCNTRL
2018-03-14T11:53:23.2808427Z INFO : Features: XPD
2018-03-14T11:53:23.2808427Z INFO : Setting https download to: false
2018-03-14T11:53:23.2808427Z INFO : Updating credentials created with username: 6YABHIO3MX
2018-03-14T11:53:23.2808427Z INFO : MCS Endpoint folder: C:\\ProgramData\\Sophos\\Management Communications System\\Endpoint\\
2018-03-14T11:53:23.2808427Z INFO : Command 'Register' completed with success with reboot code '0' and error message ''.
2018-03-14T11:53:23.2808427Z INFO : About to execute command: StoreMcsRegistryKeys
2018-03-14T11:53:23.2808427Z INFO : Command 'StoreMcsRegistryKeys' completed with success with reboot code '0' and error message ''.
2018-03-14T11:53:23.2808427Z INFO : About to execute command: Download
2018-03-14T11:53:23.2808427Z INFO : Update Cache Cert Path folder: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
2018-03-14T11:53:23.2808427Z INFO : About to create directory: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded
2018-03-14T11:53:23.2808427Z INFO : Created directory: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded
2018-03-14T11:53:23.2808427Z INFO : About to set security DACL on: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded
2018-03-14T11:53:23.2808427Z INFO : Set security DACL on: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\Cache\\decoded
2018-03-14T11:53:23.2808427Z INFO : About to create directory: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\data\\Warehouse
2018-03-14T11:53:23.2808427Z INFO : Created directory: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\data\\Warehouse
2018-03-14T11:53:23.2808427Z INFO : About to set security DACL on: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\data
2018-03-14T11:53:23.2808427Z INFO : Set security DACL on: C:\\ProgramData\\Sophos\\CloudInstaller\\AutoUpdatePreparation\\data
2018-03-14T11:53:23.2808427Z INFO : About to create directory: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
2018-03-14T11:53:23.2808427Z INFO : Created directory: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
2018-03-14T11:53:23.2808427Z INFO : About to set security DACL on: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
2018-03-14T11:53:23.2808427Z INFO : Set security DACL on: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
2018-03-14T11:53:23.2808427Z INFO : Update Cache Cert Path folder: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
2018-03-14T11:53:23.2808427Z INFO : Update Cache Cert Path folder: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
2018-03-14T11:53:23.2808427Z INFO : Writing cert: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache\\1323c8d6ae076942b89d7580ee4f630e2d8ffd4c.crt.crt
2018-03-14T11:53:23.2808427Z INFO : Writing cert: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache\\23337756cd0b3478acd0475de4fd89976e779a63.crt.crt
2018-03-14T11:53:23.2808427Z INFO : Writing cert: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache\\33d6a435957397fc9336c8633445aa33e1774500.crt.crt
2018-03-14T11:53:23.2808427Z INFO : Analyzing whether to update from Sophos CDN or update cache
2018-03-14T11:53:23.2808427Z WARNING : Warning no ipv6 addresses found for fcbfmps1.fcllp.lan:8191.
2018-03-14T11:53:23.2808427Z WARNING : Warning no ipv6 addresses found for fccfmps1.fcllp.lan:8191.
2018-03-14T11:53:23.2808427Z WARNING : Warning no ipv6 addresses found for fcdfmps1.fcllp.lan:8191.
2018-03-14T11:53:23.2808427Z WARNING : Warning no ipv6 addresses found for fcleefmps1.fcllp.lan:8191.
2018-03-14T11:53:23.2808427Z WARNING : Warning no ipv6 addresses found for fclfmps1.fcllp.lan:8191.
2018-03-14T11:53:23.2964437Z WARNING : Warning no ipv6 addresses found for fclonfmps1.fcllp.lan:8191.
2018-03-14T11:53:23.2964437Z WARNING : Warning no ipv6 addresses found for fcmfmps1.fcllp.lan:8191.
2018-03-14T11:53:23.2964437Z WARNING : Warning no ipv6 addresses found for fcmkfmps1.fcllp.lan:8191.
2018-03-14T11:53:23.2964437Z WARNING : Warning no ipv6 addresses found for fcoxfmps1.fcllp.lan:8191.
2018-03-14T11:53:23.2964437Z WARNING : Warning no ipv6 addresses found for fcshfmps1.fcllp.lan:8191.
2018-03-14T11:53:23.2964437Z WARNING : Warning no ipv6 addresses found for fcstfmps1.fcllp.lan:8191.
2018-03-14T11:53:23.2964437Z INFO : Checking access to update cache: fccfmps1.fcllp.lan:8191
2018-03-14T11:53:23.2964437Z INFO : Updating configured to use: HTTPS
2018-03-14T11:53:23.2964437Z INFO : Update Cache Cert Path folder: C:\\ProgramData\\Sophos\\Certificates\\AutoUpdate\\Cache
