This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Install UTM endpoint agent behind a proxy

Hi,

I'd like to try out the Sophos Endpoint protection as we have 5 free users available on our UTM 425.
I uninstalled our trendMicro OfficeScan and downloaded the full installer.
Our UTM are in non-transparent proxy mode and the installer failed when checking for Internet connectivity :

7/01/2014,11:43:49,Informations,------------------ Beginning installation of Sophos Anti-Virus and AutoUpdate ------------------,

7/01/2014,11:43:49,Informations,Version d'installation 2.10.4.5,

7/01/2014,11:43:49,Informations,Command line: c:\users\***\appdata\local\temp\sophos_bootstrap\setup.exe -server mcs1-b4f7.broker.sophos.com -token *****************,

7/01/2014,11:43:49,Informations,Le programme d'installation a été exécuté depuis C:\Users\nida\AppData\Local\Temp\sophos_bootstrap,

7/01/2014,11:43:49,Informations,Vérification en cours pour savoir si Sophos Anti-Virus ou Sophos AutoUpdate sont installés...,

7/01/2014,11:43:50,Informations,Vérification en cours pour savoir si l'utilisateur est un membre du groupe Administrateurs...,

7/01/2014,11:43:50,Informations,Lancement en cours de l'assistant pour recueillir des informations sur l'utilisateur...,

7/01/2014,11:43:54,Informations,Starting the install sequence.,

7/01/2014,11:43:54,Informations,Checking for internet connectivity...,

7/01/2014,11:44:39,ERREUR,Failed to send a WinHttp request. The error code was 12002 (The operation timed out).,

7/01/2014,11:44:39,Informations,Checking for internet connectivity...,

7/01/2014,11:45:23,ERREUR,Failed to send a WinHttp request. The error code was 12002 (The operation timed out).,

7/01/2014,11:45:23,ERREUR,Impossible d'établir une connexion Internet.,

7/01/2014,11:50:40,Informations,------------------ Installation program finishing with code 143 ------------------,

Any way to install it behind our proxy?

Nicolas

This thread was automatically locked due to age.

Parents

0 jmtheron over 11 years ago

I have the same problem, I also use a non transparent proxy and yes I also have the exception.
2/11/2014,11:04:41 AM,Information,------------------ Beginning installation of Sophos Anti-Virus and AutoUpdate ------------------,
2/11/2014,11:04:41 AM,Information,Setup version 2.10.4.5,
2/11/2014,11:04:41 AM,Information,Command line: c:\users\jonath~1\appdata\local\temp\sophos_bootstrap\setup.exe -server mcs1-6d27.broker.sophos.com -token *****************,
2/11/2014,11:04:41 AM,Information,Setup program was run from C:\Users\JONATH~1\AppData\Local\Temp\sophos_bootstrap,
2/11/2014,11:04:42 AM,Information,Checking if Sophos Anti-Virus or Sophos AutoUpdate are installed...,
2/11/2014,11:04:42 AM,Information,Checking if the user is a member of the Administrators group...,
2/11/2014,11:04:42 AM,Information,Starting wizard to collect information from user...,
2/11/2014,11:04:50 AM,Information,Starting the install sequence.,
2/11/2014,11:04:50 AM,Information,Checking for internet connectivity...,
2/11/2014,11:05:35 AM,ERROR,Failed to send a WinHttp request. The error code was 12002 (The operation timed out).,
2/11/2014,11:05:35 AM,Information,Checking for internet connectivity...,
2/11/2014,11:06:19 AM,ERROR,Failed to send a WinHttp request. The error code was 12002 (The operation timed out).,
2/11/2014,11:06:19 AM,ERROR,An Internet connection could not be established.,
2/11/2014,11:08:26 AM,Information,------------------ Installation program finishing with code 143 ------------------,

The thing is the traffic is not on port 8080 but ports 80 and 443.

Now I have added a firewall rule to allow 80 and 443 to the destination of Sophos LiveConnect DNS host(Built-in) resolves to the correct broker IP(mcs1-6d27.broker.sophos.com) I checked and the ports is open now.

When I install the endpoint the firewall log is showing that the endpoint is trying to connect to:
195.59.150.17:80
195.59.150.24:80
195.59.150.56:80
23.43.75.27 :80

These are being dropped by the firewall, witch of these do I need to add to my firewall rule, to get the endpoint to install.

How does the endpoint installation test the internet connection?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 jmtheron over 11 years ago

I have the same problem, I also use a non transparent proxy and yes I also have the exception.
2/11/2014,11:04:41 AM,Information,------------------ Beginning installation of Sophos Anti-Virus and AutoUpdate ------------------,
2/11/2014,11:04:41 AM,Information,Setup version 2.10.4.5,
2/11/2014,11:04:41 AM,Information,Command line: c:\users\jonath~1\appdata\local\temp\sophos_bootstrap\setup.exe -server mcs1-6d27.broker.sophos.com -token *****************,
2/11/2014,11:04:41 AM,Information,Setup program was run from C:\Users\JONATH~1\AppData\Local\Temp\sophos_bootstrap,
2/11/2014,11:04:42 AM,Information,Checking if Sophos Anti-Virus or Sophos AutoUpdate are installed...,
2/11/2014,11:04:42 AM,Information,Checking if the user is a member of the Administrators group...,
2/11/2014,11:04:42 AM,Information,Starting wizard to collect information from user...,
2/11/2014,11:04:50 AM,Information,Starting the install sequence.,
2/11/2014,11:04:50 AM,Information,Checking for internet connectivity...,
2/11/2014,11:05:35 AM,ERROR,Failed to send a WinHttp request. The error code was 12002 (The operation timed out).,
2/11/2014,11:05:35 AM,Information,Checking for internet connectivity...,
2/11/2014,11:06:19 AM,ERROR,Failed to send a WinHttp request. The error code was 12002 (The operation timed out).,
2/11/2014,11:06:19 AM,ERROR,An Internet connection could not be established.,
2/11/2014,11:08:26 AM,Information,------------------ Installation program finishing with code 143 ------------------,

The thing is the traffic is not on port 8080 but ports 80 and 443.

Now I have added a firewall rule to allow 80 and 443 to the destination of Sophos LiveConnect DNS host(Built-in) resolves to the correct broker IP(mcs1-6d27.broker.sophos.com) I checked and the ports is open now.

When I install the endpoint the firewall log is showing that the endpoint is trying to connect to:
195.59.150.17:80
195.59.150.24:80
195.59.150.56:80
23.43.75.27 :80

These are being dropped by the firewall, witch of these do I need to add to my firewall rule, to get the endpoint to install.

How does the endpoint installation test the internet connection?
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data

Install UTM endpoint agent behind a proxy

Submitted a Tech Support Case lately from the Support Portal?