Zenworks Antivirus Agent Update Error -2022

Since yesterday we are seeing an error -2022 on all our machines when updating the ZAV Agent!
The actual Signature updates every ~4 hours are working but on checks between them the is throwing errors and even warning users that it is outdated...
(as of writing we are on Engine Version 7.9.9.381 and Security Content Version 7.96878)

in  the "zmd-messages.log" i get the following error:

[ERROR] [06/05/2024 06:41:00.193] [5376] [ZenworksWindowsService] [77] [] [ZEN Antimalware] [05/06/2024 06:00:00 --  [ERROR] [5084] [ZavListener] [] [SYSTEM] [ZavOutput.log] [ProductEvent failure error: -2022] [ERROR] [] [] [] [ZENworks] ] [log) (ProductEvent failure error: -2022) (ERROR) () () () (ZENworks) ] [] [] [] [ZENworks Agent] 
(which basically doesn't tell me anything)

on the Servers themselves i haven't found any useful messages either...

We are running on Appliances Version 23.4.0.94
(cannot update to FTF 95 yet as we have another unrelated SR ongoing for which we are running a DEVFTF built on 94...)

Little side remark:
Please make (especially) the ZAV errors more descriptive in the nature of the issue in future Updates...
Just like with the errors 1002/1008/etc... we have no idea in what direction to look here and can essentially just guess what is going on..

  • 0   in reply to 

    It's strange, that the issue is not solved after so long time. I hope that OT is monitoring OEM' s CDN network or at least will setup monitoring, because be depended on outage reports from customers isn't best practice at all. Without up to date AV signatures is this serious security problem.

    David

  • 0

    same here since Monday too ...

    we are at: DEVFTF-23.4.0.88*

  • 0   in reply to   

    Yesterday I carried out measurements with Wireshark. I also checked whether Bitdefender's pattern distribution servers are active. The ZCM documentation states that the exception must be set in the FW for nimbus.bitdefender.net. The distribution server for ( nimbus.bitdefender.net/_ServerStatus ) is active and distributes patterns, I was also able to check this with a standalone Bitdefender AV client. I have run a Wireshark trace several times, unfortunately I cannot make a valid statement about this, I lack a trace of a pattern update that works for analysis and comparison. If I notice anything else in the trace, I'll let you know here.

    I have another request for OT, the lagacy patch management was finally discontinued on 03.06.2024, hence my question: Has anything been changed internally at this time that has to do with the CDN networks?


    Greetings George

    “You can't teach a person anything, you can only help them to discover it within themselves.” Galileo Galilei

  • 0 in reply to   

    We didn't change anything that would have anything to do with this for a while now...
    (weeks if not months..)
    I didn't even work on anything ZENworks related on Monday...
    (when this started for us - then we noticed the issue on Thuesday)

    I also already checked the Server status with the links mentioned above and couldn't find any errors or lost traffic..
    At this point with the little information we have this is a real mystery to me...

    The funny thing is:
    The actual signature updates do work!
    But every time in between when the client is searching for updates and doesn't find anything it throws this error...

  • 0 in reply to 

    I found this:

    Error downloading [http://localhost:7658/av64bit-eps/versions.id]. Using proxy: [false].
    Error downloading [http://localhost:7658/ctc2-win-64-eps/versions.id]. Using proxy: [false].
    Error downloading [http://localhost:7658/eps6-win-config-64/versions.id]. Using proxy: [false].
    Update finished with error: -2022.

  • 0 in reply to 

    Error 1168 getting plugin "bd.Integration.GzIdentity"

  • 0   in reply to 

    Exactly the same situation on the internal system in the company.

    There were also individual updates that worked after 02.06.2024.

