Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

Updates Failing

  		Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Web & Mail Security] >> GFI MailSecurity >> Updates Failing Page: [1]
Login
Message << Older Topic   Newer Topic >>
Updates Failing - 25.Mar.2009 3:52:35 AM   
nico

 

Posts: 3
Joined: 25.Mar.2009
Status: offline 		Hi,
Subject: GFI ContentSecurity - Failed to download Norman Anti-Virus update files.
 
Failed to download Norman Anti-Virus update files.
 
Date: 3/25/2009 10:53:52 AM
Server: XXXXX
Error details: The underlying connection was closed: An unexpected error occurred on a receive.


We are not behind a Proxy.
We can access gfi.com without a problem.

< Message edited by nico -- 25.Mar.2009 4:00:28 AM >
Post #: 1
RE: Updates Failing - 26.Mar.2009 2:35:25 AM   
Nicks

 

Posts: 2741
Joined: 17.Mar.2003
Status: offline 		Hi,

How often did you get this error message. Did subsequent updates fail also? Is MailSecurity reporting this error for Norman content updates only?

Can you check when is the last time that MailSecurity updated the Norman content updates from the MailSecurity configuration -> Virus Scanning Engines -> Norman Anti-Virus -> Updates tab. The date of the last update is found in the Automatic updates options section.

_____________________________

Nicholas Sciberras
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to nico)
Post #: 2
RE: Updates Failing - 26.Mar.2009 8:13:13 AM   
nico

 

Posts: 3
Joined: 25.Mar.2009
Status: offline 		The last successful update we had was on 03/18 .
After that - nothing for either Bitdefender or Norman.
We did not change any settings on our side - so why the updates started to fail after that date is beyond me.

(in reply to nico)
Post #: 3
RE: Updates Failing - 26.Mar.2009 9:06:25 AM   
Nicks

 

Posts: 2741
Joined: 17.Mar.2003
Status: offline 		Hi,

Did you update with the patch documented in http://kbase.gfi.com/showarticle.asp?id=KBID003497

_____________________________

Nicholas Sciberras
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to nico)
Post #: 4
RE: Updates Failing - 30.Mar.2009 4:54:39 AM   
nico

 

Posts: 3
Joined: 25.Mar.2009
Status: offline 		Yes, have applied the patch, restarted, still the same error.

Error details: The underlying connection was closed: An unexpected error occurred on a receive.

(in reply to nico)
Post #: 5
RE: Updates Failing - 30.Mar.2009 11:05:22 AM   
Nicks

 

Posts: 2741
Joined: 17.Mar.2003
Status: offline 		Hi nico,

The only other thing that I can think of that can cause this problem is a firewall which may be closing the connection unexpectedly.

Should the problem persist, we would need to investigate further. Please follow the procedure at http://forums.gfi.com/Version_and_Build_Information/m_900735293/tm.htm to generate a set of troubleshooting files and submitting these to GFI support.

_____________________________

Nicholas Sciberras
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to nico)
Post #: 6
RE: Updates Failing - 16.Apr.2009 5:48:38 AM   
rolflin

 

Posts: 4
Joined: 16.Apr.2009
Status: offline 		I have  a related problem.
Version: 10.0
Build: 20090409

No recents changes on my firewall rules for this machine, but debug log of autoupdate shows this error:


2009-04-16,12:42:28,655,1,"#00000ECC","#00000095","info   ","autoupdate","AuCore::AuCore()"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","AuCore::DoUpdate()"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","mtx: c:|archivos de programa|gfi|contentsecurity|updater|kaspersky"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","AuCore::UpdateState(KASPERSKY)"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","Invoking AuLicense"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","Invoking AuDownload"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","AuDownload::DoWork()"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","AuCore::UpdateState(KASPERSKY)"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","AuDownload::init_context()"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","MAXTRIES: 3"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","AuDownload::download()"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","update server: http://update005.gfi.com"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","engine_directory: C:\Archivos de programa\GFI\ContentSecurity\updater\KASPERSKY"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","version_file_name: kaspersky_current_revision.txt"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","full_file_name: kaspersky_current_version.zip"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","full_file_name_inner: kaspersky.zip"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","local_version_file: C:\Archivos de programa\GFI\ContentSecurity\updater\KASPERSKY\kaspersky_current_revision.txt"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","local_version_file_tmp: C:\Archivos de programa\GFI\ContentSecurity\updater\KASPERSKY\kaspersky_current_revision.txt.tmp"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","local_version_file_checked: C:\Archivos de programa\GFI\ContentSecurity\updater\KASPERSKY\kaspersky_current_revision.txt.checked"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","remote_baseurl: http://update005.gfi.com/av"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","remote_version_file: /av/kaspersky_current_revision.txt"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","remote_full_file: /av/kaspersky_current_version.zip"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","local_full_file_tmp: C:\Archivos de programa\GFI\ContentSecurity\updater\KASPERSKY\kaspersky_current_version.zip"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","warning","autoupdate","warning: Local version file does not exists, downloading full version"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","AuDownload::download_full_update()"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","postdata: license=XXXXX&path=/av/kaspersky_current_version.zip&email=zxxzxzxzxxr@mydomain.com"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","remoteurl: http://update005.gfi.com/license/gfi.key"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","localdownloadpath: C:\Archivos de programa\GFI\ContentSecurity\updater\KASPERSKY\kaspersky_current_version.zip"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","unzip_source_file: C:\Archivos de programa\GFI\ContentSecurity\updater\KASPERSKY\kaspersky_current_version.zip"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","unzip_target_dir: C:\Archivos de programa\GFI\ContentSecurity\updater\KASPERSKY\kaspersky_current_version.zip.unzipped"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","AuDownload::DownloadFilePost()"
2009-04-16,12:42:28,655,1,"#00000ECC","#00000078","info   ","autoupdate","Starting async request"
2009-04-16,12:42:28,671,1,"#00000ECC","#00000078","info   ","autoupdate","async request started, getting response"
2009-04-16,12:42:28,671,1,"#00000ECC","#0000003C","info   ","autoupdate","ReadCallback()"
2009-04-16,12:42:36,173,1,"#00000ECC","#00000078","error  ","autoupdate","error: Web request error"
2009-04-16,12:42:36,173,1,"#00000ECC","#00000078","error  ","autoupdate","error: Protocol error"
2009-04-16,12:42:36,173,1,"#00000ECC","#00000078","error  ","autoupdate","error: Status: 417"
2009-04-16,12:42:36,173,1,"#00000ECC","#00000078","error  ","autoupdate","error: Status Description: Expectation failed"

