SEP Linux Client Installation error HTTP code 407 from proxy after CONNECT.

Products

Endpoint Protection

Issue/Introduction

When installing the SEP Linux Agent, you get the following Installation error 'HTTP code 407':

Errors during downloading metadata for repository 'SDCSS':                                                                                                                                                     
  - Curl error (56): Failure when receiving data from the peer for https://linux-repo.us.securitycloud.symantec.com/SAL/1.2/rhel8/x86_64/repodata/repomd.xml [Received HTTP code 407 from proxy after CONNECT]

Environment

SEP Linux Agent 14.3 +

Cause

The HTTP 407 Proxy Authentication error occurs when a client status response code indicating that the request has not been applied due to lack of valid authentication credentials for a proxy server that is between the endpoint and the server that can access the requested resource.

In the case above, it is the https://linux-repo.us.securitycloud.symantec.com/SAL/1.2/rhel8/x86_64/repodata/repomd.xml metadata repository for SDCSS that the endpoint is trying to connect to.

Check in sdccs_install.log to confirm the error:

================================================================================================================================================================================================================\
| Symantec Agent for Linux repository             0.0  B/s |   0  B     00:00                                                                                                                                    |
| Errors during downloading metadata for repository 'SDCSS':                                                                                                                                                     |
|   - Curl error (56): Failure when receiving data from the peer for https://linux-repo.us.securitycloud.symantec.com/SAL/1.2/rhel8/x86_64/repodata/repomd.xml [Received HTTP code 407 from proxy after CONNECT] |
| Error: Failed to download metadata for repo 'SDCSS': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried                                                                   |
| Ignoring repositories: SDCSS                                                                                                                                                                                   |
| Metadata cache created.                                                                                                                                                                                        |
\================================================================================================================================================================================================================/
06/12/24 01:01:43: NOTICE: Unable to communicate with repository. Check repo file /etc/yum.repos.d/sdcss.repo

Resolution

Confirm the authentication credentials and configuration for the proxy server with the Proxy/Firewall Network Team.

As a workaround you can bypass the proxy and confirm the connection status to the resources.

Once connection is established to the SDCSS repository, install the SEP Linux Agent and confirm the SEP Agent Status via the ./Status.sh command

Additional Information

To check the version and connection status of the agent and to confirm that the modules are loaded and daemons are running, navigate to

/usr/lib/symantec

and run the following command:

./status.sh

More information can be found here.