    George

    In addition, the ZAV output. The log can be found at http://localhost:7658

    06.06.2024 11:00:01 --  [DEBUG] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [Start OnRanEvent] [DEBUG] [] [] [] [ZENworks]
    06.06.2024 11:00:01 --  [INFO] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [{"EventType":"OnRan","Context":"zam_async_context","Error":"0","Date":"638532612015206040","EventData":{"response":{"data":{"Update":[{"@name":"StartUpdate","error":0,"output":null}]}},"type":"epsdk"}
    }] [INFO] [] [] [] [ZENworks]
    06.06.2024 11:00:01 --  [DEBUG] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [Writing event file to location: C:\Program Files (x86)\Novell\ZENworks\zav\events\common\Event-133621380015206040 with bScanStatusStart set to: False and set to bScanStatusStopFalse] [DEBUG] [] [] [] [ZENworks]
    06.06.2024 11:00:01 --  [DEBUG] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [End OnRanEvent] [DEBUG] [] [] [] [ZENworks]
    06.06.2024 11:00:06 --  [DEBUG] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [Start OnRanEvent] [DEBUG] [] [] [] [ZENworks]
    06.06.2024 11:00:06 --  [INFO] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [{"EventType":"OnRan","Context":"zam_async_context","Error":"0","Date":"638532612066146550","EventData":{"response":{"data":{"Update":[{"@name":"StartUpdate","error":0,"output":null}]}},"type":"epsdk"}
    }] [INFO] [] [] [] [ZENworks]
    06.06.2024 11:00:06 --  [DEBUG] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [Writing event file to location: C:\Program Files (x86)\Novell\ZENworks\zav\events\common\Event-133621380066302821 with bScanStatusStart set to: False and set to bScanStatusStopFalse] [DEBUG] [] [] [] [ZENworks]
    06.06.2024 11:00:06 --  [DEBUG] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [End OnRanEvent] [DEBUG] [] [] [] [ZENworks]
    06.06.2024 11:00:06 --  [DEBUG] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [Start OnProductEvent] [DEBUG] [] [] [] [ZENworks]
    06.06.2024 11:00:06 --  [ERROR] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [ProductEvent failure error: -2022] [ERROR] [] [] [] [ZENworks]
    06.06.2024 11:00:06 --  [INFO] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [{"EventType":"OnProductEvent","Name":"Update.Finished","Date":"638532612066459069","EventData":{"error_code":-2022,"updaterId":""}
    }] [INFO] [] [] [] [ZENworks]
    06.06.2024 11:00:06 --  [DEBUG] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [Writing event file to location: C:\Program Files (x86)\Novell\ZENworks\zav\events\common\Event-133621380066615337 with bScanStatusStart set to: False and set to bScanStatusStopFalse] [DEBUG] [] [] [] [ZENworks]
    06.06.2024 11:00:06 --  [DEBUG] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [Exit OnProductEvent] [DEBUG] [] [] [] [ZENworks]
    06.06.2024 11:00:06 --  [DEBUG] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [Start OnProductEvent] [DEBUG] [] [] [] [ZENworks]
    06.06.2024 11:00:06 --  [INFO] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [{"EventType":"OnProductEvent","Name":"Product.Status","Date":"638532612066927871","EventData":{"Alerts":{},"AutomaticUpdateForProduct":true,"AutomaticUpdateForSignatures":true,"Features":[{"enabled":false,"id":"AntivirusScan.Remote","isFunctioning":false,"preferredConnections":[],"registrationStatus":"n/a"},{"enabled":true,"id":"AntivirusScan","registrationStatus":"n/a","scanMode":{"current":5,"requested":5},"scanType":"full"},{"enabled":true,"id":"FileScan.OnAccess","isFunctioning":true,"registrationStatus":"registered"},{"enabled":false,"id":"FileScan.Quarantine.Remote","registrationStatus":"n/a"}],"Language":"en-US","LastCheckTime":1717516802,"LastUpdateTime":1717488004,"Locations":{"Antivirus":{"SignaturesNumber":14727685,"Version":"7.96878","check":{"error":-2022,"host":""lastSucceededTime":1717416001,"time":1717664402},"update":{"error":0,"host":"http://localhost:7658","lastSucceededTime":1717405240,"time":1717405240},"updateAvailable":{"status":"n/a","time":1717664402}},"Product":{"Version":"7.9.9.381","check":{"error":-3,"host":"http://localhost:7658","lastSucceededTime":1717488004,"time":1717657202},"install":{"error":0,"lastSucceededTime":1712594790,"time":1712594790},"update":{"error":-1020,"host":"http://localhost:7658","lastSucceededTime":1712594479,"time":1712594479},"updateAvailable":{"status":"n/a","time":1717657202}},"ctc2":{"SignaturesNumber":14727685,"Version":"","check":{"error":-2022,"host":"http://localhost:7658","lastSucceededTime":1717516802,"time":1717664402},"update":{"error":0,"host":"http://localhost:7658","lastSucceededTime":1716451277,"time":1716451277},"updateAvailable":{"status":"n/a","time":1717664402}},"winConfig":{"SignaturesNumber":14727685,"Version":"","check":{"error":-2022,"host":"http://localhost:7658","lastSucceededTime":1717516802,"time":1717664402},"update":{"error":0,"host":"http://localhost:7658","lastSucceededTime":1717405262,"time":1717405262},"updateAvailable":{"status":"n/a","time":1717664402}}},"PendingRestart":false,"ProductId":"endpoint","SystemInformation":{"instanceIdEC2":"","isSlowMachine":false,"isVM":true}}">localhost:7658","lastSucceededTime":1717416001,"time":1717664402},"update":{"error":0,"host":"http:/.../a","time":1717664402}}},"PendingRestart":false,"ProductId":"endpoint","SystemInformation":{"instanceIdEC2":"","isSlowMachine":false,"isVM":true}}
