Overview

When attempting to download the WSUSSCN2.CAB file during program updates in GFI LanGuard, the process may fail due to an error message stating "A redirect request will change a non-secure to a secure connection." This issue arises because the URL configured for downloading the WSUSSCN2.CAB file is using an insecure HTTP connection, which is no longer supported or recommended. Ensuring the URL is updated to use HTTPS is necessary to resolve this issue and successfully complete the program updates.

Solution

To fix the error and allow GFI LanGuard to successfully download the WSUSSCN2.CAB file, follow these steps:

1. Open the File Explorer and navigate to the C:\ProgramData\GFI\LanGuard 12\General directory on the GFI LanGuard server.

2. Locate the toolcfg_internalconfig.xml file within this directory. It is recommended to take a backup of this file before making any changes to it. Simply copy and paste the file in the same directory or another safe location.

3. Open toolcfg_internalconfig.xml with a text editor that has administrative privileges, such as Notepad run as administrator.

4. Within the file, search for the following line:

   <Option Name="WSUSSCN2FileUrl"><![CDATA[http://go.microsoft.com/fwlink/?LinkID=74689]]></Option>

   Replace it with:

   <Option Name="WSUSSCN2FileUrl"><![CDATA[https://catalog.s.download.windowsupdate.com/microsoftupdate/v6/wsusscan/wsusscn2.cab]]></Option>

5. Save the changes to toolcfg_internalconfig.xml and close the text editor.

6. Attempt the program updates again within GFI LanGuard. The update process should now complete successfully without encountering the previous error.

Reference Documentation

• For the most current WSUSSCN2.CAB download link and additional information, please refer to Microsoft's official documentation: Using WUA to Scan for Updates Offline.

<supportagent>

Old version of the KBA

Root Cause
There is a hidden popup that requires confirmation to continue when changing from a secure to a non-secure website.

Resolution

Perform these steps while logged in as domain administration / local administrator.

1. Go to Start Menu > Run
2. Enter inetcpl.cpl, and press Enter or click Ok.
   • Click the Security tab.
   • Highlight Internet at the top and click Custom level.
   • Under the Miscellaneous section look for "Display Mixed Content"
   • Click on Enable instead of prompt.
   • Click OK. Click Yes.
   • Click the Advanced tab and scroll to the bottom.
   • Remove the check from "Show a popup each time the connection went from secure to non-secure" if available.
   • Remove the check from "Warn if changing from secure to non-secure mode is not selected" if available.
3. Restart all GFI LanGuard services.

You can again perform a LanGuard Update manually to test whether the Microsoft download works.

If the issue persists, please ensure that the link http://go.microsoft.com/fwlink/?LinkID=74689 is accessible manually via a browser. If it is not, you will need to engage your network team to have access to the link unblocked.

</supportagent>