SEP Client fails to communicate with SEPM- [ERROR] Send of message returned error 407 Proxy Authentication Required

Products

• Endpoint Protection

Issue/Introduction

• SEP Client fails to communicate with SEPM- CVE.log shows - [ERROR] Send of message returned error 407 Proxy Authentication Required
• SEP follows the IE connection configuration to connect to SEPM. In IE as well you would not see any proxy configured (with both user and system account).
• Issue persists even after following the steps below:

1. Ping/Telnet from client to SEPM is ok
2. SECARS test (http://management_server_address:8014/secars/secars.dll?hello,secars) is ok; opening Internet Explorer with System account, Secars test passes as well
3. run command “netsh winsock reset”, issue persists
4. deleted following reg keys, issue persists even after reboot:

• HKEY_USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\DefaultConnectionSettings
• HKEY_USER\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\SavedLegacySettings

CVE.log

[2019-Mar-27 12:18:57.175570] [ERROR] Failed to read Sylink CommunicationStatus.
[2019-Mar-27 12:18:57.175570] [ERROR] Failed to read Sylink CommunicationStatus.
[2019-Mar-27 12:18:57.730792] [ERROR] Send of message returned error 407 Proxy Authentication Required
[2019-Mar-27 12:19:38.639536] [ERROR] Send of message returned error 407 Proxy Authentication Required

CVE-actions.log
[2019-Mar-27 12:18:57.730792]     407    0    [-Registration]    2019-Mar-27 12:18:57.727791    2019-Mar-27 12:18:57.730792    3    2
[2019-Mar-27 12:19:38.639536]     407    0    [-Registration]    2019-Mar-27 12:19:38.636535    2019-Mar-27 12:19:38.639536    3    4
[2019-Mar-27 12:19:50.576923]     407    0    [-Registration]    2019-Mar-27 12:19:50.572922    2019-Mar-27 12:19:50.576923    4    6

Environment

SEPM and SEP version 14.2 MP1 (14.2.1031.0100)

Windows 2008 R2 Server Enterprise Full Installation Service Pack 1 64-bit

 

Cause

Proxy configured in System Variables

Resolution

To Delete the environment variables in Windows:

1. Click Start > Control Panel > System.
2. Click the Advanced Systems Settings tab.
3. Click Environment Variables.
4. Under System Variables, Select the Proxy and Delete it (or Edit and configure the correct one if misonfigured)
   Note: You may need to confirm if there are dependencies on the current configuration and proceed accordingly.
5. Restart the system.
6. SEP client should be able to communicate with SEPM.