Pending Download Status

Hi,

Could anyone help me solve this issue? When I tried to deploy a patch, like Chrome for example, on target machines, some show a status of “fixed” while others are stuck on “Pending download.” When I checked the client log on one of these machines, I found the error below:

FAILED to Synchronize - General transport failure. - SOCKET RECEIVE (winsock error 4294967286 - gather url - http://BigFix_SRV:52311/cgi-bin/bfenterprise/BESGatherMirror.exe?

I found some similar cases where they mentioned it may be due to firewall, antivirus, or network issues. The firewall team confirmed that nothing is blocked, and the server communicates on port UDP 53211 while the client replies on port TCP 53211 without any issues. The antivirus team also confirmed that they closed it on the server side during testing.

What do you think could be causing this issue, as some machines are patched successfully while others are stuck on Pending download?

Attached below is the log from the client.

At 00:08:21 +0300 -
Report posted successfully
At 00:37:01 +0300 - Updates for Windows Applications Extended (http://sync.bigfix.com/cgi-bin/bfgather/updateforwinappextend)
Failed downloading ‘http://BigFix_SRV:52311/bfmirror/bfsites/enterprisemirror_40_256/__fullsite’ as ‘__TempUpdateFilename’
At 00:37:01 +0300 -
FAILED to Synchronize - General transport failure. - SOCKET RECEIVE (winsock error 4294967286 - gather url - http://BigFix_SRV:52311/cgi-bin/bfenterprise/BESGatherMirror.exe?url=http://sync.bigfix.com/cgi-bin/bfgather/updateforwinappextend&Time=11Jun00:26:58&rand=ea52202c&ManyVersionSha1=da39a3ee5e6b4b0d3255bfef95601890afd80709
At 00:40:55 +0300 -
ActiveDirectory: Refreshed Computer Information - Domain: IDBE-EG
At 01:03:02 +0300 -
Report posted successfully
At 01:06:02 +0300 - Enterprise Security (http://sync.bigfix.com/cgi-bin/bfgather/bessecurity)
BackgroundAdviceEvaluation::FinishDataLoop side line file 2009 Non Security Updates (x64).fxf
At 01:06:37 +0300 - Enterprise Security (http://sync.bigfix.com/cgi-bin/bfgather/bessecurity)
BackgroundAdviceEvaluation::FinishDataLoop side line file 2011 Non Security Updates (x64).fxf
At 01:09:20 +0300 - Updates for Windows Applications Extended (http://sync.bigfix.com/cgi-bin/bfgather/updateforwinappextend)
Failed downloading ‘http://BigFix_SRV:52311/bfmirror/bfsites/enterprisemirror_40_256/__fullsite’ as ‘__TempUpdateFilename’
At 01:09:20 +0300 -
FAILED to Synchronize - General transport failure. - SOCKET RECEIVE (winsock error 4294967286 - gather url - http://BigFix_SRV:52311/cgi-bin/bfenterprise/BESGatherMirror.exe?url=http://sync.bigfix.com/cgi-bin/bfgather/updateforwinappextend&Time=11Jun01:07:11&rand=514f12fd&ManyVersionSha1=da39a3ee5e6b4b0d3255bfef95601890afd80709
At 01:39:36 +0300 - Enterprise Security (http://sync.bigfix.com/cgi-bin/bfgather/bessecurity)
BackgroundAdviceEvaluation::FinishDataLoop side line file Updates and Service Packs (Apps).fxf
At 01:49:50 +0300 - Updates for Windows Applications Extended (http://sync.bigfix.com/cgi-bin/bfgather/updateforwinappextend)
Failed downloading ‘http://BigFix_SRV:52311/bfmirror/bfsites/enterprisemirror_40_256/__fullsite’ as ‘__TempUpdateFilename’
At 01:49:50 +0300 -
