"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
Sophos Update Manager reports 'Threat delivery failed' or 'Threat detection update failed' in Update Managers within your Sophos Console.
The SUMTrace log at these locations:
%AllUsersProfile%\Application Data\Sophos\Update Manager\Logs\
Example SUMTrace exert:
[\\<server>\SophosUpdates\CIDs\S000][<package>][<guid>][<version>][Could not add network connection to \\<server>\SophosUpdates; user NULL A Windows API call returned error 1219] The deployment to share '\\<server>\UpdateManager\CIDs\S000' failed to connect with the error: Could not add network connection to \\<server>\UpdateManager\CIDs\S000; user NULL A Windows API call returned error 1219
First seen in Sophos Update Manager
Taken from this Microsoft article.
Multiple connections to a server or shared resource by the same user, using more than one user name, are not allowed. Disconnect all previous connections to the server or shared resource and try again.
There are multiple connections to the SophosUpdate share using more than one username.
net use /delete \\<computer>\SophosUpdate
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.