"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
When performing actions in Enterprise Console with 'Auditing' enabled the following error message is displayed.
Failed to open audit event ----- [outer exception] ----- -- error: 0x829E0033 -- facility: Sophos Management Service Exception -- source: struct ISMT_Threats
[Stack Trace Follows]
Note: the source may also be:
-- source: struct ISMT_Errors
First seen in Enterprise Console 5.2.0
Under certain SQL Server language settings, the auditing of certain events can generate exceptions which cause Enterprise Console to close.
A SQL file has been created to remove the dependency on any particular language setting. To apply the fix, perform the following steps.
Note: It is strongly recommended that you take a backup of the 'SophosSecurity' database prior to updating it. For details on how to do this see article: 110380.
On the Sophos Management Server computer:
On the computer hosting the Sophos database: Note: If you are unsure which computer this is see article 113030.
sqlcmd -E -S (local)\SOPHOS -i C:\windows\temp\SEC88637.sql
The SQL file updates the following three stored procedures in the SophosSecurity database:
to ensure that time conversions are carried out correctly.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.