2018-03-14T11:53:23.3120447Z INFO : Successfully connected to cache
2018-03-14T11:53:23.3120447Z INFO : Cache response time: 25ms
2018-03-14T11:53:23.3120447Z INFO : Analysis complete - Using update cache: fccfmps1.fcllp.lan:8191
2018-03-14T11:53:23.3120447Z INFO : Updating from cache: fccfmps1.fcllp.lan:8191
2018-03-14T11:53:23.3120447Z INFO : Updating configured to use: HTTPS
2018-03-14T11:53:23.3276457Z INFO : Initial download: attempting to use bulk metadata
2018-03-14T11:53:23.3276457Z INFO : Calling SULDownloader addGlobalFilter...
2018-03-14T11:53:23.3276457Z INFO : Subscription: Base
2018-03-14T11:53:23.3276457Z INFO : SUL info: [T46381] SU::Handle::readRemoteMetadata + SU::Handle::readRemoteMetadata()
2018-03-14T11:53:23.3276457Z INFO : SUL info: [T75884] SU::Metadata::readRemoteMetadata SU::Metadata::readRemoteMetadata()
2018-03-14T11:53:23.3276457Z INFO : SUL info: [I40394] Downloading customer file from sophos:1:1
2018-03-14T11:53:23.3276457Z INFO : SUL info: [T81533] SU::createCachedPackageSource creating cached package source for sophos:1:1: url=sophos
2018-03-14T11:53:23.3276457Z INFO : SUL info: [T81533] SU::createCachedPackageSource creating http_source_specific_data to download customer file
2018-03-14T11:53:23.3276457Z INFO : SUL info: [T81533] SU::createCachedPackageSource creating package source to download customer file
2018-03-14T11:53:23.3276457Z INFO : SUL info: [T81533] SU::createCachedPackageSource creating cached package source
2018-03-14T11:53:23.3276457Z INFO : SUL info: [I40395] Downloaded customer file; fetching catalogues from sophos:1:1...
2018-03-14T11:53:23.3276457Z INFO : SUL info: [T31993] SU::internal::CustomerFile::getWarehousesFromSophosUpdateSource Getting catalogues
2018-03-14T11:53:23.3276457Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: catalogue/sdds.CEPNG_1081.6.xml
2018-03-14T11:53:23.3276457Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Success: catalogue/sdds.CEPNG_1081.6.xml: 0 ms
2018-03-14T11:53:23.3276457Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: catalogue/sdds.CEP_11014.2.xml
2018-03-14T11:53:23.3276457Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Success: catalogue/sdds.CEP_11014.2.xml: 0 ms
2018-03-14T11:53:23.3276457Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: catalogue/sdds.CIX_2-0-0.3.xml
2018-03-14T11:53:23.3432467Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Success: catalogue/sdds.CIX_2-0-0.3.xml: 16 ms
2018-03-14T11:53:23.3432467Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: catalogue/sdds.Cloud-SVE1113692.1.xml
2018-03-14T11:53:23.3432467Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Success: catalogue/sdds.Cloud-SVE1113692.1.xml: 0 ms
2018-03-14T11:53:23.3432467Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: catalogue/sdds.CloudEnc_1-3-90.1.xml
2018-03-14T11:53:23.3432467Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Success: catalogue/sdds.CloudEnc_1-3-90.1.xml: 0 ms
2018-03-14T11:53:23.3432467Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: catalogue/sdds.CloudOSX_966_973.6.xml
2018-03-14T11:53:23.3432467Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Success: catalogue/sdds.CloudOSX_966_973.6.xml: 0 ms
2018-03-14T11:53:23.3432467Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: catalogue/sdds.CloudVirt-VS21113692.2.xml
2018-03-14T11:53:23.3432467Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Success: catalogue/sdds.CloudVirt-VS21113692.2.xml: 0 ms
2018-03-14T11:53:23.3432467Z INFO : SUL info: [T31993] SU::internal::CustomerFile::getWarehousesFromSophosUpdateSource Getting warehouses
2018-03-14T11:53:23.3432467Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: bulk/sdds.CEPNG_1081.6.xml.zip
2018-03-14T11:53:24.1232967Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Failure: bulk/sdds.CEPNG_1081.6.xml.zip: 780 ms
2018-03-14T11:53:24.1232967Z INFO : SUL info: [WARN] cached_package_source::copy_from_upstream copy from upstream failed: 500 Internal Server Error: error fetching fccfmps1.fcllp.lan:8191/.../sdds.CEPNG_1081.6.xml.zip
2018-03-14T11:53:24.1232967Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 7193 bytes
2018-03-14T11:53:24.1232967Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Failure: 94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 0 ms
