Failed to send HTTP request. Error=12175 (All data channel requests fail after upgrade to ePO 5.10.x)
Last Modified: 2021-12-08 17:31:49 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
After December 1, 2024, please log in to the Thrive Portal for support, knowledge articles, tools, and downloads. For information about using the Thrive Portal, view the Trellix Thrive Portal User Guide.
Failed to send HTTP request. Error=12175 (All data channel requests fail after upgrade to ePO 5.10.x)
Technical Articles ID:
KB91298
Last Modified: 2021-12-08 17:31:49 Etc/GMT Environment
ePolicy Orchestrator (ePO) 5.10.x
Problem 1
All data channel requests fail after you upgrade to ePO 5.10.x. Client agent fails to upload events to ePO. All managed products using the data channel are affected, for example:
All data channel communications are rejected. The 866 masvc(1848.2052) ahclient.Info: Agent Handler reports server busy. Response code 503. The E #06332 MCUPLOAD SecureHttp.cpp(987): Failed to send HTTP request. Error=12175 (12175) E #06332 NAIMSERV server.cpp(583): Failed to send request, err=0x80004005, HTTP status code=0 E #06332 NAIMSERV server.cpp(968): Error sending data channel message to application server I #06332 NAIMSERV Processed [MsgUpload] from <computer_name>:{1BEBF53A-0F42-11E9-28E1-0024D74A7EBC} in 16ms E #06332 NAIMSERV AgentServerCommHandler.cpp(691): Failed to process agent request I #06332 MOD_EPO epo request processed, rc=503, session ID=101818, session time=31ms Problem 2
You see an error when you try to install an ePO 5.10 Agent Handler. The error appears when you click Next on the ePolicy Orchestrator Server Information page. The following error is displayed in the ePO Console (installation doesn’t continue): In the System Change
You upgraded ePO to ePO 5.10, or applied ePO 5.10 Update 11 or later.
Cause
This issue occurs because the required cipher suites aren’t enabled on the ePO server or Agent Handler system. The result is the ePO Server service is unable to successfully communicate with the ePO Application Server service. ePO 5.10 (Update 11 and later) Requires Transport Layer Security (TLS) 1.2 and at least one of the following cipher suites to be enabled on the ePO server and Agent Handler:
Requires Transport Layer Security (TLS) 1.2 and at least one of the following cipher suites to be enabled on the ePO server and Agent Handler:
Solution
Enable at least one, but ideally all four, of the required cipher suites on the ePO server, or Agent Handler:
Affected ProductsLanguages:This article is available in the following languages: |
|