So I triple checked and it has the latest cumulative update KB5001568. According to the catalog site KB4487044 was replaced by KB4598296 which was replaced by KB5001568 (Makes sense given they are cumulative I guess), however, I noticed the .dll file didn't update its version.

In the logs, it's mentioning a connectivity error, even though on the proxy it's showing a connection over 443 to our tenant site when the attempt is made. Do I need to add the proxy information in the web.config file for .NET as well as using the command line switch?

[1E88:1C24][2021-03-18T07:12:19]i001: Burn v3.11.0.1701, Windows v10.0 (Build 17763: Service Pack 0), path: C:\Users\username\AppData\Local\Temp\3\{EF2C31E1-05DE-4092-B1C8-C82A418538A4}\.cr\Azure ATP Sensor Setup.exe
[1E88:1C24][2021-03-18T07:12:19]i000: Initializing hidden variable 'AccessKey'
[1E88:1C24][2021-03-18T07:12:19]i000: Initializing hidden variable 'ProxyConfiguration'
[1E88:1C24][2021-03-18T07:12:19]i000: Initializing hidden variable 'ProxyUserPassword'
[1E88:1C24][2021-03-18T07:12:19]i000: Initializing string variable 'NetFrameworkCommandLineArguments' to value '/passive /showrmui'
[1E88:1C24][2021-03-18T07:12:19]i009: Command Line: '"-burn.clean.room=C:\Users\username\Azure ATP Sensor Setup.exe" -burn.filehandle.attached=636 -burn.filehandle.self=656 /quiet NetFrameworkCommandLineArguments=/q ProxyUrl=http://proxy.ip.address:80 AccessKey=*****'
[1E88:1C24][2021-03-18T07:12:19]i000: Setting string variable 'WixBundleOriginalSource' to value 'C:\Users\username\Azure ATP Sensor Setup.exe'
[1E88:1C24][2021-03-18T07:12:19]i000: Setting string variable 'WixBundleOriginalSourceFolder' to value 'C:\Users\username\'
[1E88:1C24][2021-03-18T07:12:19]i000: Setting string variable 'WixBundleLog' to value 'C:\Users\username\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210318071219.log'
[1E88:1C24][2021-03-18T07:12:20]i000: Setting string variable 'WixBundleName' to value 'Azure Advanced Threat Protection Sensor'
[1E88:1C24][2021-03-18T07:12:20]i000: Setting string variable 'WixBundleManufacturer' to value 'Microsoft Corporation'
[1E88:1C24][2021-03-18T07:12:20]i000: Loading managed bootstrapper application.
[1E88:1C24][2021-03-18T07:12:20]i000: Creating BA thread to run asynchronously.
[1E88:1C24][2021-03-18T07:12:21]i100: Detect begin, 5 packages
[1E88:1C24][2021-03-18T07:12:21]i000: 2021-03-18 11:12:21.4388 Debug DeploymentModel DetectDeploymentAction DetectBegin [\[]Installed=False[\]]
[1E88:1C24][2021-03-18T07:12:21]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_1_for_KB4019990~31bf3856ad364e35~amd64~~6.1.1.2'
[1E88:1C24][2021-03-18T07:12:21]i000: Setting numeric variable 'Kb4019990Windows2008R2Exists' to value 0
[1E88:1C24][2021-03-18T07:12:21]i000: Registry key not found. Key = 'SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Package_1_for_KB4019990~31bf3856ad364e35~amd64~~6.2.1.1'
[1E88:1C24][2021-03-18T07:12:21]i000: Setting numeric variable 'Kb4019990Windows2012Exists' to value 0
[1E88:1C24][2021-03-18T07:12:21]i000: Setting string variable 'NetFrameworkRegistryValue' to value '461814'
[1E88:1C24][2021-03-18T07:12:21]i000: Setting string variable 'ServerLevelsServerCoreRegistryValue' to value '1'
[1E88:1C24][2021-03-18T07:12:21]i000: Registry value not found. Key = 'SOFTWARE\Microsoft\Windows NT\CurrentVersion\Server\ServerLevels', Value = 'Server-Gui-Shell'
[1E88:1C24][2021-03-18T07:12:21]i052: Condition 'Kb4019990Windows2008R2Exists' evaluates to false.
