Overview

The GFI LanGuard remediation jobs fail to download the third party application updates and patches and display errors such as:

• 'Not Found'
• 'The file was downloaded, but the file size did not match the expected size'
• 'The file URL points to a different file than expected. Try rescanning with the latest Patch definitions'
• 'None of the needed patches could be downloaded'

Solution

To fix an issue with downloading the updates and patches for remediation, you need to find out if there were any problems with Program Updates and the exact Software Updates Download error.

1. In the LanGuard console, go to the Activity Monitor > Program Updates Activity and check when the latest scheduled update happened and what the results were, both for GFI LanGuard (server) Updates and affected GFI LanGuard Agent Updates.
   
   If you see errors there or the was no update session today, Update LanGuard Server Manually.
2. Check the time of the last scan on the target machine. If it was before the successful update, run a fresh scan of the target machine, and repeat the remediation job that had problems with patch downloading.
3. Go to the Configuration tab > Software Updates > Patch Auto-Deployment and validate that the failing files are approved for deployment.
4. Next, go to the Software Updates Download in the Activity Monitor tab and check the individual download results and error message(s), if any. You may need to scroll to the right side of this screen to view the download link and the error.
   
5. To download files, GFI LanGuard connects to GFI, Microsoft, and Third-Party update servers via HTTP - ensure that the required Gateway Permissions are in place, with the help of your network and security administrators.
6. If you see 'The network path was not found' error in the remediation job details, resolve it first.
7. Right-click on the failed update(s) > select Retry download. If you still get downloading errors, refer to the sections below to address the issues based on their error messages and URLs.

Important: Instructions for manual link verification in the following sections refer to Internet Explorer since it is using the same Windows engine as LanGuard. Chrome, for example, uses its own DNS service, which can give misleading results.

Issue 1: Patch Failed to Download

The most commonly seen issue is just a notice that the patch(es) failed to download, usually with an error 'None of the needed patches could be downloaded.' The root causes may be external, such as ISP was down, or the download link has moved, or internal, related to your network and environmental variables.

1. Check that the proxy settings are configured appropriately, as discussed in the GFI LanGuard Remediation Error: 'None of the needed patches could be downloaded' article.
2. Right-click on the failed update > select Retry download. If it is successful, the issue is fixed, proceed with the Remediation and Patch Deployment.
3. Try the download link directly in the Internet Explorer browser on the machine with the LanGuard server. If you experience problems with the manual download, troubleshoot them based on the exact results. 
   • There might be a proxy redirection, or the vendor site is blacklisted on your network - get help from your network administrator.
   • Firewalls or Cyber-Security solutions may block the download sites or particular files - check with the security and add necessary exclusions.
   • A vendor can redirect the download or change the update link - check on the vendor site.
4. If you can download the file manually from the browser without problems, refer to the Workaround section.

Issue 2: 'Not Found' Error

If the error 'Not Found' persists even after the Manual Update and the new scanning with the remediation, it is because there is no download prompt when going to the link. 

1. Try the download link directly in the Internet Explorer browser on the machine with the LanGuard server. If you experience problems with the manual download, troubleshoot them based on the exact results. 
   • You might need to whitelist the vendor site or the URL on your network - get help from your network administrator.
   • Firewalls or Cyber-Security solutions may block the download sites or particular files - check with the security and add necessary exclusions.
   • A vendor can add something to the download page or remove the update link - check on the vendor site.
2. If you can download the file manually from the browser without problems, refer to the Workaround section.

Issue 3: 'The file URL points to a different file than expected' Error

If the 'The file URL points to a different file than expected. Try rescanning with the latest Patch definitions' error persists even after the Manual Update and the new scanning with the remediation; there might be a version mismatch or URL redirection issues.

1. Go to the Software Updates Download in the Activity Monitor and compare the version of the patch Bulletin ID/Title with the version listed in the URL/download link. The examples for mismatch are:
   • The download Title is UVNC 1.2, but the download link is for UVNC 1.1.
   • A generic download, i.e., Title indicates an old version of an Adobe product, but the download link is something like http://www.adobe.com/adobe.exe, i.e., for the current version, which causes the mismatch.

   If there is a mismatch, it is likely a new software version with the same download link just came out. Wait for LanGuard to release the latest available version of this third-party software - generally, updates are pushed twice a week, on Wednesday and Friday evenings. You can check whether a new version was added, and, once it is there, update LanGuard and retry a remediation job.

   If mismatch persists after that, gather the target machine scanning results XML and contact GFI LanGuard Support.

2. If there is no visible mismatch, try to download the file manually with the download link using the Internet Explorer browser on the machine with the LanGuard server. If you experience problems here, troubleshoot them based on the exact results. 

   • There may be a proxy redirection, or the vendor site is blacklisted on your network - get help from your network administrator.
   • Firewalls or Cyber-Security solutions may block the download sites or particular files - check with the security and add necessary exclusions.
   • A vendor may be redirecting the download.

3. If you can download the file manually from the browser without problems, refer to the Workaround section.

Workaround

If you were able to manually download the file using the URL failing with the LanGuard, you can place the file with the name that LanGuard is looking for into the repository.

For example, if LanGuard is looking for aXTHAYHRWA=ultravnc.1.2.1.1.exe, place this file in the repository (without the 'aXTHAYHRWA=' prefix). By default, the repository folder is C:\Program Files (x86)\GFI\LanGuard 12\Repository , verify in the LanGuard console Configuration tab > Software Updates > Patch Auto-Download > Patch Repository.

Once the file is in place, run the Remediation job. LanGuard should detect that the file is in the repository and attempt a deployment.

This IS a workaround since LanGuard download operations should produce the same results as the manual download from a browser. Adjust the proxy settings.

Testing

Right-click on the failed update(s) > select Retry download or run the Remediation job that was having download problems. If the issue persists, the database file responsible for saving definitions may be corrupted; follow the steps described in the Purge Patch Download History article.

Retry again. If nothing helps, please contact GFI LanGuard Support gathering and submitting the following:

• Logs from the LanGuard server
• Logs from one client having the issue
• Scan results from the same client having the issue