Announcement: New Knowledge Base

4 June 2020: We are pleased to announce the launch of a new Knowledge Base, Changelogs for Business Security Products, where you can find more details, such as bugfixes or new features, about the most recent releases of our business-related products.

Software updater Policy Manager proxy

We are having an issue where clients are ignoring the policy manager proxy for software updates, even if they are configured to "always" update from it.

 

Clients connected to the Policy manager are fine, its just the proxys in remote locations.

 

Has anyone else experienced this before?

Comments

  • VadVad Posts: 1,048

    Hello Chimpymoo,

     

    What versions of Policy Manager, Policy Manager Proxy and client (Client Security?) do you have?

     

    Best regards,

    Vad

  • ChimpymooChimpymoo Posts: 12

    They are both the latest version, policy manager is version:  14.01.87207, proxy version: 14.00.87145

     

    Client security premium 14.02.114

  • ChimpymooChimpymoo Posts: 12

    I have just tried the new release of proxy, still the same issue. fspmp-14.10.88509.

     

    We could install a Policy manager on each site but that would be difficult to manage, anyone got anything before we cut our losses?

     

    Must admit support for this issue has been dreadful

  • Hello Chimpymoo,

     

    I have got almost the exact same problem.

    Clients recently been upgraded from 13.11 to 14.02 and then I think the problems started.

    We use 1 PM and multiple PMProxies. What we are seeing is that missing updates are being detected, they get downloaded to c:\ProgramData\F-Secure\swup\deploy but they do not get installed.

     

    The logging is fssua ends with :

    2019-05-03 13:04:06.408 [15c4.15c8]  I: No deploy needed
    2019-05-03 13:04:06.408 [15c4.15c8]  I: Exit error code: 0 [Normal exit; Success.]
    2019-05-03 13:04:06.424 [15c4.15c8]  I: ***  LOGGING ENDED  ***

     

    Support call running since april 24th. No luck so far.

  • ChimpymooChimpymoo Posts: 12

    If I change the port on just the client and run an update it fails. If I leave it failing and then change the server port to match the client port they both start talking and all updates and software get pulled through the proxy.

     

    As soon as you restart the server / services the proxy goes back to ignoring the client and the client ignores its setings and just drags it down from the internet. Change the port as above and it works fine again....

  • A-GrinkevitchA-Grinkevitch Posts: 161

    Hello Chimpymoo,

     

    First of all check the log at CS host c:\ProgramData\F-Secure\Log\swup\fssua.log and find out if host connects to the Policy Manager Proxy you expect. If it tries to fetch data from the proper destination, post the received HTTP status code here and error message if any.
    If host connects to the expected PMP, worth checking PMP log fspms-download-updates.log for errors at c:\Program Files (x86)\F-Secure\Management Server 5\logs\ if you are using PMP at Windows.

     

    Regards,
    Alex

  • ChimpymooChimpymoo Posts: 12

    So after lots of testing I finally managed to find a work around, this was to set the Proxy fed clients to point to the proxy for Automatic Updates but point the Managenet Agent to the central policy manager. Not an ideal solution but much better than the clients going rogue and downloading all updates from the internet, both signature and Software!

     

    Support have been useless so far, have not moved past the logs are "all fine" and having to send screen shots of my configuration. 

  • MJ-perCompMJ-perComp Posts: 1,098
    Proxy handling in CS has been under review. Not sure if changes already made it to 14.10, still in testing in our lab
    Vad
This discussion has been closed.