[1E88:1C24][2021-03-18T07:12:21]i052: Condition 'Kb4019990Windows2012Exists' evaluates to false.
[1E88:1C24][2021-03-18T07:12:21]i052: Condition 'NetFrameworkRegistryValue >= 460798' evaluates to true.
[1E88:1C24][2021-03-18T07:12:21]i052: Condition 'NetFrameworkRegistryValue >= 460798' evaluates to true.
[1E88:1C24][2021-03-18T07:12:21]i101: Detected package: Kb4019990Windows2008R2Package, state: Absent, cached: None
[1E88:1C24][2021-03-18T07:12:21]i101: Detected package: Kb4019990Windows2012Package, state: Absent, cached: None
[1E88:1C24][2021-03-18T07:12:21]i101: Detected package: NetFrameworkPackageServer, state: Present, cached: None
[1E88:1C24][2021-03-18T07:12:21]i101: Detected package: NetFrameworkPackageServerCore, state: Present, cached: None
[1E88:1C24][2021-03-18T07:12:21]i101: Detected package: MsiPackage, state: Absent, cached: None
[1E88:1C24][2021-03-18T07:12:21]i199: Detect complete, result: 0x0
[1E88:1870][2021-03-18T07:12:21]i000: 2021-03-18 11:12:21.4701 Debug DeploymentModel .ctor [\[]DeploymentAction=Install[\]]
[1E88:1870][2021-03-18T07:12:21]i000: 2021-03-18 11:12:21.5951 Debug DeploymentModel .ctor [\[]IsAfterRestartAndConfigured=False[\]]
[1E88:17A4][2021-03-18T07:12:25]i000: 2021-03-18 11:12:25.1107 Error DeploymentModel ValidateCreateSensorAsync Microsoft.Tri.Infrastructure.ExtendedException: Sanitized exception: [\[]Type=System.Net.Http.HttpRequestExceptionMessage=kZbHZ02cunBcHiKyFrnbkg==StackTrace= at async Task<TResponse> Microsoft.Tri.Common.CommunicationWebClient.SendAsync<TResponse>(byte[\[][\]] requestBytes, int offset, int count)
at async Task<TResponse> Microsoft.Tri.Common.CommunicationWebClient.SendWithRetryAsync<TResponse>(byte[\[][\]] requestBytes, int offset, int count)InnerException=Microsoft.Tri.Infrastructure.ExtendedException: Sanitized exception: [\[]Type=System.Net.WebExceptionMessage=qjknu4hBXwvJI0E0QdTPeg==StackTrace= at Stream System.Net.HttpWebRequest.EndGetRequestStream(IAsyncResult asyncResult, out TransportContext context)
at void System.Net.Http.HttpClientHandler.GetRequestStreamCallback(IAsyncResult ar)InnerException=Microsoft.Tri.Infrastructure.ExtendedException: Sanitized exception: [\[]Type=System.Security.Authentication.AuthenticationExceptionMessage=6z1uGhDl9oSwNuQo3dIDfw==StackTrace= at void System.Net.TlsStream.EndWrite(IAsyncResult asyncResult)
at void System.Net.PooledStream.EndWrite(IAsyncResult asyncResult)
at void System.Net.ConnectStream.WriteHeadersCallback(IAsyncResult ar)InnerException=[\]][\]][\]]
at Microsoft.Tri.Common.CommunicationWebClient.<SendWithRetryAsync>d__9`1.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Tri.Common.CommunicationWebClient.<SendAsync>d__7.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Tri.Sensor.Common.WorkspaceApplicationSensorApiDeploymentProxy.<SendAsync>d__5.MoveNext()
--- End of stack trace from previous location where exception was thrown ---
