Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Replies 16 replies
  • Subscribers 0 subscribers
  • Views 4917 views
  • Users 0 members are here
Options
Suggested

[8.920][ANSWERED] Endpoint does not work at all

barkas
So I have one endpoint installed, it doesn't communicate with the UTM. It also has no update source configured, so it won't update.
The UTM does not see the endpoint.

I've reinstalled it and I've restarted epsecd but it doesn't help.

The following repeats in the log more or less every 30 seconds: 


2012:04:06-13:55:44 astaro epsecd[17647]: |========================================================================= 

2012:04:06-13:55:44 astaro epsecd[17647]: T Epsec::Logic::Client::_report:176() => $VAR1 = { 

2012:04:06-13:55:44 astaro epsecd[17647]: 'reports' => [ 

2012:04:06-13:55:44 astaro epsecd[17647]: { 

2012:04:06-13:55:44 astaro epsecd[17647]: 'ack_id' => 120258, 

2012:04:06-13:55:44 astaro epsecd[17647]: 'timestamp' => '2012-04-06 11:54:02', 

2012:04:06-13:55:44 astaro epsecd[17647]: 'content' => '{"geo_ip":"","sav_status":1,"type":"ep_status","mcs_id":"","last_ping":"Fri Apr 6 11:54:02 2012","geo_city":"","geo_country":""}' 

2012:04:06-13:55:44 astaro epsecd[17647]: } 

2012:04:06-13:55:44 astaro epsecd[17647]: ], 

2012:04:06-13:55:44 astaro epsecd[17647]: 'operation' => 'Report' 

2012:04:06-13:55:44 astaro epsecd[17647]: }; 

2012:04:06-13:55:44 astaro epsecd[17647]: |========================================================================= 

2012:04:06-13:55:44 astaro epsecd[17647]: E Endpoint need to register in the Confd! 

2012:04:06-13:55:44 astaro epsecd[17647]: 

2012:04:06-13:55:44 astaro epsecd[17647]: 1. Epsec::Helpers::Client::update_confd:239() /Epsec/Helpers/Client.pm 

2012:04:06-13:55:44 astaro epsecd[17647]: 2. Epsec::Logic::Client::_report:185() /Epsec/Logic/Client.pm 

2012:04:06-13:55:44 astaro epsecd[17647]: 3. Epsec::Logic::Client:[:$]n_run:150() /Epsec/Logic/Client.pm 

2012:04:06-13:55:44 astaro epsecd[17647]: 4. (eval):55() /Epsec/Logic/Base.pm 

2012:04:06-13:55:44 astaro epsecd[17647]: 5. Epsec::Logic::Base::run:52() /Epsec/Logic/Base.pm 

2012:04:06-13:55:44 astaro epsecd[17647]: 6. main::top-level:58() client.pl


Once it did that: 

2012:04:06-13:35:07 astaro epsecd[15331]: |========================================================================= 

2012:04:06-13:35:07 astaro epsecd[15331]: T Epsec::Logic::Client::_report:176() => $VAR1 = { 

2012:04:06-13:35:07 astaro epsecd[15331]: 'reports' => [ 

2012:04:06-13:35:07 astaro epsecd[15331]: { 

2012:04:06-13:35:07 astaro epsecd[15331]: 'ack_id' => 120258, 

2012:04:06-13:35:07 astaro epsecd[15331]: 'timestamp' => '2012-04-06 11:33:23', 

2012:04:06-13:35:07 astaro epsecd[15331]: 'content' => '{"geo_ip":"","sav_status":1,"type":"ep_status","mcs_id":"","last_ping":"Fri Apr 6 11:33:22 2012","geo_city":"","geo_country":""}' 

2012:04:06-13:35:07 astaro epsecd[15331]: }, 

2012:04:06-13:35:07 astaro epsecd[15331]: { 

2012:04:06-13:35:07 astaro epsecd[15331]: 'ack_id' => 126424, 

2012:04:06-13:35:07 astaro epsecd[15331]: 'timestamp' => '2012-04-06 11:33:22', 

2012:04:06-13:35:07 astaro epsecd[15331]: 'content' => '{"mcs_id":"","type":"ALC","CompRes":{"RevID":"","Res":"Diff","policyType":"1"}}' 

2012:04:06-13:35:07 astaro epsecd[15331]: }, 

2012:04:06-13:35:07 astaro epsecd[15331]: { 

2012:04:06-13:35:07 astaro epsecd[15331]: 'ack_id' => 126425, 

2012:04:06-13:35:07 astaro epsecd[15331]: 'timestamp' => '2012-04-06 11:33:22', 

2012:04:06-13:35:07 astaro epsecd[15331]: 'content' => '{"ipv6":"fe80:0000:0000:0000:0000:0000:0000:0001%1","processorArchitecture":"x86","fqdn":"","internal_ip":"","operatingSystem":"WIN2003","mcs_id":"","type":"AGENT","platform":"mac","computerName":"","mac":null,"domainName":"","computerDescription":{},"lastLoggedOnUser":"\\"}' 

