The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
When protecting endpoints in your Sophos Console nothing appears to happen, the icon on the endpoint(s) does not change to show a orange arrow. Leaving the console for a period of time shows no progress or a response to the deployment. The event log on the endpoint and console have no relevant entries.
First seen in Enterprise Console 4.5.0Sophos Control Center 4.0.0Sophos Enterprise Manager 4.7.0
Your updating policy used by the endpoints you are protecting has no Initial Install Source set, or just has 'Use primary server address'. Advanced trace logging will show entries that are similar to the following:
00007666 1.20214355  Error [0x00001220] path `http://server/UpdateManager/CIDs/S000/SAVSCFXP` not UNC or HTTP 00007667 1.20226765  Error [0x00001220] path `` not UNC or HTTP 00007668 1.20234025  Error [0x00001220] path `` not UNC or HTTP 00007669 1.20239055  Error TraceEEComputerInstall[0x00001220] Could not install computer 2 because the config is empty
Note: Replace <server> with the actual name of the server hosting a distribution location from Sophos Update Manager, in most situations you can use the server name hosting your Sophos Management Service.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.