Overview

You want to patch remote machines, but every attempt fails with an error. LanGuard Agents always fail on update/patch deployments due to connection or communication failures with the assigned Agent Relay workstations. The Remediation job details show errors 'Failed to download ...' and 'The system cannot find the path specified'.

Solution

Errors above are indicating that the Agent Relay is not able to serve the necessary files to the client machine(s) or is experiencing connection or communication issues.

Agents that are configured as Agent Relays act as caching points. Agent Relay s download patches, definitions, and updates directly from the GFI LanGuard server or from an upstream Agent Relay and serve these files to all assigned client computers (both Agent-based and Agent-less).

There are several possible root causes for the 'Failed to download ...'  error; follow the step below to address them:

1. Ensure the Required Settings to Scan a Machine and Successfully Install Missing Patches Using GFI LanGuard in your environment.

2. Check whether remediation jobs succeed on the machines assigned to other Agent Relays or directly to the LanGuard server. If there are errors there as well, the problem is with the LanGuard server, try to Update the LanGuard Server Manually.

   If the downloads fail only for the client machines assigned to a particular Relay, proceed with the steps below.

3. Verify the Agent Relay system and environmental requirements.

4. Ensure protection engine/firewall exceptions on the Relay machine according to Recommended Settings for Best Performance in GFI LanGuard.

5. Check the Cache Folder settings for the Agent Relay and verify if the folder exists on the Relay machine. If the folder is missing, or you do not see 2 running httpd processes on the Relay computer, it means either corrupted Agent Relay installation or antivirus disrupting Apache processes.

   In such cases, uninstall the agent from the target using the command prompt, uninstall it from the console, then reinstall it from the console, set it as an Agent Relay, and reassign the required client machines to it.

6. Manually test if the client computer can successfully download patches or updates through the Agent Relay.

7. In the LanGuard server console, go to Dashboard > Overview > Agent Status and check the Agent Relay status. If it shows any errors, click on the Agent Diagnostics... link in the same window and address the errors found.

8. Through the Windows Control Panel, check if the computer acting as Agent Relay had previously LanGuard main application installed on it. If that's the case, uninstall this old deployment from the Windows Control Panel, manually uninstall the agent, uninstall it from the console, redeploy the agent, set it as an Agent Relay, and reassign the required client machines to it.

Testing

Run the Remediation job that was failing to download files and verify that it is completed successfully. If the issue persists, contact GFI LanGuard Support, gather and submit the following:

1. Remote agent IP address and hostname.
2. Relay agent IP address and hostname.
3. Server debug logs.
4. Agent debug logs.
5. Remediation job details screenshot.