2018-03-14T11:53:24.1232967Z INFO : SUL info: [WARN] cached_package_source::copy_from_upstream copy from upstream failed: Cannot read remote resource: fccfmps1.fcllp.lan:8191/.../94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 404 Not Found
2018-03-14T11:53:24.1857007Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 7193 bytes
2018-03-14T11:53:24.1857007Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Failure: 94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 0 ms
2018-03-14T11:53:24.1857007Z INFO : SUL info: [WARN] cached_package_source::copy_from_upstream copy from upstream failed: Cannot read remote resource: fccfmps1.fcllp.lan:8191/.../94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 404 Not Found
2018-03-14T11:53:24.2949077Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 7193 bytes
2018-03-14T11:53:24.2949077Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Failure: 94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 0 ms
2018-03-14T11:53:24.2949077Z INFO : SUL info: [WARN] cached_package_source::copy_from_upstream copy from upstream failed: Cannot read remote resource: fccfmps1.fcllp.lan:8191/.../94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 404 Not Found
2018-03-14T11:53:24.4977207Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 7193 bytes
2018-03-14T11:53:24.4977207Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Failure: 94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 0 ms
2018-03-14T11:53:24.4977207Z INFO : SUL info: [WARN] cached_package_source::copy_from_upstream copy from upstream failed: Cannot read remote resource: fccfmps1.fcllp.lan:8191/.../94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 404 Not Found
2018-03-14T11:53:24.9033467Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 7193 bytes
2018-03-14T11:53:24.9033467Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Failure: 94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 0 ms
2018-03-14T11:53:24.9033467Z INFO : SUL info: [WARN] cached_package_source::copy_from_upstream copy from upstream failed: Cannot read remote resource: fccfmps1.fcllp.lan:8191/.../94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 404 Not Found
2018-03-14T11:53:24.9033467Z WARNING : SUL error: [E79514] Cannot read resource: fccfmps1.fcllp.lan:8191/.../94667e07e7c4dc93f4855b549d8b6d5cx000.xml
2018-03-14T11:53:24.9033467Z INFO : SUL info: [I79514] No proxy was used.
2018-03-14T11:53:24.9033467Z INFO : SUL info: [I40394] Downloading customer file from sophos:1:2
2018-03-14T11:53:24.9033467Z INFO : SUL info: [T81533] SU::createCachedPackageSource creating cached package source for sophos:1:2: url=sophos
2018-03-14T11:53:24.9033467Z INFO : SUL info: [T81533] SU::createCachedPackageSource creating http_source_specific_data to download customer file
2018-03-14T11:53:24.9033467Z INFO : SUL info: [T81533] SU::createCachedPackageSource creating package source to download customer file
2018-03-14T11:53:24.9189477Z INFO : SUL info: [T81533] SU::createCachedPackageSource creating cached package source
2018-03-14T11:53:24.9189477Z INFO : SUL info: [I40395] Downloaded customer file; fetching catalogues from sophos:1:2...
2018-03-14T11:53:24.9189477Z INFO : SUL info: [T31993] SU::internal::CustomerFile::getWarehousesFromSophosUpdateSource Getting catalogues
2018-03-14T11:53:24.9189477Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: catalogue/sdds.CEPNG_1081.6.xml
2018-03-14T11:53:24.9189477Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Success: catalogue/sdds.CEPNG_1081.6.xml: 0 ms
2018-03-14T11:53:24.9189477Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: catalogue/sdds.CEP_11014.2.xml
2018-03-14T11:53:24.9189477Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Success: catalogue/sdds.CEP_11014.2.xml: 0 ms
2018-03-14T11:53:24.9189477Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: catalogue/sdds.CIX_2-0-0.3.xml
2018-03-14T11:53:24.9189477Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Success: catalogue/sdds.CIX_2-0-0.3.xml: 0 ms
2018-03-14T11:53:24.9189477Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: catalogue/sdds.Cloud-SVE1113692.1.xml
2018-03-14T11:53:24.9345487Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Success: catalogue/sdds.Cloud-SVE1113692.1.xml: 16 ms
2018-03-14T11:53:24.9345487Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: catalogue/sdds.CloudEnc_1-3-90.1.xml
2018-03-14T11:53:24.9345487Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Success: catalogue/sdds.CloudEnc_1-3-90.1.xml: 0 ms
