SEP Client fails to communicate with SEPM- [ERROR] Send of message returned error 407 Proxy Authentication Required
search cancel

SEP Client fails to communicate with SEPM- [ERROR] Send of message returned error 407 Proxy Authentication Required

book

Article ID: 174250

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

  • SEP Client fails to communicate with SEPM- CVE.log shows - [ERROR] Send of message returned error 407 Proxy Authentication Required
  • SEP follows the IE connection configuration to connect to SEPM. In IE as well you would not see any proxy configured (with both user and system account).
  • Issue persists even after following the steps below:
  1. Ping/Telnet from client to SEPM is ok
  2. SECARS test (http://management_server_address:8014/secars/secars.dll?hello,secars) is ok; opening Internet Explorer with System account, Secars test passes as well
  3. run command “netsh winsock reset”, issue persists
  4. deleted following reg keys, issue persists even after reboot:
  • HKEY_USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\DefaultConnectionSettings
  • HKEY_USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings

CVE.log

[2019-Mar-27 12:18:57.175570] [ERROR] Failed to read Sylink CommunicationStatus.
[2019-Mar-27 12:18:57.175570] [ERROR] Failed to read Sylink CommunicationStatus.
[2019-Mar-27 12:18:57.730792] [ERROR] Send of message returned error 407 Proxy Authentication Required
[2019-Mar-27 12:19:38.639536] [ERROR] Send of message returned error 407 Proxy Authentication Required

CVE-actions.log
[2019-Mar-27 12:18:57.730792]     407    0    [-Registration]    2019-Mar-27 12:18:57.727791    2019-Mar-27 12:18:57.730792    3    2
[2019-Mar-27 12:19:38.639536]     407    0    [-Registration]    2019-Mar-27 12:19:38.636535    2019-Mar-27 12:19:38.639536    3    4
[2019-Mar-27 12:19:50.576923]     407    0    [-Registration]    2019-Mar-27 12:19:50.572922    2019-Mar-27 12:19:50.576923    4    6

Environment

SEPM and SEP version 14.2 MP1 (14.2.1031.0100)

Windows 2008 R2 Server Enterprise Full Installation Service Pack 1 64-bit

 

Cause

Proxy configured in System Variables

Resolution

To Delete the environment variables in Windows:

  1. Click Start > Control Panel > System.
  2. Click the Advanced Systems Settings tab.
  3. Click Environment Variables.
  4. Under System Variables, Select the Proxy and Delete it (or Edit and configure the correct one if misonfigured)
    Note: You may need to confirm if there are dependencies on the current configuration and proceed accordingly.
  5. Restart the system.
  6. SEP client should be able to communicate with SEPM.

Powered by Wolken Software