Certain network restrictions may prevent Software Vulnerability Manager agents from reporting scan results, resulting in the following error in the agent scan log:
[Date and Time] Error when sending WinHttp request (12175)
[Date and Time] Connection error....
[Date and TIme] Error in HttpRequest: status=499, StatusText="A security error occurred' ,winCode=12175
Cause
In most cases, the root cause is a block somewhere on the network. Consider that some security networks have explicit deny procedures in place to disallow anything that is not explicitly allowed on the corporate firewall, the corporate proxy, or another security device with blocking/filtering functions.
Common causes are listed below:
- Software Vulnerability Manager uses a Certificate Revocation List (CRL) to ensure secure data transfer. The required online CRL URLs for certificate revocation may not be whitelisted at the Proxy/Firewall.
- There is a Proxy on the network, but the client(s) facing WinHttp 12175 have netsh proxy set = Direct.
- Content-inspection Proxy is stripping the original certificate and the security validation breaks.
- The Agent/Daemon/Plugins are run with user credentials insufficient to bypass the Proxy/Firewall.
Solution
Whitelist the URLs required by the Software Vulnerability Manager Cloud CRL at your network's Firewall/Proxy. For details on which online CRL validation websites must be whitelisted, see the article SVM Cloud CRL online requirements.
Workarounds
If you’re still experiencing this error, you can temporarily disable CRL to troubleshoot. Keep in mind, this method is not secure and should not be used as a long-term solution.
Disable CRL on the Daemon
- Go to Windows Registry and navigate to HKLM at:
SYSTEM\CurrentControlSet\Services\Flexera Corporate Software Inspector Daemon\
- Double-click on Image Path and add the following text at the end of the line after "--service-launch":
--ignore-crl --ignore-ca --ignore-an
- Restart the Software Vulnerability Manager Daemon service under services.msc for the changes to take effect.
Disable CRL on the Agent
- Go to Windows Registry and navigate to HKLM at:
SYSTEM\CurrentControlSet\Services\Flexera Corporate Software Inspector Agent
- Double-click on Image Path and add the following text at the end of the line after "--service-launch":
--ignore-crl --ignore-ca --ignore-cn