2018-03-14T11:53:24.9345487Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: catalogue/sdds.CloudOSX_966_973.6.xml
2018-03-14T11:53:24.9345487Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Success: catalogue/sdds.CloudOSX_966_973.6.xml: 0 ms
2018-03-14T11:53:24.9345487Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: catalogue/sdds.CloudVirt-VS21113692.2.xml
2018-03-14T11:53:24.9345487Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Success: catalogue/sdds.CloudVirt-VS21113692.2.xml: 0 ms
2018-03-14T11:53:24.9345487Z INFO : SUL info: [T31993] SU::internal::CustomerFile::getWarehousesFromSophosUpdateSource Getting warehouses
2018-03-14T11:53:24.9345487Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: bulk/sdds.CEPNG_1081.6.xml.zip
2018-03-14T11:53:25.7145987Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Failure: bulk/sdds.CEPNG_1081.6.xml.zip: 780 ms
2018-03-14T11:53:25.7145987Z INFO : SUL info: [WARN] cached_package_source::copy_from_upstream copy from upstream failed: 500 Internal Server Error: error fetching fccfmps1.fcllp.lan:8191/.../sdds.CEPNG_1081.6.xml.zip
2018-03-14T11:53:25.7145987Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 7193 bytes
2018-03-14T11:53:25.7145987Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Failure: 94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 0 ms
2018-03-14T11:53:25.7145987Z INFO : SUL info: [WARN] cached_package_source::copy_from_upstream copy from upstream failed: Cannot read remote resource: fccfmps1.fcllp.lan:8191/.../94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 404 Not Found
2018-03-14T11:53:25.7770027Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 7193 bytes
2018-03-14T11:53:25.7770027Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Failure: 94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 0 ms
2018-03-14T11:53:25.7770027Z INFO : SUL info: [WARN] cached_package_source::copy_from_upstream copy from upstream failed: Cannot read remote resource: fccfmps1.fcllp.lan:8191/.../94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 404 Not Found
2018-03-14T11:53:25.8862097Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 7193 bytes
2018-03-14T11:53:25.8862097Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Failure: 94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 0 ms
2018-03-14T11:53:25.8862097Z INFO : SUL info: [WARN] cached_package_source::copy_from_upstream copy from upstream failed: Cannot read remote resource: fccfmps1.fcllp.lan:8191/.../94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 404 Not Found
2018-03-14T11:53:26.0890227Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 7193 bytes
2018-03-14T11:53:26.0890227Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Failure: 94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 0 ms
2018-03-14T11:53:26.0890227Z INFO : SUL info: [WARN] cached_package_source::copy_from_upstream copy from upstream failed: Cannot read remote resource: fccfmps1.fcllp.lan:8191/.../94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 404 Not Found
2018-03-14T11:53:26.4946487Z INFO : SUL info: [T52614] SU::LoggingAdvisor::start_file [metadata] Syncing: 94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 7193 bytes
2018-03-14T11:53:26.4946487Z INFO : SUL info: [T52615] SU::LoggingAdvisor::end_file [metadata] Failure: 94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 0 ms
2018-03-14T11:53:26.4946487Z INFO : SUL info: [WARN] cached_package_source::copy_from_upstream copy from upstream failed: Cannot read remote resource: fccfmps1.fcllp.lan:8191/.../94667e07e7c4dc93f4855b549d8b6d5cx000.xml: 404 Not Found
2018-03-14T11:53:26.4946487Z WARNING : SUL error: [E79514] Cannot read resource: fccfmps1.fcllp.lan:8191/.../94667e07e7c4dc93f4855b549d8b6d5cx000.xml
2018-03-14T11:53:26.4946487Z INFO : SUL info: [I79514] No proxy was used.
2018-03-14T11:53:26.4946487Z INFO : SUL info: [I40394] Downloading customer file from sophos:1:3
2018-03-14T11:53:26.4946487Z INFO : SUL info: [T81533] SU::createCachedPackageSource creating cached package source for sophos:1:3: url=sophos
2018-03-14T11:53:26.4946487Z INFO : SUL info: [T81533] SU::createCachedPackageSource creating http_source_specific_data to download customer file
2018-03-14T11:53:26.4946487Z INFO : SUL info: [T81533] SU::createCachedPackageSource creating package source to download customer file
2018-03-14T11:53:26.5102497Z WARNING : SUL error: [E73334] Ran out of URLs in customer file, switching to next sophos alias
2018-03-14T11:53:26.5102497Z INFO : SUL info: [I73334] No proxy was used.
2018-03-14T11:53:26.5102497Z INFO : SUL info: [I40394] Downloading customer file from sophos:2:1
2018-03-14T11:53:26.5102497Z INFO : SUL info: [T81533] SU::createCachedPackageSource creating cached package source for sophos:2:1: url=sophos
2018-03-14T11:53:26.5102497Z INFO : SUL info: [T81533] SU::createCachedPackageSource creating http_source_specific_data to download customer file
2018-03-14T11:53:26.5102497Z INFO : SUL info: [T81533] SU::createCachedPackageSource creating package source to download customer file
2018-03-14T11:53:26.5102497Z WARNING : SUL error: [E75373] Ran out of sophos aliases for this update source
2018-03-14T11:53:26.5102497Z WARNING : SUL error: [E35369] Out of update sources
2018-03-14T11:53:26.5102497Z WARNING : SUL error: [E99999] Out of sources
2018-03-14T11:53:26.5102497Z ERROR : DownloadCommand::onRun() failed with std::exception: MetaDataScope::MetaDataScope failed with error code 4
2018-03-14T11:53:26.5102497Z INFO : Command 'Download' completed with failure with reboot code '0' and error message 'Could not download software'.
2018-03-14T11:53:26.5102497Z ERROR : Installation failed.
2018-03-14T11:53:26.5102497Z INFO : Sending HTTP 'POST' request to: sophos/management/ep/install/events/endpoint/cbf33cc6-ff98-b478-2b24-6942e66b4a5b
2018-03-14T11:53:26.5102497Z WARNING : WinHttpGetProxyForUrl returned: 12180
2018-03-14T11:53:26.5102497Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2018-03-14T11:53:26.5102497Z INFO : Set security protocol: 00000800
2018-03-14T11:53:26.5102497Z INFO : Opening connection to dzr-mcs-amzn-us-west-2-fa88.upe.p.hmr.sophos.com
2018-03-14T11:53:26.5102497Z INFO : Sending request for connection confirmation through potential proxy
2018-03-14T11:53:26.5102497Z INFO : Request content size: 0
2018-03-14T11:53:26.5102497Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2018-03-14T11:53:26.5102497Z INFO : Certificate check succeeded
2018-03-14T11:53:26.5102497Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2018-03-14T11:53:26.6818607Z INFO : Response status code: 200
2018-03-14T11:53:26.6818607Z INFO : Response data size: 168
2018-03-14T11:53:26.6818607Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2018-03-14T11:53:26.6818607Z INFO : Request content size: 1150
2018-03-14T11:53:26.6818607Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2018-03-14T11:53:26.6818607Z INFO : Certificate check succeeded
2018-03-14T11:53:26.6974617Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2018-03-14T11:53:26.9470777Z INFO : ValidateFileCertificateCheck: Validate certificate against file on WINHTTP_CALLBACK_STATUS_SENDING_REQUEST
2018-03-14T11:53:26.9470777Z INFO : Certificate check succeeded
2018-03-14T11:53:26.9470777Z INFO : ValidateFileCertificateCheck: Ignore WINHTTP_CALLBACK_STATUS_REQUEST_SENT
2018-03-14T11:53:26.9470777Z INFO : Response status code: 200
2018-03-14T11:53:26.9470777Z INFO : Response data size: 0
2018-03-14T12:14:39.0879574Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2018-03-14T12:14:39.0879574Z INFO : Data folder: C:\\ProgramData\\Sophos\\AutoUpdate\\data
2018-03-14T12:14:39.0879574Z INFO : Sending HTTP 'PUT' request to: prod/2018-03-14T12:14:39Z-2018-03-14T12:14:39Z-11888ea5-5517-57d2-8554-62cceb61b84d.json
2018-03-14T12:14:39.0879574Z WARNING : WinHttpGetProxyForUrl returned: 12180
2018-03-14T12:14:39.0879574Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2018-03-14T12:14:39.0879574Z INFO : Set security protocol: 00000800
2018-03-14T12:14:39.0879574Z INFO : Opening connection to t1.sophosupd.com
2018-03-14T12:14:39.0879574Z INFO : Request content size: 2692
2018-03-14T12:14:39.1347580Z INFO : Sending request
2018-03-14T12:14:39.1347580Z INFO : Request sent
2018-03-14T12:14:39.1815586Z INFO : Sending request
2018-03-14T12:14:39.1815586Z INFO : Request sent
2018-03-14T12:14:39.1815586Z INFO : Response status code: 200
2018-03-14T12:14:39.1815586Z INFO : Response data size: 0
2018-03-14T12:14:39.1815586Z INFO : trySendRequestThroughPotentialProxy returning response with status code: 200
2018-03-14T12:14:39.1815586Z INFO : Telemetry Response:
2018-03-14T12:14:39.1815586Z INFO : User profile unloaded
2018-03-14T12:14:39.1971588Z INFO : Cleaning up extracted files
2018-03-14T12:14:39.2439594Z ERROR : Exception: Setup program failed with code: 1

 

This seems to stand out from the log:

ERROR : DownloadCommand::onRun() failed with std::exception: MetaDataScope::MetaDataScope failed with error code 4

 

But I have no idea what that means. Is anyone else having the same issue? Any suggestions would be greatly appreciated.

 

Thanks, Simon

 




[locked by: SupportFlo at 2:53 PM (GMT -7) on 26 Sep 2018]
Parents
  • I must say - the support from Sophos has been terrible...my past working week has all been spent looking into this issue, troubleshooting - chasing my tail basically.

     

    I initially thought it might have been a firewall related issue as it didn't even work via my mobile hotspot - however, I've since shot that theory down as was able to download/install Sophos on a laptop via another wifi connection...

     

    Browsing through the SophosCloudInstaller logs on each failed machine - they all point to a specific xml file not being found on our internal updatecaches. Having then manually downloaded this xml file, copied it to the expected location - then re-attempted installation - it gets a bit further, then fails again due to a .zip file not being found. Again, I downloaded the zip file, put it in the expected location, then attempted the install again - and once again, it gets a bit further, then fails again, referencing another file.

     

    Based on the above, in order to bypass the updatecache on our corporate network - I added a "fake" ip address in the "hosts" file on one of the laptops for every updatecache server we have - effectively forcing a connection directly to Sophos instead...this worked! Obviously, not a practical solution - but at least it has potentially narrowed the issue down to the updatecaches. I'm in the process of attempting a re-install of some of the updatecaches and will report back if I get anywhere.

