Ask the Community
Groups
I am getting a "Antivirus protection expired" message on our endpoints. - Connect IT Community | Kaseya
<main> <article class="userContent"> <h3 data-id="problem">Problem</h3> <p>Many users are seeing an "Antivirus protection expired" message with the only options being to Renew or Uninstall. They cannot click on anything else while the error is on the screen. Our Kaseya shows an expiration date of next year.</p> <p><img src="/attachments/token/dVCmswcz1tpAjJNbIchK7TDJb/?name=AVerror.JPG" alt="AVerror.JPG" class="embedImage-img importedEmbed-img"></img></p> <p>Running an update from the VSA does not resolve the issue.</p> <h3 data-id="cause">Cause</h3> <p>The license is good on the endpoint for 94 days and then gets renewed when there are less than 60 days left from the main key on the VSA. There is a daily job run on the VSA to update the main key every 90 days.</p> <p>Checking the Security logs on the VSA in this folder shows the error;</p> <pre class="code codeBlock" spellcheck="false" tabindex="0">$:\Kaseya\Logs\1\</pre> <p><br>SecurityLogsMain.txt error;<br><br></p> <pre class="code codeBlock" spellcheck="false" tabindex="0">9/2/2019 8:01:39 AM, Error, "P10-KASEYA-01", "Kaseya Plugin Host Service", "Daily Job - Update Kaspersky License File: There was no endpoint listening at <a href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Fsec-update-lic.kaseya.com%2FKasLicense%2FService.asmx">https://sec-update-lic.kaseya.com/KasLicense/Service.asmx</a> that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details.<br>Server stack trace: <br> at System.ServiceModel.Channels.HttpOutput.WebRequestHttpOutput.GetOutputStream()<br> at System.ServiceModel.Channels.HttpOutput.Send(TimeSpan timeout)<br> at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.SendRequest(Message message, TimeSpan timeout)<br> at System.ServiceModel.Channels.RequestChannel.Request(Message message, TimeSpan timeout)<br> at System.ServiceModel.Dispatcher.RequestChannelBinder.Request(Message message, TimeSpan timeout)<br> at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)<br> at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)<br> at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)<br><br>Exception rethrown at [0]: <br> at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)<br> at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)<br> at SEC.Common.KasperskyLicenseService.ServiceSoap.GetKeyFileNames(GetKeyFileNamesRequest request)<br> at SEC.Common.KasperskyLicenseService.ServiceSoapClient.GetKeyFileNames()<br> at SEC.Common.License.AVLicenseFileUpdater.CheckForNewLicense()<br> at SEC.Common.DailyJob.Process()", "", "", NULL<br>9/3/2019 8:01:28 AM, Error, "P10-KASEYA-01", "Kaseya Plugin Host Service", "Daily Job - Update Kaspersky License File: There was no endpoint listening at <a href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Fsec-update-lic.kaseya.com%2FKasLicense%2FService.asmx">https://sec-update-lic.kaseya.com/KasLicense/Service.asmx</a> that could accept the message. This is often caused by an incorrect address or SOAP action. See InnerException, if present, for more details.<br><br>Server stack trace: <br> at System.ServiceModel.Channels.HttpOutput.WebRequestHttpOutput.GetOutputStream()<br> at System.ServiceModel.Channels.HttpOutput.Send(TimeSpan timeout)<br> at System.ServiceModel.Channels.HttpChannelFactory`1.HttpRequestChannel.HttpChannelRequest.SendRequest(Message message, TimeSpan timeout)<br> at System.ServiceModel.Channels.RequestChannel.Request(Message message, TimeSpan timeout)<br> at System.ServiceModel.Dispatcher.RequestChannelBinder.Request(Message message, TimeSpan timeout)<br> at System.ServiceModel.Channels.ServiceChannel.Call(String action, Boolean oneway, ProxyOperationRuntime operation, Object[] ins, Object[] outs, TimeSpan timeout)<br> at System.ServiceModel.Channels.ServiceChannelProxy.InvokeService(IMethodCallMessage methodCall, ProxyOperationRuntime operation)<br> at System.ServiceModel.Channels.ServiceChannelProxy.Invoke(IMessage message)<br><br>Exception rethrown at [0]: <br> at System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(IMessage reqMsg, IMessage retMsg)<br> at System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(MessageData& msgData, Int32 type)<br> at SEC.Common.KasperskyLicenseService.ServiceSoap.GetKeyFileNames(GetKeyFileNamesRequest request)<br> at SEC.Common.KasperskyLicenseService.ServiceSoapClient.GetKeyFileNames()<br> at SEC.Common.License.AVLicenseFileUpdater.CheckForNewLicense()<br> at SEC.Common.DailyJob.Process()", "", "", NULL</pre> <h3 data-id="resolution">Resolution</h3> <p>This URL needs to be a whitelist for the VSA to access the Kaspersky Security license server: <a href="/home/leaving?allowTrusted=1&target=https%3A%2F%2Fsec-update-lic.kaseya.com%2F" rel="noopener noreferrer nofollow">https://sec-update-lic.kaseya.com/</a></p> <p> </p> <p><br><br><br></p> </article> </main>