FAILED to Synchronize - General transport failure. - SOCKET RECEIVE (winsock error 4294967286 - gather url - http://BigFix_SRV:52311/cgi-bin/bfenterprise/BESGatherMirror.exe?url=http://sync.bigfix.com/cgi-bin/bfgather/updateforwinappextend&Time=11Jun01:40:01&rand=a582bc74&ManyVersionSha1=da39a3ee5e6b4b0d3255bfef95601890afd80709
At 01:57:07 +0300 -
GatherHash command received.
At 01:57:30 +0300 - Enterprise Security (http://sync.bigfix.com/cgi-bin/bfgather/bessecurity)
Failed downloading ‘http://BigFix_SRV:52311/bfmirror/bfsites/enterprisemirror_17_4553/__diffsite4552’ as ‘__TempUpdateFilename’
At 01:59:40 +0300 - Enterprise Security (http://sync.bigfix.com/cgi-bin/bfgather/bessecurity)
Failed downloading ‘http://BigFix_SRV:52311/bfmirror/bfsites/enterprisemirror_17_4553/__fullsite’ as ‘__TempUpdateFilename’
At 01:59:40 +0300 -
FAILED to Synchronize - General transport failure. - SOCKET RECEIVE (winsock error 4294967286 - gather url - http://BigFix_SRV:52311/cgi-bin/bfenterprise/BESGatherMirror.exe?url=http://sync.bigfix.com/cgi-bin/bfgather/bessecurity&Time=11Jun01:57:08&rand=ddb73ee6&ManyVersionSha1=da39a3ee5e6b4b0d3255bfef95601890afd80709
Processing fixlet site.
At 02:01:28 +0300 -
Report posted successfully
At 02:02:01 +0300 - Enterprise Security (http://sync.bigfix.com/cgi-bin/bfgather/bessecurity)
Failed downloading ‘http://BigFix_SRV:52311/bfmirror/bfsites/enterprisemirror_17_4553/__diffsite4552’ as ‘__TempUpdateFilename’
At 02:06:05 +0300 - Enterprise Security (http://sync.bigfix.com/cgi-bin/bfgather/bessecurity)
Failed downloading ‘http://BigFix_SRV:52311/bfmirror/bfsites/enterprisemirror_17_4553/__fullsite’ as ‘__TempUpdateFilename’
At 02:06:05 +0300 -
FAILED to Synchronize - General transport failure. - SOCKET RECEIVE (winsock error 4294967286 - gather url - http://BigFix_SRV:52311/cgi-bin/bfenterprise/BESGatherMirror.exe?url=http://sync.bigfix.com/cgi-bin/bfgather/bessecurity&Time=11Jun02:01:31&rand=a35b5818&ManyVersionSha1=da39a3ee5e6b4b0d3255bfef95601890afd80709
At 02:10:42 +0300 -
Report posted successfully
At 02:12:20 +0300 - Enterprise Security (http://sync.bigfix.com/cgi-bin/bfgather/bessecurity)
Failed downloading ‘http://BigFix_SRV:52311/bfmirror/bfsites/enterprisemirror_17_4553/__diffsite4552’ as ‘__TempUpdateFilename’
At 02:13:51 +0300 - Enterprise Security (http://sync.bigfix.com/cgi-bin/bfgather/bessecurity)
Failed downloading ‘http://BigFix_SRV:52311/bfmirror/bfsites/enterprisemirror_17_4553/__fullsite’ as ‘__TempUpdateFilename’
At 02:13:51 +0300 -
FAILED to Synchronize - General transport failure. - SOCKET RECEIVE (winsock error 4294967286 - gather url - http://BigFix_SRV:52311/cgi-bin/bfenterprise/BESGatherMirror.exe?url=http://sync.bigfix.com/cgi-bin/bfgather/bessecurity&Time=11Jun02:11:09&rand=c76a3dd9&ManyVersionSha1=da39a3ee5e6b4b0d3255bfef95601890afd80709
At 02:23:12 +0300 - Updates for Windows Applications Extended (http://sync.bigfix.com/cgi-bin/bfgather/updateforwinappextend)
Failed downloading ‘http://BigFix_SRV:52311/bfmirror/bfsites/enterprisemirror_40_256/__fullsite’ as ‘__TempUpdateFilename’
At 02:23:12 +0300 -