     

    Of those who have the same problem on this thread - it would be interesting to know if you have internal updatecaches too and have similar issues with files not being found in the log.

  • I'm going through the same thing with both installing Sophos and updating already installed computers. I have 2 update caches on my network. Based on your comments, I took the laptop that I've been fighting with for the past 2 days and dropped it onto my guest network which is completely disconnected from my domain... SUCCESS! Installed perfectly. I also took my own laptop, which again hasn't been able to update and dropped it on the guest network. Updated without a hitch. Let me know how you make out with the removing and recreating the update caches. If it works, I'll do the same on my end so we can confirm if that was in fact the fix.

     

    Thanks for pointing me in the right direction

     

    Scott

  • I have since discovered any machines with the "Server" instance of Sophos Endpoint installed (Server Protection) - they can connect to the update caches and update fine. The issue seems to be with the client version and the update caches.

     

    Still working with Sophos troubleshooting the issue, but it's not moving along very quickly.

  • Hey Simon,

     

    So after a couple of days of testing, here's what I've noticed:

    - No more alerts about any of my managed computers not getting updated. They are all up to date.

    - No more install issues. Everything is going in smoothly.

    - So far, only my servers are getting updated by the Update Caches. They are up to date, but I can only assume that my client versions are getting updated direct from Sophos. Either that or they are just not showing in my report. My gut tells me that are by-passing the Update Caches all together. Not sure what could be causing this aside from what you suggested about the version issue between the client version and the update cache version. I'll be sending my finding to Sophos Tech Support later today. I'll keep you posted.

     

    Scott

  • Thanks for the update Scott. Sounds like that must be the case for your client machines then. Mine are failing to update altogether and not going to Sophos directly.

     

    I'll also post any updates as and when I have any. Cheers, 

     

    Simon

  • Almost 3 weeks since initially raising this with Sophos Technical Support and we are no further forward other than knowing the issue is with the update caches. Is anyone else getting this issue at all who could lend some assistance please? Having 1000+ domain devices being outdated is a serious security risk.

     

    Thanks

  • Hey Simon,

     

    Yes we are currently experiencing this same issue and have been for over a month now. This appears to be related to the new Sophos complete installer version 1.2. We get the same failed to download error when the installer is unpacking and after working with Sophos Support for over a week, I had gotten no where. On a whim I decided to connect to our company's Xfinity wifi which falls outside of our network and sure enough I was able to complete the installation as it has for the past year+ without issue. The weird thing is, once installed endpoint has in issue updating on our corporate network at all, it's just during the unpacking of the installation files. 

     

    I have found this in the logs and i'm hoping that when whitelisted the issue will no longer happen.

     

    - Chat sophos-1.hs.llnwd.net 192.168.1.105 HTTP/XML 54 HTTP/1.1 404 Not Found 2018-03-16 08:33:36.268755- Chat sophos-

     

    -Chris Dugan

  • We have been seeing this issue ever since the new version started rolling out some months ago,  firstly the old version reinstalled itself soon after the new version had installed, now none of our end points will update.  Its definetly something to do with the update caches we have, but getting a fix for it from Sophos is a different matter.  I have tried reinstalling one of them, but that's made no difference.  At the moment I'm blocking port 8191 via group policy on a PC by PC basis, which I can remove when they eventually fix it.

  • Hey Simon,

     

    Yes, same for us. Unfortunately for me the whitelisting of what I thought was the problem didn't resolve the issue as I was hoping in my first post. I have found that if I connect to our comcast xfinity connection that we don't use for our business that it will go through. I am uncertain as to why this is successful at this time but i'm guessing there is a port that we normally have closed on our company network that is open on the Xfinity connection.