------edit-----
removed license key


< Message edited by Nicks -- 16.Apr.2009 8:17:12 AM >

(in reply to Nicks)
Post #: 7
RE: Updates Failing - 16.Apr.2009 8:27:08 AM   
John Letourneau

 

Posts: 1659
Joined: 28.Apr.2008
Status: offline 		rolflin,

Do you have a proxy server configured for use in GFI MailSecurity?

_____________________________

Regards,
John Letourneau - Technical Support Team Lead
GFI Software - www.gfi.com

(in reply to rolflin)
Post #: 8
RE: Updates Failing - 16.Apr.2009 9:44:38 AM   
rolflin

 

Posts: 4
Joined: 16.Apr.2009
Status: offline 		Not at all.

But i have an internal one, for desktop clients, i don't use it for servers or appliances.
This machine is on DMZ zone , i can access directly internet.

I hace checked all config settings on gfi, and i am sure not using proxy but  i have alerts on my firewall requesting acces from that Ip on dmz lan to the internal proxy.

Any idea? Why are some update components discovering my internal server and using it without any explicit configuration?


EDIT!

I've found the solution.
Corrupted policy on active directory!
And remove an entry on the registry of that server(and others also)

Check this link, maybe usefull
http://www.eggheadcafe.com/conversation.aspx?messageid=34115527&threadid=33141738

The problem is that update services seems to use the registry values for default user so you must deonfigure it on the policies that involve that server/user(normally the default one is the worng one).
On the servers that were affected
DELETE values within:
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\InternetSettings\Connections\DefaultConnectionSettings

Clear the ProxyEnable & ProxyServer Values
HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\InternetSettings

Reboot server and check the .default registry settings.

< Message edited by rolflin -- 16.Apr.2009 1:01:58 PM >

(in reply to John Letourneau)
Post #: 9
RE: Updates Failing - 17.Apr.2009 2:36:11 AM   
Nicks

 

Posts: 2741
Joined: 17.Mar.2003
Status: offline 		Hi,

It is using the default user, since the GFI Content Security Auto-Updater Service is using the Local System account to log on.

_____________________________

Nicholas Sciberras
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to rolflin)
Post #: 10
RE: Updates Failing - 17.Apr.2009 4:39:56 AM   
rolflin

 

Posts: 4
Joined: 16.Apr.2009
Status: offline
quote:

ontent Security Auto-Updater Service is using the Local System account to log on.


Totally , you are right, bit it's overriding the proxy options for updates. That's normal?
i mean...
IE or firefox....not using proxy...
default user has proxie(i've make this not to happen again)

GFi explicit NOT using proxy and suddenly the proccess of updates uses proxie?

I don't know if that can be considered a bug or not.
But i'ts a little bit complicated to understand why it's acting like it does.

(in reply to Nicks)
Post #: 11
RE: Updates Failing - 17.Apr.2009 6:37:01 AM   
Nicks

 

Posts: 2741
Joined: 17.Mar.2003
Status: offline 		Normally, clients have difficulties when configuring the proxy settings for the Local System user. That was the main reason why we introduced proxy settings in MailSecurity.

In your case, it seems that somehow the proxy settings for the Local System user have been configured by some other process. Could it be that you had other services which could have changed this.

_____________________________

Nicholas Sciberras
GFI Software - www.gfi.com
Messaging, Content Security & Network Security Software

(in reply to rolflin)
Post #: 12
Page:   [1]
All Forums >> [Web & Mail Security] >> GFI MailSecurity >> Updates Failing Page: [1]
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts