1 2 Previous Next 10 Replies Latest reply on Apr 10, 2013 12:17 PM by jstanley

    Epolicy 4.6 Migration Agent Communication Issues

      Currently i have an epolicy server setup and have around 400 agents talking back. We are about to migrate them from a Samba Domain to an AD domain and make some changes. 1) the server ip WILL change. 2) the DNS name that was used on the old side will point to the new server.

       

      I have tested a machine that was able to talk to the old domain and migrated it as a test. The DNS name resolves fine. However, i get an agent failure..

       

      Below is part of the log from the client

       

      /*

      2012-07-25 13:38:20    I    #2612    imsite    Connecting to site: 192.168.100.20 on port: 443

      2012-07-25 13:38:41    I    #2612    imsite    Did not connect to Real site: 192.168.100.20 on port: 443

      2012-07-25 13:38:41    I    #2612    imsite    Connecting to site: battleship on port: 443

      2012-07-25 13:38:41    I    #2612    naInet    HTTP Session closed

      2012-07-25 13:38:41    I    #2612    SpiPkgr    Using sequence number 21

      2012-07-25 13:38:41    i    #2612    Agent    Agent communication session started

      2012-07-25 13:38:41    i    #2612    Agent    Agent is sending FULL PROPS package to ePO server

      2012-07-25 13:38:41    i    #2612    Agent    Agent is connecting to ePO server

      2012-07-25 13:39:02    I    #2612    imutils    Trying with site: 192.168.100.20:80

      2012-07-25 13:39:02    I    #2612    naInet    HTTP Session initialized

      2012-07-25 13:39:02    I    #2612    imsite        Upload from: C:\ProgramData\McAfee\Common Framework\Unpack\pkg00129877114797940000_1153833637.spkg

      2012-07-25 13:39:02    I    #2612    imsite        Upload response target: C:\ProgramData\McAfee\Common Framework\Unpack\pkg00129877115219000000_3150171549.spkg

      2012-07-25 13:39:23    E    #2612    MfeCryptC    Error trace:

      2012-07-25 13:39:23    E    #2612    imsite     [uploadFile,,/spipe/pkg?AgentGuid={DCC2F70C-785A-4723-AE48-C4416ABEB9E7}&Source =Agent_3.0.0,pkg00129877114797940000_1153833637.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00129877115219000000_3150171549.spkg]->

      2012-07-25 13:39:23    E    #2612    MfeCryptC      Failed to load certificate C:\ProgramData\McAfee\Common Framework\cabundle.cer

      2012-07-25 13:39:23    E    #2612    MfeCryptC   

      2012-07-25 13:39:23    E    #2612    MfeCryptC    Error trace:

      2012-07-25 13:39:23    E    #2612    imsite     [uploadFile,,/spipe/pkg?AgentGuid={DCC2F70C-785A-4723-AE48-C4416ABEB9E7}&Source =Agent_3.0.0,pkg00129877114797940000_1153833637.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00129877115219000000_3150171549.spkg]->

      2012-07-25 13:39:23    E    #2612    MfeCryptC      Failed to setup new connection

      2012-07-25 13:39:23    E    #2612    MfeCryptC   

      2012-07-25 13:39:23    E    #2612    MfeCryptC    Error trace:

      2012-07-25 13:39:23    E    #2612    imsite     [uploadFile,,/spipe/pkg?AgentGuid={DCC2F70C-785A-4723-AE48-C4416ABEB9E7}&Source =Agent_3.0.0,pkg00129877114797940000_1153833637.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00129877115219000000_3150171549.spkg]->

      2012-07-25 13:39:23    E    #2612    MfeCryptC      Failed to load certificate C:\ProgramData\McAfee\Common Framework\cabundle.cer

      2012-07-25 13:39:23    E    #2612    MfeCryptC   

      2012-07-25 13:39:23    E    #2612    MfeCryptC    Error trace:

      2012-07-25 13:39:23    E    #2612    imsite     [uploadFile,,/spipe/pkg?AgentGuid={DCC2F70C-785A-4723-AE48-C4416ABEB9E7}&Source =Agent_3.0.0,pkg00129877114797940000_1153833637.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00129877115219000000_3150171549.spkg]->

      2012-07-25 13:39:23    E    #2612    MfeCryptC      Failed to setup new connection

      2012-07-25 13:39:23    E    #2612    MfeCryptC   

      2012-07-25 13:39:23    E    #2612    imsite    Error trace:

      2012-07-25 13:39:23    E    #2612    imsite     [uploadFile,,/spipe/pkg?AgentGuid={DCC2F70C-785A-4723-AE48-C4416ABEB9E7}&Source =Agent_3.0.0,pkg00129877114797940000_1153833637.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00129877115219000000_3150171549.spkg]->

      2012-07-25 13:39:23    E    #2612    imsite      NaInet library returned code == -92

      2012-07-25 13:39:23    E    #2612    imsite    Error trace:

      2012-07-25 13:39:23    E    #2612    imsite     [uploadFile,,/spipe/pkg?AgentGuid={DCC2F70C-785A-4723-AE48-C4416ABEB9E7}&Source =Agent_3.0.0,pkg00129877114797940000_1153833637.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00129877115219000000_3150171549.spkg]->

      2012-07-25 13:39:23    E    #2612    imsite      NaInet library returned code == -92

      2012-07-25 13:39:23    E    #2612    imsite    Error trace:

      2012-07-25 13:39:23    E    #2612    imsite     [uploadFile,,/spipe/pkg?AgentGuid={DCC2F70C-785A-4723-AE48-C4416ABEB9E7}&Source =Agent_3.0.0,pkg00129877114797940000_1153833637.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00129877115219000000_3150171549.spkg]->

      2012-07-25 13:39:23    E    #2612    imsite      The naInet library returned an error. [Parent error: NaInet library returned code == -92]

      2012-07-25 13:39:23    I    #2612    naInet    HTTP Session closed

      2012-07-25 13:39:23    e    #2612    Agent    Agent failed to communicate with ePO Server

      2012-07-25 13:39:23    i    #2612    Agent    Agent communication session closed

      2012-07-25 13:39:23    I    #2612    Agent    Setting flag to force full properties on next ASCI

      2012-07-25 13:39:23    I    #2612    Agent    Agent communication failed, result=-2400

      2012-07-25 13:39:23    I    #2612    Agent    Exponential retry in 1436 seconds, error=-2400(Unable to connect to ePO Server)

      2012-07-25 13:39:23    i    #2612    Agent    Agent will connect to the ePO Server in 23 minutes and 56 seconds.

      2012-07-25 13:39:23    I    #2612    Agent    Started processing a package..

      2012-07-25 13:39:23    I    #2612    SpiPkgr    Using sequence number 22

      2012-07-25 13:39:24    i    #2612    Agent    Agent communication session started

      2012-07-25 13:39:24    i    #2612    Agent    Agent is sending EVENT package to ePO server

      2012-07-25 13:39:24    i    #2612    Agent    Agent is connecting to ePO server

      2012-07-25 13:39:45    e    #2612    Agent    Agent failed to communicate with ePO Server

      2012-07-25 13:39:45    i    #2612    Agent    Agent communication session closed

      2012-07-25 13:39:45    I    #2612    Agent    Agent communication failed, result=-2400

      2012-07-25 13:39:45    I    #2612    Agent    Exponential retry in 426 seconds, error=-2400(Unable to connect to ePO Server)

      2012-07-25 13:39:45    i    #2612    Agent    Agent will connect to the ePO Server in 7 minutes and 6 seconds.

      2012-07-25 13:40:20    i    #148    Agent    Agent Started Enforcing policies

      2012-07-25 13:40:20    I    #148    Agent    Thread time-out occurred

      2012-07-25 13:40:20    I    #148    Manage    Enforcing policies

      2012-07-25 13:40:20    i    #148    Manage    Enforcing Policies for McAfee Agent

      2012-07-25 13:40:20    I    #148    Agent    CePOAgent::EnforcePolicy priority=-2

      2012-07-25 13:40:20    I    #148    Agent    Enforcing policies

      2012-07-25 13:40:20    I    #148    LstnSvr    Enforcing Policies

      2012-07-25 13:40:20    I    #148    Logging    Enforcing policies

      2012-07-25 13:40:20    I    #148    Manage    Enforcing policies

      2012-07-25 13:40:20    I    #148    UsrSpCt    Enforcing policies

      2012-07-25 13:40:20    I    #148    Sched    >>--CSchedule::EnforcePolicy

      2012-07-25 13:40:20    I    #148    Sched    >>--CSchedule::ModifyTask

      2012-07-25 13:40:20    I    #148    Sched    <<--CSchedule::ModifyTask

      2012-07-25 13:40:20    I    #148    Sched    WINDOWS VSE DEPLOYMENT - Last run time(local) is Thu Jul 05 12:46:32 2012

      2012-07-25 13:40:20    I    #148    Sched   

      2012-07-25 13:40:20    I    #148    Sched    0 fields of the task 4 are updated successfully

      2012-07-25 13:40:20    I    #148    Sched    >>--CSchedule::ModifyTask

      2012-07-25 13:40:20    I    #148    Sched    <<--CSchedule::ModifyTask

      2012-07-25 13:40:20    I    #148    Sched    Guided Configuration Created Update Task - Last run time(local) is Wed Jul 25 12:00:00 2012

      2012-07-25 13:40:20    I    #148    Sched   

      2012-07-25 13:40:20    I    #148    Sched    0 fields of the task 7 are updated successfully

      2012-07-25 13:40:20    I    #148    Sched    RunAtEnforcementEnabled not found in the task settings

      2012-07-25 13:40:20    I    #148    Sched    >>--CSchedule::ModifyTask

      2012-07-25 13:40:20    I    #148    Sched    <<--CSchedule::ModifyTask

      2012-07-25 13:40:20    I    #148    Sched    Install RSD - Last run time(local) is Thu Jul 05 13:01:48 2012

      2012-07-25 13:40:20    I    #148    Sched   

      2012-07-25 13:40:20    I    #148    Sched    0 fields of the task 8 are updated successfully

      2012-07-25 13:40:20    I    #148    Sched    >>--CSchedule::GetTask

      2012-07-25 13:40:20    I    #148    Sched    <<--CSchedule::GetTask

      2012-07-25 13:40:20    I    #148    Sched    >>--CSchedule::GetTask

      2012-07-25 13:40:20    I    #148    Sched    <<--CSchedule::GetTask

      2012-07-25 13:40:20    I    #148    Sched    >>--CSchedule::GetTask

      2012-07-25 13:40:20    I    #148    Sched    <<--CSchedule::GetTask

      2012-07-25 13:40:20    I    #148    Sched    <<--CSchedule::EnforcePolicy

      2012-07-25 13:40:20    I    #148    Manage    Initializing Event Interface

      2012-07-25 13:40:20    I    #148    Manage    EpoEventInf Interface: Initialization succeeded.

      2012-07-25 13:40:20    i    #148    Manage    Enforcing Policies for EPOAGENT3000META

      2012-07-25 13:40:20    i    #148    Manage    Enforcing Policies for EPOAGENT3000

      2012-07-25 13:40:20    I    #148    Manage    DeInitializing Event Interface

      2012-07-25 13:40:20    I    #148    Manage    EpoEventInf Interface: Deinitialization succeeded.

      2012-07-25 13:40:20    i    #148    Agent    Agent finished Enforcing policies

      2012-07-25 13:40:20    i    #148    Agent    Next policy enforcement in 5 minutes

        • 1. Re: Epolicy 4.6 Migration Agent Communication Issues
          jstanley

          The ASCI is failing with this NaInet return code: NaInet library returned code == -92

           

          That return code translates to a failure in the SSL handshake. A little higher in the log we see why: Failed to load certificate C:\ProgramData\McAfee\Common Framework\cabundle.cer

           

          So the agent is unable to load its signing certificate thus the SSL handshake with apache is failing. Here are some things to check:

          • Is cabundle.cer present in C:\ProgramData\McAfee\Common Framework\?
          • Is the certificate issued by your ePO server? It should be issued to "Orion_CA_<YOUR SERVER NAME>"
          • Are all clients failing to communicate or just some? If all clients are failing to communicate you may want to review the server.log on your ePO server (<ePO install directory>\DB\Logs)
          • 2. Re: Epolicy 4.6 Migration Agent Communication Issues

            Well, this is the first test im doing to an actual migration to the new server. The new server is Diff Computer, Same DNS, Diff IP. So new computers that are being setup alone on that network talk fine. it just seems that the computer that is coming from the old server is not working properly.

             

            I checked the Cert file, its there. signed as its supposed to.... Any ideas?

             

            Also, the Server NAME is different, but the DNS of the old server name points to the new server on the new network....

            • 3. Re: Epolicy 4.6 Migration Agent Communication Issues
              jstanley

              Well I'm not sure why a server-side issue would log in the agent log like that but perhaps the problem really resides on the ePO server itself. Are any agents able to communicate to this server? Check the server.log on the ePO server and see if it has any telling errors at the bottom.

               

              Renaming an ePO server may require special steps. Please see KB66620 for said steps as well as an example of some of the errors you might find in the server.log that I was alluding to above.

              • 4. Re: Epolicy 4.6 Migration Agent Communication Issues
                cpromen

                I am experiencing this same exact issue with one client that we are trying to migrate.  I have several others that are talking to the new ePO server just fine.  Did you ever get this issue resolved?

                • 5. Re: Epolicy 4.6 Migration Agent Communication Issues
                  cdobol

                  Did anyone find a solution to this?  I am having the same issue.   I have noticed that when the error occurs, for whatever reason the agent appears to be mixing up secure/non-secure ports.  It happens when I switch IP addresses and it goes between our agent handler and EPO server.  It appears that it doesn't try to reconnect to our Agent Handler on the secure port after it switches IP addresses.  Eventually it corrects itself, but it seems to be an extended amount of time.  It almost like after an IP switch the agent doesn't fully 'reset' itself and start a new handshake from square 1.  I'll most likely open a SR on this. 

                   

                  Windows 8

                  MA: 4.6.0.3122

                   

                  FAILS (8083)

                  2013-04-10 08:32:36.781             I             #2636   imutils  Trying with site: XX.XXX.XXX.XXX:8083

                  2013-04-10 08:32:36.781             I             #2636   naInet   HTTP Session initialized

                  2013-04-10 08:32:36.781             I             #2636   imsite                  Upload from: C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100707556870000_3134943735.spkg

                  2013-04-10 08:32:36.781             I             #2636   imsite                  Upload response target: C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100707567810000_1708357108.spkg

                  2013-04-10 08:32:42.376             E            #2636   MfeCryptC         Error trace:

                  2013-04-10 08:32:42.376             E            #2636   imsite   [uploadFile,,/spipe/pkg?AgentGuid={EA705787-9B64-46A4-A989-0762B1F1215F}&Source =Agent_3.0.0,pkg00130100707556870000_3134943735.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100707567810000_1708357108.spkg]->

                  2013-04-10 08:32:42.376             E            #2636   MfeCryptC           Failed to load certificate C:\ProgramData\McAfee\Common Framework\cabundle.cer

                  2013-04-10 08:32:42.376             E            #2636   MfeCryptC        

                  2013-04-10 08:32:36.781             I             #2636   imutils  Trying with site: XX.XXX.XXX.XXX:8083

                  2013-04-10 08:32:36.781             I             #2636   naInet   HTTP Session initialized

                  2013-04-10 08:32:36.781             I             #2636   imsite                  Upload from: C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100707556870000_3134943735.spkg

                  2013-04-10 08:32:36.781             I             #2636   imsite                  Upload response target: C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100707567810000_1708357108.spkg

                  2013-04-10 08:32:42.376             E            #2636   MfeCryptC         Error trace:

                  2013-04-10 08:32:42.376             E            #2636   imsite   [uploadFile,,/spipe/pkg?AgentGuid={EA705787-9B64-46A4-A989-0762B1F1215F}&Source =Agent_3.0.0,pkg00130100707556870000_3134943735.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100707567810000_1708357108.spkg]->

                  2013-04-10 08:32:42.376             E            #2636   MfeCryptC           Failed to load certificate C:\ProgramData\McAfee\Common Framework\cabundle.cer

                   

                  Success

                  • 6. Re: Epolicy 4.6 Migration Agent Communication Issues
                    jstanley

                    I'd need to see more of the log. Before it says "Trying with site:" the log should say "connecting to server" which may show a different IP and/or error. Also the server logs from the handler the agent is attempting to connect to covering the same time range as the agent log may prove helpful.

                    • 7. Re: Epolicy 4.6 Migration Agent Communication Issues
                      cdobol

                      Hopefully I have attached more of the log that will make it helpful.  I will try to explain what it appears to be doing.  The laptop is on the internet, outside of our corporate network.  We have a DMZ agent handler which works just fine.  Here it looks like it attempts to connect to our internal EPO server.  It tries on port 443 and fails (expected), it tries on port 8083 and it is expected to fail.. but  it appears to get tripped up using our non-secure port (8083) with cabundle.cer, then stops without trying to connect to our agent handler.  If I put this machine back on our corporate network, it will connect to our main EPO server just fine.   I think I will play around with changing the order of the agent handler preference to see if I can get it to connect to the AH if it was #1 (would connect to it via 443 before breaking on port 8083)....  

                       

                      In summary what this looks like to me right now is the agent tries to load a cert for a non-secure port, errors out, then stops trying to connect to additional agent handlers.

                       

                      2013-04-10 11:32:02.808             i             #3372   Agent    Agent started performing ASCI

                      2013-04-10 11:32:02.808             I             #3372   Agent    Network up ,Performing ASCI

                      2013-04-10 11:32:02.808             I             #3372   Agent    Collecting Properties

                      2013-04-10 11:32:02.808             I             #3372   Agent    Collecting IP address using Internet Manager

                      2013-04-10 11:32:02.902             I             #3372   naInet   HTTP Session initialized

                      ******* MAIN EPO SERVER COMMUNICATION ATTEMPT - EXPECTED TO FAIL

                      2013-04-10 11:32:02.902             I             #3372   imsite   Connecting to site:  1.2.3.4 on port: 443 

                      2013-04-10 11:32:04.262             I             #3372   imsite   Did not connect to Real site: 1.2.3.4 on port: 443

                      2013-04-10 11:32:04.262             I             #3372   imsite   Connecting to site: MYEPO.mycompanyl.com on port: 443

                      2013-04-10 11:32:04.277             I             #3372   naInet   HTTP Session closed

                      2013-04-10 11:32:04.309             I             #3372   Manage              Collecting Properties

                      2013-04-10 11:32:04.309             I             #3372   Manage              Initializing Event Interface

                      2013-04-10 11:32:04.340             I             #3372   Manage              EpoEventInf Interface: Initialization succeeded.

                      2013-04-10 11:32:04.340             i             #3372   Manage              Collecting Properties

                      2013-04-10 11:32:05.152             I             #3372   MsgQueue         Posting message to message queue

                      2013-04-10 11:32:05.184             I             #3372   Manage              CollectProperties through LPC interface for software EEADMIN_1000

                      2013-04-10 11:32:05.184             I             #3372   MsgQueue         Posting message to message queue

                      2013-04-10 11:32:05.262             I             #3372   Manage              DeInitializing Event Interface

                      2013-04-10 11:32:05.262             I             #3372   Manage              EpoEventInf Interface: Deinitialization succeeded.

                      2013-04-10 11:32:05.262             I             #3372   Agent    Agent is sending properties version to the ePO Server

                      2013-04-10 11:32:05.262             I             #3364   Agent    Started processing a package..

                      2013-04-10 11:32:05.262             I             #3364   Agent    Preparing Props Version Package

                      2013-04-10 11:32:05.277             I             #3364   Agent    Collecting IP address using Internet Manager

                      2013-04-10 11:32:05.277             I             #3364   naInet   HTTP Session initialized

                      ******* MAIN EPO SERVER COMMUNICATION ATTEMPT - EXPECTED TO FAIL

                      2013-04-10 11:32:05.277             I             #3364   imsite   Connecting to site: 1.2.3.4 on port: 443

                      2013-04-10 11:32:06.340             I             #3364   imsite   Did not connect to Real site: 1.2.3.4 on port: 443

                      2013-04-10 11:32:06.340             I             #3364   imsite   Connecting to site: MYEPO.mycompany.com on port: 443

                      2013-04-10 11:32:06.356             I             #3364   naInet   HTTP Session closed

                      2013-04-10 11:32:06.387             I             #3364   SpiPkgr Using sequence number 421

                      2013-04-10 11:32:06.387             i             #3364   Agent    Agent communication session started

                      2013-04-10 11:32:06.387             i             #3364   Agent    Agent is sending PROPS VERSION package to ePO server

                      2013-04-10 11:32:06.387             i             #3364   Agent    Agent is connecting to ePO server

                      ******* MAIN EPO SERVER COMMUNICATION ATTEMPT ON PORT 8083 (OUR NON-SSL PORT) - EXPECTED TO FAIL, ERRORS OUT AND FAILS TO CONTINUE TO TRY TO CONNECT TO THE AGENT HANDLER

                      2013-04-10 11:32:06.387             I             #3364   imutils  Trying with site: 1.2.3.4:8083

                      2013-04-10 11:32:06.387             I             #3364   naInet   HTTP Session initialized

                      2013-04-10 11:32:06.387             I             #3364   imsite                  Upload from: C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100815252620000_2788964963.spkg

                      2013-04-10 11:32:06.387             I             #3364   imsite                  Upload response target: C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100815263870000_884906786.spkg

                      2013-04-10 11:32:07.809             E            #3364   MfeCryptC         Error trace:

                      2013-04-10 11:32:07.809             E            #3364   imsite   [uploadFile,,/spipe/pkg?AgentGuid={EA705787-9B64-46A4-A989-0762B1F1215F}&Source =Agent_3.0.0,pkg00130100815252620000_2788964963.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100815263870000_884906786.spkg]->

                      2013-04-10 11:32:07.809             E            #3364   MfeCryptC           Failed to load certificate C:\ProgramData\McAfee\Common Framework\cabundle.cer

                      2013-04-10 11:32:07.809             E            #3364   MfeCryptC        

                      2013-04-10 11:32:07.809             E            #3364   MfeCryptC         Error trace:

                      2013-04-10 11:32:07.809             E            #3364   imsite   [uploadFile,,/spipe/pkg?AgentGuid={EA705787-9B64-46A4-A989-0762B1F1215F}&Source =Agent_3.0.0,pkg00130100815252620000_2788964963.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100815263870000_884906786.spkg]->

                      2013-04-10 11:32:07.809             E            #3364   MfeCryptC           Failed to setup new connection

                      2013-04-10 11:32:07.809             E            #3364   MfeCryptC        

                      2013-04-10 11:32:12.325             E            #3364   MfeCryptC         Error trace:

                      2013-04-10 11:32:12.325             E            #3364   imsite   [uploadFile,,/spipe/pkg?AgentGuid={EA705787-9B64-46A4-A989-0762B1F1215F}&Source =Agent_3.0.0,pkg00130100815252620000_2788964963.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100815263870000_884906786.spkg]->

                      2013-04-10 11:32:12.325             E            #3364   MfeCryptC           Failed to load certificate C:\ProgramData\McAfee\Common Framework\cabundle.cer

                      2013-04-10 11:32:12.325             E            #3364   MfeCryptC        

                      2013-04-10 11:32:12.325             E            #3364   MfeCryptC         Error trace:

                      2013-04-10 11:32:12.325             E            #3364   imsite   [uploadFile,,/spipe/pkg?AgentGuid={EA705787-9B64-46A4-A989-0762B1F1215F}&Source =Agent_3.0.0,pkg00130100815252620000_2788964963.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100815263870000_884906786.spkg]->

                      2013-04-10 11:32:12.325             E            #3364   MfeCryptC           Failed to setup new connection

                      2013-04-10 11:32:12.325             E            #3364   MfeCryptC        

                      2013-04-10 11:32:12.325             E            #3364   imsite   Error trace:

                      2013-04-10 11:32:12.325             E            #3364   imsite   [uploadFile,,/spipe/pkg?AgentGuid={EA705787-9B64-46A4-A989-0762B1F1215F}&Source =Agent_3.0.0,pkg00130100815252620000_2788964963.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100815263870000_884906786.spkg]->

                      2013-04-10 11:32:12.325             E            #3364   imsite     NaInet library returned code == -92

                      2013-04-10 11:32:12.325             E            #3364   imsite   Error trace:

                      2013-04-10 11:32:12.325             E            #3364   imsite   [uploadFile,,/spipe/pkg?AgentGuid={EA705787-9B64-46A4-A989-0762B1F1215F}&Source =Agent_3.0.0,pkg00130100815252620000_2788964963.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100815263870000_884906786.spkg]->

                      2013-04-10 11:32:12.325             E            #3364   imsite     NaInet library returned code == -92

                      2013-04-10 11:32:12.325             E            #3364   imsite   Error trace:

                      2013-04-10 11:32:12.325             E            #3364   imsite   [uploadFile,,/spipe/pkg?AgentGuid={EA705787-9B64-46A4-A989-0762B1F1215F}&Source =Agent_3.0.0,pkg00130100815252620000_2788964963.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100815263870000_884906786.spkg]->

                      2013-04-10 11:32:12.325             E            #3364   imsite     The naInet library returned an error. [Parent error: NaInet library returned code == -92]

                      2013-04-10 11:32:12.325             I             #3364   imutils  Trying with site: 12.42.59.144:8083

                      2013-04-10 11:32:12.325             I             #3364   naInet   HTTP Session initialized

                      2013-04-10 11:32:12.325             I             #3364   imsite                  Upload from: C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100815252620000_2788964963.spkg

                      2013-04-10 11:32:12.325             I             #3364   imsite                  Upload response target: C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100815263870000_884906786.spkg

                      2013-04-10 11:32:12.388             E            #3364   MfeCryptC         Error trace:

                      2013-04-10 11:32:12.388             E            #3364   imsite   [uploadFile,,/spipe/pkg?AgentGuid={EA705787-9B64-46A4-A989-0762B1F1215F}&Source =Agent_3.0.0,pkg00130100815252620000_2788964963.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100815263870000_884906786.spkg]->

                      2013-04-10 11:32:12.388             E            #3364   MfeCryptC           Failed to load certificate C:\ProgramData\McAfee\Common Framework\cabundle.cer

                      2013-04-10 11:32:12.388             E            #3364   MfeCryptC        

                      2013-04-10 11:32:12.388             E            #3364   MfeCryptC         Error trace:

                      2013-04-10 11:32:12.388             E            #3364   imsite   [uploadFile,,/spipe/pkg?AgentGuid={EA705787-9B64-46A4-A989-0762B1F1215F}&Source =Agent_3.0.0,pkg00130100815252620000_2788964963.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100815263870000_884906786.spkg]->

                      2013-04-10 11:32:12.388             E            #3364   MfeCryptC           Failed to setup new connection

                      2013-04-10 11:32:12.388             E            #3364   MfeCryptC        

                      2013-04-10 11:32:12.419             E            #3364   MfeCryptC         Error trace:

                      2013-04-10 11:32:12.419             E            #3364   imsite   [uploadFile,,/spipe/pkg?AgentGuid={EA705787-9B64-46A4-A989-0762B1F1215F}&Source =Agent_3.0.0,pkg00130100815252620000_2788964963.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100815263870000_884906786.spkg]->

                      2013-04-10 11:32:12.419             E            #3364   MfeCryptC           Failed to load certificate C:\ProgramData\McAfee\Common Framework\cabundle.cer

                      2013-04-10 11:32:12.419             E            #3364   MfeCryptC        

                      2013-04-10 11:32:12.419             E            #3364   MfeCryptC         Error trace:

                      2013-04-10 11:32:12.419             E            #3364   imsite   [uploadFile,,/spipe/pkg?AgentGuid={EA705787-9B64-46A4-A989-0762B1F1215F}&Source =Agent_3.0.0,pkg00130100815252620000_2788964963.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100815263870000_884906786.spkg]->

                      2013-04-10 11:32:12.419             E            #3364   MfeCryptC           Failed to setup new connection

                      2013-04-10 11:32:12.419             E            #3364   MfeCryptC        

                      2013-04-10 11:32:16.936             E            #3364   MfeCryptC         Error trace:

                      2013-04-10 11:32:16.936             E            #3364   imsite   [uploadFile,,/spipe/pkg?AgentGuid={EA705787-9B64-46A4-A989-0762B1F1215F}&Source =Agent_3.0.0,pkg00130100815252620000_2788964963.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100815263870000_884906786.spkg]->

                      2013-04-10 11:32:16.936             E            #3364   MfeCryptC           Failed to load certificate C:\ProgramData\McAfee\Common Framework\cabundle.cer

                      2013-04-10 11:32:16.936             E            #3364   MfeCryptC        

                      2013-04-10 11:32:16.936             E            #3364   MfeCryptC         Error trace:

                      2013-04-10 11:32:16.936             E            #3364   imsite   [uploadFile,,/spipe/pkg?AgentGuid={EA705787-9B64-46A4-A989-0762B1F1215F}&Source =Agent_3.0.0,pkg00130100815252620000_2788964963.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100815263870000_884906786.spkg]->

                      2013-04-10 11:32:16.936             E            #3364   MfeCryptC           Failed to setup new connection

                      2013-04-10 11:32:16.936             E            #3364   MfeCryptC        

                      2013-04-10 11:32:16.936             E            #3364   imsite   Error trace:

                      2013-04-10 11:32:16.936             E            #3364   imsite   [uploadFile,,/spipe/pkg?AgentGuid={EA705787-9B64-46A4-A989-0762B1F1215F}&Source =Agent_3.0.0,pkg00130100815252620000_2788964963.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100815263870000_884906786.spkg]->

                      2013-04-10 11:32:16.936             E            #3364   imsite     NaInet library returned code == -92

                      2013-04-10 11:32:16.936             E            #3364   imsite   Error trace:

                      2013-04-10 11:32:16.936             E            #3364   imsite   [uploadFile,,/spipe/pkg?AgentGuid={EA705787-9B64-46A4-A989-0762B1F1215F}&Source =Agent_3.0.0,pkg00130100815252620000_2788964963.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100815263870000_884906786.spkg]->

                      2013-04-10 11:32:16.936             E            #3364   imsite     NaInet library returned code == -92

                      2013-04-10 11:32:16.936             E            #3364   imsite   Error trace:

                      2013-04-10 11:32:16.936             E            #3364   imsite   [uploadFile,,/spipe/pkg?AgentGuid={EA705787-9B64-46A4-A989-0762B1F1215F}&Source =Agent_3.0.0,pkg00130100815252620000_2788964963.spkg,C:\ProgramData\McAfee\Commo n Framework\Unpack,C:\ProgramData\McAfee\Common Framework\Unpack\pkg00130100815263870000_884906786.spkg]->

                      2013-04-10 11:32:16.936             E            #3364   imsite     The naInet library returned an error. [Parent error: NaInet library returned code == -92]

                      2013-04-10 11:32:16.936             I             #3364   naInet   HTTP Session closed

                      2013-04-10 11:32:16.936             I             #3364   naInet   HTTP Session closed

                      2013-04-10 11:32:16.936             e            #3364   Agent    Agent failed to communicate with ePO Server

                      2013-04-10 11:32:16.936             i             #3364   Agent    Agent communication session closed

                      2013-04-10 11:32:16.936             I             #3364   Agent    Agent communication failed, result=-2400

                      2013-04-10 11:32:16.936             I             #3364   Agent    Exponential retry in 858 seconds, error=-2400(Unable to connect to ePO Server)

                      2013-04-10 11:32:16.936             i             #3364   Agent    Agent will connect to the ePO Server in 14 minutes and 18 seconds.

                      2013-04-10 11:32:31.221             I             #3440   LstnSvr              CAsyncSocket::DoAccept for event: FD_ACCEPT

                      2013-04-10 11:32:31.221             I             #3440   LstnSvr              CAsyncSocket::DoAccept for event: FD_ACCEPT

                      2013-04-10 11:32:31.221             I             #3480   LstnSvr 'GET' request received from Host: 127.0.0.1:49428

                      2013-04-10 11:32:31.236             I             #3492   LstnSvr 'GET' request received from Host: 127.0.0.1:49429

                      2013-04-10 11:32:39.582             I             #3440   LstnSvr              CAsyncSocket::DoAccept for event: FD_ACCEPT

                      2013-04-10 11:32:39.582             I             #3440   LstnSvr              CAsyncSocket::DoAccept for event: FD_ACCEPT

                      2013-04-10 11:32:39.582             I             #3444   LstnSvr 'GET' request received from Host: 127.0.0.1:49431

                      • 8. Re: Epolicy 4.6 Migration Agent Communication Issues
                        jstanley

                        This line is perfectly normal:

                        Trying with site: 1.2.3.4:8083

                         

                        If you look at a working agent's log you will see the same thing.

                         

                        The connection is failing with a CURL error of -92 which translates to: rcSSLConnect = -92

                         

                        I've run into this problem in the past and it turned out to be a proxy server which was disrupting the SSL handshake. Please see KB77799.

                        • 9. Re: Epolicy 4.6 Migration Agent Communication Issues
                          cdobol

                          Thanks for the reply.  Interesting KB, but I think this is something different.   I don't even see a connection attempt to our agent handler after it fails on our non-ssl port.  Any reason why it would stop trying additional agent handlers?  Interestlingly enough, I changed the order of the agent handlers so it tries our DMZ agent handler first.  Now it connects without issue.  So it appears if it doesn't try to connect on port 8083 to the unreachable agent handler it works.  I'll open a SR for this.

                          1 2 Previous Next