Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 9 subscribers
  • Views 10030 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

sophos-endpoint-protection-installer---installation-failed-could-not-download-software

CHDV

Hello,

I get the same problem than others here, but it appears in my case that it's on only some servers and the problem is due to the certificates or the domain.

We tried to put one server which have the problem out of our domain, and the installation was fine. But we don't understand why because every servers have the same GPO and only some of them got the issue.

When I look on the CAPI2 logs, I can see 3 errors at each installation I tried :

And also a log in Sophos logs :

2018-10-23T09:37:09.2032723Z INFO : Sending HTTP 'GET' request to: full/central/windows/business/installer/latest.tar.gz
2018-10-23T09:37:09.2177360Z WARNING : WinHttpGetProxyForUrl returned: 12180
2018-10-23T09:37:09.2177360Z INFO : Attempting to connect using proxy '' of type 'Empty Proxy'.
2018-10-23T09:37:09.2177360Z INFO : Set security protocol: 00000800
2018-10-23T09:37:09.2177360Z INFO : Opening connection to downloads.sophos.com
2018-10-23T09:37:09.2177360Z INFO : Request content size: 0
2018-10-23T09:37:09.4366705Z ERROR : WINHTTP_CALLBACK_STATUS_SECURE_FAILURE: 8
2018-10-23T09:37:09.4366705Z INFO : WINHTTP_CALLBACK_STATUS_SECURE_FAILURE: WINHTTP_CALLBACK_STATUS_FLAG_INVALID_CA
2018-10-23T09:37:09.4366705Z ERROR : WinHttpSendRequest failed with certificate check failure and error 12175
2018-10-23T09:37:09.4366705Z INFO : Failed to connect using proxy '' with error: WinHttpSendRequest failed: certificate check failure
2018-10-23T09:37:09.4366705Z INFO : Cleaning up extracted files
2018-10-23T09:37:10.5147771Z INFO : FindMainWindow: pid=0
2018-10-23T09:37:10.5147771Z ERROR : Exception: Failed to download stage-2 archive. Status code: --: Failed to connect with any proxy: certificate check failure

Of course, we tried to put some rules on the firewall to allow everything which want to go to Sophos websites/ports and I also tried to launch the installation with the proxy settings whithout success

Case has been opened to the Sophos (French) support but they don't find what is my problem : 8394104

Thanks for you help

ML



This thread was automatically locked due to age.
Parents Reply
  • 0 in reply to CHDV

    Hi CHDV,

    Thank you for your response. This issue is quite strange. It certainly contains errors that would direct me to suspect SSL inspection related issue. Does connecting to Domain mean also connecting to a different Firewall/Proxy by any chance? Can this be reproduced again? Do we have a support case so that I can review the logs on the same for you ?

    Regards,

    Adithyan Thangaraj
    Community Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

Children
Unfiltered HTML