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task)
at Microsoft.Tri.Sensor.Deployment.Bundle.UI.DeploymentModel.<ValidateCreateSensorAsync>d__52.MoveNext() failed connecting to service. The issue can be caused by a transparent proxy configuration [\[]WorkspaceApplicationSensorApiEndpoint=Unspecified/tenantnamesensorapi.atp.azure.com:443[\]]
[1E88:1870][2021-03-18T07:12:25]i000: 2021-03-18 11:12:25.1107 Info DeploymentManager Run ValidateCreateSensorAsync returned [\[]validateCreateSensorResult=FailedConnectivity[\]]
[1E88:1870][2021-03-18T07:12:25]i000: 2021-03-18 11:12:25.1107 Error DeploymentManager Run Failed to connect to server
[1E88:1870][2021-03-18T07:12:25]i000: 2021-03-18 11:12:25.1107 Debug SensorBootstrapperApplication Run Engine.Quit [\[]deploymentResultStatus=1602 isRestartRequired=False[\]]
[1E88:1C24][2021-03-18T07:12:25]i500: Shutting down, exit code: 0x642
[1E88:1C24][2021-03-18T07:12:25]i410: Variable: Kb4019990Windows2008R2Exists = 0
[1E88:1C24][2021-03-18T07:12:25]i410: Variable: Kb4019990Windows2012Exists = 0
[1E88:1C24][2021-03-18T07:12:25]i410: Variable: NetFrameworkCommandLineArguments = /passive /showrmui
[1E88:1C24][2021-03-18T07:12:25]i410: Variable: NetFrameworkRegistryValue = 461814
[1E88:1C24][2021-03-18T07:12:25]i410: Variable: RebootPending = 0
[1E88:1C24][2021-03-18T07:12:25]i410: Variable: ServerLevelsServerCoreRegistryValue = 1
[1E88:1C24][2021-03-18T07:12:25]i410: Variable: WixBundleAction = 5
[1E88:1C24][2021-03-18T07:12:25]i410: Variable: WixBundleElevated = 1
[1E88:1C24][2021-03-18T07:12:25]i410: Variable: WixBundleLog = C:\Users\username\AppData\Local\Temp\Azure Advanced Threat Protection Sensor_20210318071219.log
[1E88:1C24][2021-03-18T07:12:25]i410: Variable: WixBundleManufacturer = Microsoft Corporation
[1E88:1C24][2021-03-18T07:12:25]i410: Variable: WixBundleName = Azure Advanced Threat Protection Sensor
[1E88:1C24][2021-03-18T07:12:25]i410: Variable: WixBundleOriginalSource = C:\Users\username\Azure ATP Sensor Setup.exe
[1E88:1C24][2021-03-18T07:12:25]i410: Variable: WixBundleOriginalSourceFolder = C:\Users\username\
[1E88:1C24][2021-03-18T07:12:25]i410: Variable: WixBundleProviderKey = {7159ef02-2939-4ecd-905d-6ec71a60c4b5}
[1E88:1C24][2021-03-18T07:12:25]i410: Variable: WixBundleSourceProcessFolder = C:\Users\username\
[1E88:1C24][2021-03-18T07:12:25]i410: Variable: WixBundleSourceProcessPath = C:\Users\username\Azure ATP Sensor Setup.exe
[1E88:1C24][2021-03-18T07:12:25]i410: Variable: WixBundleTag =
[1E88:1C24][2021-03-18T07:12:25]i410: Variable: WixBundleUILevel = 2
[1E88:1C24][2021-03-18T07:12:25]i410: Variable: WixBundleVersion = 2.0.0.0
[1E88:1C24][2021-03-18T07:12:25]i007: Exit code: 0x642, restarting: No
We support Ukraine and condemn war. Push Russian government to act against war. Be brave, vocal and show your support to Ukraine. Follow the latest news HERE