> Source: [sk99118](https://support.checkpoint.com/results/sk/sk99118)

# sk99118 - Endpoint Security client is in disconnected state

| Property | Value |
|----------|-------|
| Solution ID | sk99118 |
| Date Created | 2014-04-11 |
| Last Modified | 2020-02-23 |
| Technical Level | Advanced |
| Products | Endpoint Security |
| Versions | Cloud, E89.X, E88.X, R82.20, R82.10, R82, R81.20 |
| OS | Windows, Gaia |

## Symptoms

- * Endpoint Security client is in disconnected state.
* Apache (httpd) Web Server is not able to start.
* httpd2 is listening to port 443 instead of port 4434.
* Running: $UEPMDIR/apache22/bin/httpd -d $UEPMDIR/apache22 -k start   
  or  
  /opt/CPshrd-R80.20/web/Apache/bin/httpd -d /opt/CPuepm-R80.**XX** /apache -k start -f /opt/CPuepm-R80.20/apache/conf/httpd.conf   
  Starting httpd: Address already in use: make_sock: could not bind to address \[::\]:443  
  Address already in use: make_sock: could not bind to address 0.0.0.0:443  
  no listening sockets available, shutting down  
  Unable to open logs
* In the cpda.log of Endpoint Security client the following error message appear:   

  ```
  
  DATE TIME   414 Sent request duration 31ms, Url: https://XXX.XXX.XXX.XXX:443/cp/connectionPoint/regep (CHTTPCall_curl::sendReq_internal)
  DATE TIME   414 ---ERROR--- Failed curl_perform, error: 60 (== Peer certificate cannot be authenticated with given CA certificates) (CHTTPCall_curl::sendReq_internal)
  DATE TIME   414 ---ERROR--- CURL error description: SSL certificate problem: error number 1 (CHTTPCall_curl::sendReq_internal)
  DATE TIME   414 NewCaCert: SSL caCert error occured, possibly server changed caCert, setting DA to recalculate proximity (CDA::updateSslErrorOccured)
  DATE TIME   414 setCalculatProximityEvent succeeded (CDA::SetCalculateProximityEvent)
  DATE TIME   414 ---ERROR--- Peer certificate cannot be authenticated with known CA certificates, curl error: CURLE_SSL_CACERT (CHTTPCall_curl::sendReq_internal)
  DATE TIME   414 No server HTTP response code has been received, checking proxy response code if used (CHTTPCall_curl::sendReq_internal)
  ```

## Cause

After the Endpoint Security Server installation, httpd2 should listen to port 4434 instead of port 443.

When httpd2 is listening to the same port as httpd, httpd will not abe able to start.

## Solution

This solution requires authentication. Please log in to view the full solution.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content