FAILED to Synchronize - General transport failure. - SOCKET RECEIVE (winsock error 4294967286 - gather url - http://BigFix_SRV:52311/cgi-bin/bfenterprise/BESGatherMirror.exe?url=http://sync.bigfix.com/cgi-bin/bfgather/updateforwinappextend&Time=11Jun02:20:08&rand=35b84b74&ManyVersionSha1=da39a3ee5e6b4b0d3255bfef95601890afd80709
At 02:46:22 +0300 - Enterprise Security (http://sync.bigfix.com/cgi-bin/bfgather/bessecurity)
Failed downloading ‘http://BigFix_SRV:52311/bfmirror/bfsites/enterprisemirror_17_4553/__diffsite4552’ as ‘__TempUpdateFilename’
At 02:48:18 +0300 - Enterprise Security (http://sync.bigfix.com/cgi-bin/bfgather/bessecurity)
Failed downloading ‘http://BigFix_SRV:52311/bfmirror/bfsites/enterprisemirror_17_4553/__fullsite’ as ‘__TempUpdateFilename’
At 02:48:18 +0300 -
FAILED to Synchronize - General transport failure. - SOCKET RECEIVE (winsock error 4294967286 - gather url - http://BigFix_SRV:52311/cgi-bin/bfenterprise/BESGatherMirror.exe?url=http://sync.bigfix.com/cgi-bin/bfgather/bessecurity&Time=11Jun02:44:24&rand=f3e7046e&ManyVersionSha1=da39a3ee5e6b4b0d3255bfef95601890afd80709
At 02:56:24 +0300 - Updates for Windows Applications Extended (http://sync.bigfix.com/cgi-bin/bfgather/updateforwinappextend)
Failed downloading ‘http://BigFix_SRV:52311/bfmirror/bfsites/enterprisemirror_40_256/__fullsite’ as ‘__TempUpdateFilename’
At 02:56:24 +0300 -
FAILED to Synchronize - General transport failure. - SOCKET RECEIVE (winsock error 4294967286 - gather url - http://BigFix_SRV:52311/cgi-bin/bfenterprise/BESGatherMirror.exe?url=http://sync.bigfix.com/cgi-bin/bfgather/updateforwinappextend&Time=11Jun02:54:38&rand=458e8d99&ManyVersionSha1=da39a3ee5e6b4b0d3255bfef95601890afd80709
At 02:58:08 +0300 -
Beginning Relay Select
At 02:58:12 +0300 -
RegisterOnce: Attempting secure registration with ‘https://BigFix_SRV:52311/cgi-bin/bfenterprise/clientregister.exe?RequestType=RegisterMe60&ClientVersion=10.0.7.52&Body=1073879516&SequenceNumber=6154&MinRelayVersion=7.1.1.0&CanHandleMVPings=1&Root=http://BigFix_SRV%3a52311&AdapterInfo=c8-d9-d2-1d-bb-9c_10.45.10.0%2f24_10.45.10.38_0&AdapterIpv6=c8-d9-d2-1d-bb-9c%5efe80%3a%3a40fb%3ae44d%3ad1ed%3a68dd%2f64_0’

Client must be able to connect to BigFix_SRV on TCP port 52311. It must be able to resolve the name, too.
Some security tools monitor the network traffic and block “suspected” files. So, you can try to download the same URL (from logs http://BigFix_SRV:52311/bfmirror/bfsites/enterprisemirror_40_256/__fullsite) using a browser on the not working Client.

Firewall team mentioned that there is communication between Server and client as server communicate with clients on port 52311 UDP and from client to communicate with server on Port 52311 TCP.

But I will try your recommendation and see what will be the result

BR,
Mohamed Adel

Issue is solved ,It was policy on Firewall that enable communication between the BigFix server and client, but when push patch or update, it block the traffic.

2 Likes

Can you please ask him the exact mechanism that blocked this behavior? If it’s possible of course

They did not share with me the configuration, but they told me how it worked as they allow communication between server and clients, and everything was allowed, but once firewall with specific policy sensed there was traffic over MB/s, it dropped the traffic