2012:04:06-13:35:07 astaro epsecd[15331]: } 

2012:04:06-13:35:07 astaro epsecd[15331]: ], 

2012:04:06-13:35:07 astaro epsecd[15331]: 'operation' => 'Report' 

2012:04:06-13:35:07 astaro epsecd[15331]: }; 

2012:04:06-13:35:07 astaro epsecd[15331]: |========================================================================= 

2012:04:06-13:35:07 astaro epsecd[15331]: E Endpoint need to register in the Confd! 

2012:04:06-13:35:07 astaro epsecd[15331]: 

2012:04:06-13:35:07 astaro epsecd[15331]: 1. Epsec::Helpers::Client::update_confd:239() /Epsec/Helpers/Client.pm 

2012:04:06-13:35:07 astaro epsecd[15331]: 2. Epsec::Logic::Client::_report:185() /Epsec/Logic/Client.pm 

2012:04:06-13:35:07 astaro epsecd[15331]: 3. Epsec::Logic::Client:[:$]n_run:150() /Epsec/Logic/Client.pm 

2012:04:06-13:35:07 astaro epsecd[15331]: 4. (eval):55() /Epsec/Logic/Base.pm 

2012:04:06-13:35:07 astaro epsecd[15331]: 5. Epsec::Logic::Base::run:52() /Epsec/Logic/Base.pm 

2012:04:06-13:35:07 astaro epsecd[15331]: 6. main::top-level:58() client.pl 

2012:04:06-13:35:07 astaro epsecd[15331]: |========================================================================= 

2012:04:06-13:35:07 astaro epsecd[15331]: E Endpoint need to register in the Confd! 

2012:04:06-13:35:07 astaro epsecd[15331]: 

2012:04:06-13:35:07 astaro epsecd[15331]: 1. Epsec::Helpers::Client::update_confd:239() /Epsec/Helpers/Client.pm 

2012:04:06-13:35:07 astaro epsecd[15331]: 2. Epsec::Logic::Client::_report:185() /Epsec/Logic/Client.pm 

2012:04:06-13:35:07 astaro epsecd[15331]: 3. Epsec::Logic::Client:[:$]n_run:150() /Epsec/Logic/Client.pm 

2012:04:06-13:35:07 astaro epsecd[15331]: 4. (eval):55() /Epsec/Logic/Base.pm 

2012:04:06-13:35:07 astaro epsecd[15331]: 5. Epsec::Logic::Base::run:52() /Epsec/Logic/Base.pm 

2012:04:06-13:35:07 astaro epsecd[15331]: 6. main::top-level:58() client.pl 

2012:04:06-13:35:07 astaro epsecd[15331]: |========================================================================= 

2012:04:06-13:35:07 astaro epsecd[15331]: E Endpoint need to register in the Confd! 

2012:04:06-13:35:07 astaro epsecd[15331]: 

2012:04:06-13:35:07 astaro epsecd[15331]: 1. Epsec::Helpers::Client::update_confd:239() /Epsec/Helpers/Client.pm 

2012:04:06-13:35:07 astaro epsecd[15331]: 2. Epsec::Logic::Client::_report:185() /Epsec/Logic/Client.pm 

2012:04:06-13:35:07 astaro epsecd[15331]: 3. Epsec::Logic::Client:[:$]n_run:150() /Epsec/Logic/Client.pm 

2012:04:06-13:35:07 astaro epsecd[15331]: 4. (eval):55() /Epsec/Logic/Base.pm 

2012:04:06-13:35:07 astaro epsecd[15331]: 5. Epsec::Logic::Base::run:52() /Epsec/Logic/Base.pm 

2012:04:06-13:35:07 astaro epsecd[15331]: 6. main::top-level:58() client.pl
Parents
  • 0
    There is no point restarting the service as it seems that the client hasn't been registered with the broker. 

    I am not sure if there is another way to re register the client apart from reinstalling the end client. Make sure the the communication between the host and the sophos broker is allowed (as well as the akamai servers as they are been used for updates)
Reply
  • 0
    There is no point restarting the service as it seems that the client hasn't been registered with the broker. 

    I am not sure if there is another way to re register the client apart from reinstalling the end client. Make sure the the communication between the host and the sophos broker is allowed (as well as the akamai servers as they are been used for updates)
Children
No Data
Unfiltered HTML