search cancel

SEP Client fails to communicate with SEPM- [ERROR] Send of message returned error 407 Proxy Authentication Required

book

Article ID: 174250

calendar_today

Updated On:

Products

Endpoint Protection

Issue/Introduction

  • SEP Client fails to communicate with SEPM- CVE.log shows - [ERROR] Send of message returned error 407 Proxy Authentication Required
  • SEP follows the IE connection configuration to connect to SEPM. In IE as well you would not see any proxy configured (with both user and system account).
  • Issue persists even after following the steps below:
  1. Ping/Telnet from client to SEPM is ok
  2. SECARS test (http://management_server_address:8014/secars/secars.dll?hello,secars) is ok; opening Internet Explorer with System account, Secars test passes as well
  3. run command “netsh winsock reset”, issue persists
  4. deleted following reg keys, issue persists even after reboot:
  • HKEY_USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\DefaultConnectionSettings
  • HKEY_USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings

CVE.log

[2019-Mar-27 12:18:57.175570] [ERROR] Failed to read Sylink CommunicationStatus.
[2019-Mar-27 12:18:57.175570] [ERROR] Failed to read Sylink CommunicationStatus.
[2019-Mar-27 12:18:57.730792] [ERROR] Send of message returned error 407 Proxy Authentication Required
[2019-Mar-27 12:19:38.639536] [ERROR] Send of message returned error 407 Proxy Authentication Required

CVE-actions.log
[2019-Mar-27 12:18:57.730792]     407    0    [-Registration]    2019-Mar-27 12:18:57.727791    2019-Mar-27 12:18:57.730792    3    2
[2019-Mar-27 12:19:38.639536]     407    0    [-Registration]    2019-Mar-27 12:19:38.636535    2019-Mar-27 12:19:38.639536    3    4
[2019-Mar-27 12:19:50.576923]     407    0    [-Registration]    2019-Mar-27 12:19:50.572922    2019-Mar-27 12:19:50.576923    4    6

Cause

Proxy configured in System Variables

Environment

SEPM and SEP version 14.2 MP1 (14.2.1031.0100)

Windows 2008 R2 Server Enterprise Full Installation Service Pack 1 64-bit

 

Resolution

To Delete the environment variables in Windows:

  1. Click Start > Control Panel > System.
  2. Click the Advanced Systems Settings tab.
  3. Click Environment Variables.
  4. Under System Variables, Select the Proxy and Delete it (or Edit and configure the correct one if misonfigured)
    Note: You may need to confirm if there are dependencies on the current configuration and proceed accordingly.
  5. Restart the system.
  6. SEP client should be able to communicate with SEPM.