Endpoint Agent - Installation

Hi Vladimir,

Please post the installation error log file which automatically pops up when the installation fails.

Also, refer the guide here. 

Thanks

Hi

Sorry, if i go to the link: http://d3.sophosupd.com/update/catalogue/sdds.utm_91_ug2.xml = Not Found

it is fine ?

https://community.sophos.com/products/unified-threat-management/astaroorg/f/utm-9-2-beta/65303/9-165-open-endpoint-protection-fails-to-update

HI VladimirChalnik, 

Allow us some time to replicate the issue . Also Could you please send via Private message, the Bootstrap logs from Temp folder by going to RUN "%temp%". and any other log files relevant to Sophos

Thanks and Regards 

Aditya Patel 

Thanks for your reply!

Of course

I send.

Hi VladimirChalnik, 

According to the logs , seems to me that all components were installed . But the update has failed. So I would like you to get logs from the path below  

C:\ProgramData\Sophos\AutoUpdate\Logs 

Also could you check again bypassed the firewall.

Thanks and Regards

Aditya Patel

I send.

please see the configuration file (Config\iconn.cfg)

ConnectionAddress = sophos:http://d3.sophosupd.com/update/catalogue/sdds.utm_91_ug2.xml

if I open this link in a browser, the file is not found.
perhaps because of this no updates.

"Also could you check again bypassed the firewall."

In the windows ? firewall is OFF.

I send.

please see the configuration file (Config\iconn.cfg)

ConnectionAddress = sophos:http://d3.sophosupd.com/update/catalogue/sdds.utm_91_ug2.xml

if I open this link in a browser, the file is not found.
perhaps because of this no updates.

"Also could you check again bypassed the firewall."

In the windows ? firewall is OFF.

HI VladimirChalnik, 

Sorry for the inconvenience caused . I have checked the logs from the endpoint and determined that it did not have any policy . So it could not be updated. . I would request one more log to check on the UTM 

in SSH run  command cat /var/log/epsecd.log 

Thanks

Aditya Patel

HI

i send.

in this position already 5 hours....

Hi VladimirChalnik, 

After going through the Logs from both UTM and Endpoint , We have found the issue is an open BUG ID NUTM-5297 Please watch out for future release notes for this BUG.  This is determined by the logs received . 

E id="4281" severity="crit" sys="System" sub="epsecd" name="Unexpected error: Broker closed the connection at /</usr/local/bin/epp_client.plx>Epsec/Logic/Client.pm line 1297." effect="Can't talk to Sophos LiveConnect"
2016:10:12-06:44:24 peit epsecd[6297]:
2016:10:12-06:44:24 peit epsecd[6297]: 1. Epsec::Utils::Logging::_log:59() /</usr/local/bin/epp_client.plx>Epsec/Utils/Logging.pm
2016:10:12-06:44:24 peit epsecd[6297]: 2. Epsec::Logic::Client::on_error:1461() /</usr/local/bin/epp_client.plx>Epsec/Logic/Client.pm
2016:10:12-06:44:24 peit epsecd[6297]: 3. Epsec::Logic::Base::run:60() /</usr/local/bin/epp_client.plx>Epsec/Logic/Base.pm
2016:10:12-06:44:24 peit epsecd[6297]: 4. main::top-level:63() client.pl

You may open a Ticket to add such instances. or wait for an update on UTM.

Thanks and Regards

Aditya Patel  | Network and Security Engineer