Summary
When you manually update the Deep Security Relay Agent using the instructions in KB 1060674, it may fail with "STATUS_UNC_FAILURE" error.
The iaurelay.log may show either of the following snippets:
[2016-Jul-15 17:08:06 812|2916] [app] iAU::UriQuery::QueryIndex [src\common\src\uri_query.cpp(144)] Query URI : \\.\C:\ProgramData\Trend Micro\Deep Security Agent\relay\bundle\tmp\dsupdate_1468583943\/c22t2200v8.0.0l1p1r1o1 . . [struct iAU::errinfo_status_ * __ptr64] = IAU_STATUS_NETWORK_UNC_FAILURE[-1073676281(3,1,7)] . . [struct iAU::errinfo_status_ * __ptr64] = IAURELAY_STATUS_UNC_FAILURE
[2016-Jul-15 20:33:19 2036|1724] [app] iAU::UriQuery::QueryIndex [src\common\src\uri_query.cpp(144)] Query URI : \\.\C:\ProgramData\Trend Micro\Deep Security Agent\relay\bundle\tmp\dsupdate_1468606494\/c22t2200v9.5.0l4p1r3o1 . . [struct iAU::errinfo_status_ * __ptr64] = IAU_STATUS_NETWORK_UNC_FAILURE[-1073676281(3,1,7)] . . [struct iAU::errinfo_status_ * __ptr64] = IAURELAY_STATUS_UNC_FAILURE
The errors appear when the update bundle package didn't contain either of the following:
- update components from older version of Deep Security Agents (9.0 and below)
- pattern files from all regions
To prevent the issue:
This procedure is only applicable if all the deployed agent versions are 9.5 or higher.
- Apply the update bundle package by following the procedure in this article: Manually updating the Deep Security Relay Agent (DSR).
- Open the Deep Security Manager console.
- Navigate to Administration > System Settings > Updates.
- Uncheck the following:
- Support 9.0 (and earlier) Agents
- Download Patterns for All Regions.
- Go to Computers.
- Right-click the Relay where you applied the update, and choose Download Security Updates. Make sure that the event logs show "Pattern Update on Agents Successful".