    }] [INFO] [] [] [] [ZENworks]
    06.06.2024 11:00:06 --  [DEBUG] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [Writing event file to location: C:\Program Files (x86)\Novell\ZENworks\zav\events\status\Event-133621380066927871 with bScanStatusStart set to: False and set to bScanStatusStopFalse] [DEBUG] [] [] [] [ZENworks]
    06.06.2024 11:00:06 --  [DEBUG] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [Exit OnProductEvent] [DEBUG] [] [] [] [ZENworks]
    06.06.2024 11:00:07 --  [DEBUG] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [Start OnProductEvent] [DEBUG] [] [] [] [ZENworks]
    06.06.2024 11:00:07 --  [ERROR] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [ProductEvent failure error: -3] [ERROR] [] [] [] [ZENworks]
    06.06.2024 11:00:07 --  [INFO] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [{"EventType":"OnProductEvent","Name":"Update.Finished","Date":"638532612072564375","EventData":{"error_code":-3,"updaterId":""}
    }] [INFO] [] [] [] [ZENworks]
    06.06.2024 11:00:07 --  [DEBUG] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [Writing event file to location: C:\Program Files (x86)\Novell\ZENworks\zav\events\common\Event-133621380072720627 with bScanStatusStart set to: False and set to bScanStatusStopFalse] [DEBUG] [] [] [] [ZENworks]
    06.06.2024 11:00:07 --  [DEBUG] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [Exit OnProductEvent] [DEBUG] [] [] [] [ZENworks]
    06.06.2024 11:00:07 --  [DEBUG] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [Start OnProductEvent] [DEBUG] [] [] [] [ZENworks]
    06.06.2024 11:00:07 --  [INFO] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [{"EventType":"OnProductEvent","Name":"Product.Status","Date":"638532612073345693","EventData":{"Alerts":{},"AutomaticUpdateForProduct":true,"AutomaticUpdateForSignatures":true,"Features":[{"enabled":false,"id":"AntivirusScan.Remote","isFunctioning":false,"preferredConnections":[],"registrationStatus":"n/a"},{"enabled":true,"id":"AntivirusScan","registrationStatus":"n/a","scanMode":{"current":5,"requested":5},"scanType":"full"},{"enabled":true,"id":"FileScan.OnAccess","isFunctioning":true,"registrationStatus":"registered"},{"enabled":false,"id":"FileScan.Quarantine.Remote","registrationStatus":"n/a"}],"Language":"en-US","LastCheckTime":1717516802,"LastUpdateTime":1717488004,"Locations":{"Antivirus":{"SignaturesNumber":14727685,"Version":"7.96878","check":{"error":-3,"host":""lastSucceededTime":1717416001,"time":1717664407},"update":{"error":0,"host":"http://localhost:7658","lastSucceededTime":1717405240,"time":1717405240},"updateAvailable":{"status":"n/a","time":1717664407}},"Product":{"Version":"7.9.9.381","check":{"error":-3,"host":"http://localhost:7658","lastSucceededTime":1717488004,"time":1717664407},"install":{"error":0,"lastSucceededTime":1712594790,"time":1712594790},"update":{"error":-1020,"host":"http://localhost:7658","lastSucceededTime":1712594479,"time":1712594479},"updateAvailable":{"status":"n/a","time":1717664407}},"ctc2":{"SignaturesNumber":14727685,"Version":"","check":{"error":-3,"host":"http://localhost:7658","lastSucceededTime":1717516802,"time":1717664407},"update":{"error":0,"host":"http://localhost:7658","lastSucceededTime":1716451277,"time":1716451277},"updateAvailable":{"status":"n/a","time":1717664407}},"winConfig":{"SignaturesNumber":14727685,"Version":"","check":{"error":-3,"host":"http://localhost:7658","lastSucceededTime":1717516802,"time":1717664407},"update":{"error":0,"host":"http://localhost:7658","lastSucceededTime":1717405262,"time":1717405262},"updateAvailable":{"status":"n/a","time":1717664407}}},"PendingRestart":false,"ProductId":"endpoint","SystemInformation":{"instanceIdEC2":"","isSlowMachine":false,"isVM":true}}">localhost:7658","lastSucceededTime":1717416001,"time":1717664407},"update":{"error":0,"host":"http:/.../a","time":1717664407}}},"PendingRestart":false,"ProductId":"endpoint","SystemInformation":{"instanceIdEC2":"","isSlowMachine":false,"isVM":true}}
    }] [INFO] [] [] [] [ZENworks]
    06.06.2024 11:00:07 --  [DEBUG] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [Writing event file to location: C:\Program Files (x86)\Novell\ZENworks\zav\events\status\Event-133621380073345693 with bScanStatusStart set to: False and set to bScanStatusStopFalse] [DEBUG] [] [] [] [ZENworks]
    06.06.2024 11:00:07 --  [DEBUG] [7884] [ZavListener] [] [SYSTEM] [ZavOutput.log] [Exit OnProductEvent] [DEBUG] [] [] [] [ZENworks]

    “You can't teach a person anything, you can only help them to discover it within themselves.” Galileo Galilei

  • 0 in reply to 

    We also get the "No update available" messages in between, however the signature version doesn't actually update beyond the version of 03-06-2024 06:22.

  • 0   in reply to 

    the engine version from this morning 06.06.2024 9:00 am should be the following in the screenshot

    “You can't teach a person anything, you can only help them to discover it within themselves.” Galileo Galilei

  • 0

    Same error message here (-2022 with -1008 also).  I'd really like to get ZAV to show less alerts on the user side because I dont want them to get desensitized to alerts.  Question:  Does EACH ZAV client reach to nimbus<dot>bitdefender<dot>net or do they pull the definitions from my local ZCM box?