When downloading software patches the files are only 2KB in size
Article ID: 164132
Updated On:
Products
Issue/Introduction
When trying to download Firefox (or posibly other vendor) patches the files are only about 2 KB in size
In order to confirm this collect a wireshark trace while downloading a firefox bulletin. Add the following filter in wireshark: "http contains firefox" then review the trace for the following behavior:
*****http request****
GET /pub/mozilla.org/firefox/releases/50.1.0/win32/en-US/Firefox%20Setup%2050.1.0.exe HTTP/1.1\r\n
[Expert Info (Chat/Sequence): GET /pub/mozilla.org/firefox/releases/50.1.0/win32/en-US/Firefox%20Setup%2050.1.0.exe HTTP/1.1\r\n]
[GET /pub/mozilla.org/firefox/releases/50.1.0/win32/en-US/Firefox%20Setup%2050.1.0.exe HTTP/1.1\r\n]
[Severity level: Chat]
[Group: Sequence]
Request Method: GET
Request URI: /pub/mozilla.org/firefox/releases/50.1.0/win32/en-US/Firefox%20Setup%2050.1.0.exe
Request Version: HTTP/1.1
[Response in frame: 6]
****Resonse in packet 6 ****
Hypertext Transfer Protocol
HTTP/1.0 302 Moved\r\n
[Expert Info (Chat/Sequence): HTTP/1.0 302 Moved\r\n]
[HTTP/1.0 302 Moved\r\n]
[Severity level: Chat]
[Group: Sequence]
Request Version: HTTP/1.0
Status Code: 302
Response Phrase: Moved
Location: http://xx.xx.xx.xx:15871/cgi-bin/blockpage.cgi?ws-session=393137511\r\n ** Note the actual ip address is removed
Pragma: no-cache\r\n
Cache-Control: no-cache\r\n
\r\n
[HTTP response 1/1]
[Time since request: 0.029142000 seconds]
[Request in frame: 4]
Environment
Windows 2012 R2
Websense installed.
Cause
Websense blocks the Firefox files from downloading. In one case Websense allowed the Firefox files to download through a browser but would block Altiris. Patch Management tries to download Firefox patches from locations like the following:
http://releases.mozilla.org/pu
http://releases.mozilla.org/pu
Websense redirects to:
http://xx.xx.xx.xx:15871/cgi-b
Resolution
Change the Websense settings so the files can be downloaded.
Feedback
