概要
由於資料庫結構 (Database Schema) 版本過舊,新安裝的用戶端未能在 Agent Management 主控台中顯示。
在此情況下,當用戶端回報至 Apex One 伺服器時,無法將新的用戶端資訊插入至資料庫。
根據 Agent 的 Conn_YRMMDD.log(位於 C:\Program Files (x86)\Trend Micro\Security Agent\ConnLog):
* Connection status: Online
* Result: Connection established OK.
根據 Agent 的 TmuDump.txt(位於 C:\Program Files (x86)\Trend Micro\Security Agent\AU_Data\AU_Log):
用戶端位置顯示為內部網路,但卻從 TMAU(Internet)下載更新。
Downloading [https://osce14-p.activeupdate.trendmicro.com/activeupdate/ini_xml.zip] to
[C:\Program Files (x86)\Trend Micro\Security Agent\AU_Data\AU_Temp\10584_9736\ini_xml.zip]...
Based on Agent’s Ofcdebug.log:
[tmlisten.exe][CAwarenessTypeLocation::CheckEventState] Current location is [Inside Office]
[255c : 2534] (00) (D) [-S-][tmlisten.exe][tmSendLogToHttpServerLwithCallBack] After Post
or Get nError = 200 - [cnttmsoc_tmsock.cpp(4323)]
[255c : 2534] (00) (D) [-S-][tmlisten.exe]tmSendLogToHttpServerLwithCallBack
- nError == HTTP_STATUS_OK || HTTP_STATUS_NOT_MODIFIED - [cnttmsoc_tmsock.cpp(4350)]
[255c : 2534] (00) (D) [-S-][tmlisten.exe]CServerAuthMgrCln::Verify - >> -
[auth_serverauthmgrcln.cpp(419)]
[255c : 2534] (00) (D) [-S-][tmlisten.exe]CServerAuthMgrCln::Verify - Start process -
[auth_serverauthmgrcln.cpp(431)]
[255c : 2534] (00) (D) [-S-][tmlisten.exe]CServerAuthMgrCln::DecodeSignature - Decoded length (256) -
[auth_serverauthmgrcln.cpp(785)]
[255c : 2534] (00) (D) [-S-][tmlisten.exe]CServerAuthMgrCln::VerifySign - VerifyNotification success -
[auth_serverauthmgrcln.cpp(389)]
[255c : 2534] (00) (I) [-S-][tmlisten.exe]OfcVerifySignature - [Succ] The signature verification of HTTP
request
(/officescan/cgi/isapiClient.dll?SA_ISR=MCExHzAdBgNVBAMTFk9mZmljZVNjYW4gU2VydmVyIE5UU0c%3D
&SA_SN=Cu3Y4pxE2kONat%2BWKiDda
[255c : 2534] (00) (I) [-S-][tmlisten.exe][tmGetCgiRetCode] Return : -39 - [cnttmsoc_tmsock.cpp(3436)]
[255c : 2534] (00) (D) [-S-][tmlisten.exe][tmSendLogToHttpServerLwithCallBack] After tmGetCgiRetCode()
nError = -39 - [cnttmsoc_tmsock.cpp(4374)]
[255c : 2534] (00) (I) [-S-][tmlisten.exe][tmSendLogToHttpServerLwithCallBack] DeleteFile done, err = 0 -
[cnttmsoc_tmsock.cpp(4464)]
[255c : 2534] (00) (E) [-S-][tmlisten.exe]tmSingleServerSender - [tmSingleServerSender][SAF] Can't create
a connection to < APEX ONE SERVER>
[255c : 2534] (00) (D) [-L-][tmlisten.exe][rtSendUpdateStatusWithPolicy][Update] Failed. Error = -39 -
[cnttmlis_tmdupd.cpp(2316)]
- HTTP STATUS OK. After Post or Get nError = 200
- Update failed with nError = – 39
nError -39 means ISAPI_FAIL_NO_SUCH_CLIENT. Some ISAPICLIENT.dll will check the database if the UID exists else would return error -39.
根據 Apex One 伺服器的 SqlMigration.log(位於 C:\Program Files (x86)\Trend Micro\Apex One\PCCSRV\Admin\Utility\SQL):
顯示磁碟空間不足,導致資料庫更新失敗。
Updating database (Failed) *** Could not deploy package. Error SQL72014: .Net SqlClient Data Provider: Msg 3202, Level 16, State 1, Line 34 Write on "D:\MSSQL13.SQL1\MSSQL\Backup\ApexOne01-20201025-142506.bak" failed: 112(There is not enough space on the disk.) … Error SQL72014: .Net SqlClient Data Provider: Msg 3013, Level 16, State 1, Line 34 BACKUP DATABASE is terminating abnormally.