"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
When running the Enterprise Console version 5.x installer the 'System Property Checks - Sophos Enterprise Console has checked the properties of your system.' screen returns one or more warnings and/ or errors.
Note: For information on what upgrade paths are possible see: Upgrade Paths to Sophos Enterprise Console
First seen in Enterprise Console 5.0.0
See specific warning/error below for explanation.
This article explains all of the checks that the Sophos Enterprise Console version 5.x installer makes prior to installation or upgrade. These pre-install checks ensure that your install or upgrade will go smoothly. Please select the failure message you wish to troubleshoot or gain guidance on from the list below.
Note: The installer logs the success or failure of the checks performed to the 'Sophos_bootstrapper <DATE> <TIME>.log' file.
Sophos_bootstrapper <DATE> <TIME>.log
It is likely that this warning will not require any action.
The Sophos Message Router (RouterNT.exe) hosts an Interoperable Object Reference (IOR) on TCP port 8192.
This IOR contains among other things the IP addresses of the machine. Clients establishing a connection to the server as part of RMS read this IOR string to determine where to connect back to and on which port (by default 8194).
When a machine has multiple IP addresses, the clients connecting will attempt to connect to each of these IPs in order which can cause a delay in setting up the connection. If clients from multiple networks are to be managed by SEC, then the IOR may need to contain multiple addresses such that clients in both networks are able to connect back to the server on port 8914. In which case there is nothing to do.
If however all of the clients to be managed by SEC exist in the one network, it may be considered optimal to configure the router to only host the relevant IP in the IOR. It may only be appropriate to change the configuration if there are many IP addresses assigned to the machine and as a result the clients may take longer to connect.
Please see article 111862 for details on how to configure RouterNT.exe
Computer should not have a pending reboot. We recommend you reboot the computer before continuing
The check looks at HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\PendingFileRenameOperations to determine if the computer needs to be restarted before installing
This computer should have at least 5GB free disk space on the primary drive.
A default installation may be required to install a number of pre-requisites such as .Net Framework and SQL Server 2008; by default they would installed to the primary drive.
Also the number of subscriptions and distribution locations could vary from install to install.
If disk space is a concern, Sophos recommends that you manually install a SQL instance specifying alternative drives for the data and logs. It may also be worth considering deploying additional distribution points to a remote file server or installing an additional Sophos Update Manager on another computer.
The computer has at least 2 GB RAM (Increased to 4 GB RAM for SEC 5.4.0)
Support operating system version and service pack must be installed. For supported platforms please see 113278.
Note: if you are running Windows 2011 Small Business Edition you may see the warning reference Windows 2008 R2.
Reboot and re-run the Enterprise Console installer. If this error still appears, check the following exists and remove if not required:
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.