Reflexion will be End-of-life on March 31,2023. See Sophos Reflexion EoL FAQs to learn more.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 11 replies
  • Answers 1 answer
  • Subscribers 13 subscribers
  • Views 2562 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

No Sophos Security products installed - Windows 11

Int3g3r

Hello

I am trying to install Sophos Endpoint Client on a VM running Windows 11 (22H2 - 22621.525).
I want to create a gold image.
The installation completes without errors. After that the status says "No Sophos security products installed".
See screenshots. Only the core agent is installed. Sophos Intercept X is missing.

See screenshots and logs.

What is going wrong here?

Greetings Int3g3r

/cfs-file/__key/communityserver-components-multipleuploadfilemanager/9ed7f2d9_2D00_07b9_2D00_46d5_2D00_91a6_2D00_0f0c1003da41-269107-complete/Logs.zip



This thread was automatically locked due to age.
  • 0

    Thank you for reaching the community forum,

    Does this VM has an existing Sophos endpoint before but got uninstalled? If so? You may need to uninstall this Endpoint first by running the Sophos ZAP tool?

    You can also follow the below steps to force update the endpoint and install the remaining components.

    1. Turn off tamper protection on the affected endpoint.
    2. Log in to the endpoint using an admin account.
    3. In Services, stop Sophos AutoUpdate Service.
    4. Rename the following folders:
      C:\ProgramData\Sophos\AutoUpdate\Cache\decoded
      C:\ProgramData\Sophos\AutoUpdate\data\warehouse
      to:
      C:\ProgramData\Sophos\AutoUpdate\Cache\old-decoded
      C:\ProgramData\Sophos\AutoUpdate\data\old-warehouse
    5. Delete the file SophosUpdateStatus.xml from the below folder:
      C:\ProgramData\Sophos\AutoUpdate\data\status
    6. Start Sophos AutoUpdate Service.
    7. Open Sophos Endpoint Agent.
    8. Go to About and click Update Now.
    9. Click Open Endpoint Self Help Tool.
    10. Click Refresh and check the status of the affected component on the Installed Components page.
    Glenn ArchieSeñas (GlennSen)
    Global Community Support Engineer | Global Community and Digital Customer Support
    Connect, Engage, Earn Rewards - Join the Sophos Community
  • 0 in reply to GlennSen

    This is a new created VM. I installed Windows 11 today.
    So there is no old Sophos installation.

    I'm gonna try the solution below.

    Edit:
    C:\ProgramData\Sophos\AutoUpdate\data\warehouse, doesn't exist. So i can't rename it.

    Problem persists.
    "No Sophos security products installed" on main page.

  • 0 in reply to Int3g3r

    When viewing the device in Sophos Central, under the "Protection" column what is shown? 

    Kushal Lakhan
    Global Community Support Engineer
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  - Visit Sophos Techvids
  • 0 in reply to Qoosh

    Everything looks normal

    Does Sophos require windows updates to be enabled?
    I have temporarily disabled this.

    [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager]
    "SilentInstalledAppsEnabled"=dword:00000000

    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU]
    "NoAutoUpdate"=dword:00000001

  • 0 in reply to Int3g3r

    As long as windows updates have been completed relatively recently, you should not encounter any issues. 

    I suggest checking the following log file to see if there are any errors.
    - C:\ProgramData\Sophos\Sophos UI\Logs\SophosUI.Net.log

    What may also help is to kill the "Sophos UI.exe" process from Task Manager, then launch ProcessMonitor, and re-open it. You will need to stop Tamper Protection to do so. Filtering Process monitor for the process "Sophos UI.exe" will allow you to see if there are any Registry Read errors when the process is trying to obtain data to be displayed.

    Kushal Lakhan
    Global Community Support Engineer
    Connect with Sophos Support, get alerted, and be informed.
    If a post solves your question, please use the "Verify Answer" button.
    The New Home of Sophos Support Videos!  - Visit Sophos Techvids
  • 0

    Did you ever manage to resolve this?  I have the exact same issue on a Windows 10 machine, with the latest windows updates

  • 0 in reply to jfar

    Does the key:

    HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Management\Policy\UserInterface

    exist?

  • 0 in reply to Sophos User930

    yes it does - the main issue seems to be that it is unable to install updates. I tried Sophos ZAP and forcing it to update as per the procedure above, but I'm still getting nothing

  • 0 in reply to jfar

    No, i just ignored it.
    On deployment the Sophos applications got installed.
    I would suggest to test the gold image.

    I noticed that the Sophos software is only installed when Windows updates are activated. If you deploy the image on a test machine, and then run Windows updates, the Sophos software should also be installed correctly.

Unfiltered HTML