Master Repository Update fails when traffic to the ePO server is blocked
Last Modified: 2023-08-02 09:07:17 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Master Repository Update fails when traffic to the ePO server is blocked
Technical Articles ID:
KB92591
Last Modified: 2023-08-02 09:07:17 Etc/GMT Environment
ePolicy Orchestrator (ePO) 5.10.x
Problem
The ePO Server task log reports Failed when the Update Master Repository task is run. The failure is linked to a file named NOTES:
The I #06692 SITEMGR Downloading file JcmContent.dll_Win32 from site McAfeeHttp::Current\JTICLIENTMETA\Content\0000 I #06692 INETMGR Downloading file JcmContent.dll_Win32 from session 1, LocalDir=C:\Windows\TEMP\naiF68.tmp\00000002, RemoteDir=Current\JTICLIENTMETA\Content\0000. I #06692 NAINET Open URL: http://update.nai.com:80/Products/CommonUpdater/Current/JTICLIENTMETA/Content/0000/JcmContent.dll_Win32?hash=C21E46D4EB44061BD8E0C6EBEBB794CA478F755248B9BAEA13FD2F7F4E49233A I #06692 NAINET Trying to download using Microsoft WinInet library I #06692 NAINET Connecting to Real Server update.nai.com using INTERNET_OPEN_TYPE_DIRECT I #06692 NAINET No resume download needed, calling InternetOpenUrl I #06692 NAINET Downloading a file of total size: 2, content-length: 2 I #06692 NAINET InternetReadFile() failed, error 12002 I #06692 NAINET Failed to download the URL /Products/CommonUpdater/Current/JTICLIENTMETA/Content/0000/JcmContent.dll_Win32?hash=C21E46D4EB44061BD8E0C6EBEBB794CA478F755248B9BAEA13FD2F7F4E49233A using Wininet I #06692 NAINET Trying to download using windows socket library I #06692 NAINET Connecting to Real Server: update.nai.com on port: 80 E #06692 NAINET HTTPConnection.cpp(2245): Connected to Real Server: update.nai.com on port: 80. No Proxy used! I #06692 NAINET Sending HTTP GET Request Header. No Authentication used I #06692 NAINET Downloading a file of total size: 2284208, content-length: 0, Date: Thu, 06 Feb 2020 16:51:10 GMT W #04812 RMANJNI No agent handler assignments or assignment groups found in the database I #04812 RMANJNI Adding CCU071.corp.capitalcu.com from specified agent handlers to site list I #10032 RMANJNI Getting license data... W #04812 RMANJNI No agent handler assignments or assignment groups found in the database ... W #04812 RMANJNI No agent handler assignments or assignment groups found in the database I #04812 RMANJNI Adding CCU071.corp.capitalcu.com from specified agent handlers to site list E #06692 NAINET HTTPConnection.cpp(2638): Socket read timed out after: 600 secs E #06692 NAINET HTTPConnection.cpp(2592): Error, unexpected final file size, received 12248, expected 2284208 I #06692 INETMGR Download file JcmContent.dll_Win32 failed in session 1, nainet ret=10060. E #06692 SITEMGR Mirror.cpp(1119): Download file JcmContent.dll_Win32 from site McAfeeHttp::Current\JTICLIENTMETA\Content\0000 failed, hr=-2147467259 I #06692 SITEMGR 152064 bytes averted from download by using local validated files I #06692 NAINET HTTP Session closed A collected Wireshark trace shows the following:
NOTE: RST stands for Reset. Cause
There's a switch or router between the ePO server and the main download site. The network device is blocking the data stream to the ePO server.
Solution
You must investigate the network or device that's performing the filtering and blocking. Then, exclude or stop any action being taken on the traffic to the ePO server.
Affected ProductsLanguages:This article is available in the following languages: |
|