The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
When selecting a filter such as 'Managed computers with outstanding Sophos product errors' a number of computers are listed that have no reported errors.
First seen in Enterprise Console 4.0.0
These endpoints had had Sophos compliance agent (NAC) installed, the agent reported an error but was subsequently uninstalled.
To confirm the solution in this article applies, you should run the below command:
SQLCMD -E -S (local)\SOPHOS -d SOPHOS50 -Q "SELECT Name FROM dbo.ComputersAndDeletedComputers WHERE NacAssessmentResult=2"
If the out list of computers from the above command matches the computers that are known to have the issue and the Sophos compliance agent is no longer used on your network then please follow the below steps to resolve the issue.
Upgrade to Enterprise Console 5.1 or later. The purge task run by the Sophos Management Service every 24 hours will resolve the problem. Otherwise you can manually use the PurgeDB tool to safely remove these entries from the database. For more information on PurgeDB see article 109884.
Solution 2 This method requires direct access to the database and miss typing of the command could potentially cause a database corruption; we therefore suggest you only follow these steps if you are unable to upgrade to Enterprise Console 5.1 or later.
Before attempting these steps, please backup your database . For steps on how to do this see article 110380.
SQLCMD -E -S .\SOPHOS -d DatabaseName -Q "UPDATE dbo.ComputersAndDeletedComputers SET NacAssessmentResult=0 WHERE NacAssessmentResult > 0 AND ID NOT IN (SELECT ComputerID FROM dbo.ComputerPolicyStates WHERE Type=8)"
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.