  • Hi Simon,

    I thought you might be interested in my resolution.  I was experiencing incorrect file size for downloads on direct download from Sophos.  Sophos support recommended downloading the problem file in a browser and placing it in the cloud installer folder, although bizarrely directed me to the wrong location for this.  I got fed up when I got to the 20th file (varying from 6000KB to 18KB) that failed on me and chose a different tack.  As we had some quiet time on the network I was able to test with Sophos XG web filtering disabled, but this didn't help.  I am in a remote location so while we are waiting for leased line construction we have a novel internet connection which mostly runs on 4G, failing over to the 5Mbps ADSL when appropriate or when we need a fixed IP.  I found that if I directed all Sophos update traffic down the ADSL I can install and update slowly, but consistently.  Using the 4G connection it always fails.  So it looks like my network provider (EE) is causing the problem.  Now I redirect all traffic for d1.sophosupd.com, d1.sophosupd.net, d2.sophosupd.com, d2.sophosupd.net, d3.sophosupd.com, d3.sophosupd.net, dci.sophosupd.com, dci.sophosupd.net and dwonloads.sophos.com down the BT ADSL line and have had no problems.

  • Thanks. 

    I can see from the logs on one of our update caches the following files are trying to be accessed but are missing:

    /sophos/customer/c/d3/cd381fa6ee7999ce7b57ea2f9ae3e8c137a7dadec20f402b8c3f7b18a906db11.dat

    /sophos/customer/a/9f/a9f8ef8fdfb4b9a8d6a16696f04106f9.dat

    Do you happen to know what the path would be to download these files direct from Sophos please?

  • Hello, I'd like to chime in w/ my recent experience on this issue.  Have 2 new user computers I've been setting up this week.  Got the "failed to download" error so I disabled server cache via sophos console, wait 15mins, then it installed fine.  I left the server cache disabled.  (computer is HP Deskpro, Win10 Pro)

    Today, installing to 2nd new computer, same error, nothing helped resolve except re-enabling the server cache after which it installed fine.  Makes no sense having to toggle the server cache everytime I see this...has been happening since the new direct download installer was released.  (computer is MS SurfaceBook2, Win10 Pro)

    Other than initial installs, all agents have been updating fine.

    Hope this helps.

Reply
  • Hello, I'd like to chime in w/ my recent experience on this issue.  Have 2 new user computers I've been setting up this week.  Got the "failed to download" error so I disabled server cache via sophos console, wait 15mins, then it installed fine.  I left the server cache disabled.  (computer is HP Deskpro, Win10 Pro)

    Today, installing to 2nd new computer, same error, nothing helped resolve except re-enabling the server cache after which it installed fine.  Makes no sense having to toggle the server cache everytime I see this...has been happening since the new direct download installer was released.  (computer is MS SurfaceBook2, Win10 Pro)

    Other than initial installs, all agents have been updating fine.

    Hope this helps.

Children
  • Hello Guys. I had the same problem. Thought it was a firewall issue.  I stopped the services on all 4 of my update caches and the problem went away. Any further updates on a resolution from support?

     

    Nick

  • Hey Nick,

     

    Sadly version 1.3 of the installer still hasn't fixed the issue for us. I'm still using the workaround I mentioned in my OP. I'm going to try installing a server cache locally here to see if that will help with the issue at all as this has become seriously annoying and Sophos support has been pretty much useless in resolving this issue.

  • We just started having these problems as well:

     

    Error msg in C:\ProgramData\Sophos\CloudInstaller\Logs

    WARNING : SUL error: [E35582] [DetailedException: File copy failed. [File: 'e37b50a63593a4110759990e6b55e108x000.dat' ] [From: 'http://d1.sophosupd.com/update/e37b50a63593a4110759990e6b55e108x000.dat' ] [To: 'C:/ProgramData/Sophos/CloudInstaller/AutoUpdatePreparation/data/Warehouse/e37b50a63593a4110759990e6b55e108x000.dat' ] ]

    ERROR : DownloadCommand::onRun() failed with std::exception: Session::synchronize failed with error code 4

    INFO : Command 'Download' completed with failure with reboot code '0' and error message 'Could not download software'.

    ERROR : Installation failed.

     

    If i go to the link ( http://d1.sophosupd.com/update/e37b50a63593a4110759990e6b55e108x000.dat ) it downloads no problem. Also we have valid licence. And dont have any cacheing turned on in "Manage Update Caches and Message Relays" . Im in the process of trying to turn on the cacheing atm to see if smt changes but i dont think it will...

    On our sophos utm (SG330 9.509-3) i also turned off "Force caching for Sophos Endpoint updates"