This knowledge base article details how to configure a diagnostic message trail for the Sophos Management Communications System (MCS). Enabling a message trail may be requested by Sophos Support so as to get more information that can be used to further troubleshoot issues related to the endpoint communication.
Applies to the following Sophos products and versions Central Endpoint Advanced 11.5.5Central Intercept X 11.5.5 UTM Managed Endpoint
C:\Documents and Settings\All Users\Application Data\Sophos\Management Communications System\Endpoint\Config\
C:\ProgramData\Sophos\Management Communications System\Endpoint\Config\
<McsCommon> <diagnosticTrailEnabled>1</diagnosticTrailEnabled> </McsCommon>
C:\Documents and Settings\All Users\Application Data\Sophos\Management Communications System\Endpoint\Trail\
C:\ProgramData\Sophos\Management Communications System\Endpoint\Trail\
APPSPROXY, CORC, CORE, EFW, HMPA or SWC
sudo defaults write /Library/Preferences/com.sophos.mcs SMEMcsEnableMsgTrails -bool true; sudo launchctl stop com.sophos.configuration
Note: Enter you Mac admin password if prompted.
sudo cp -R /Library/Caches/com.sophos.mcs/trails/ ~/Desktop/MCStrails/
sudo defaults write /Library/Preferences/com.sophos.mcs SMEMcsEnableMsgTrails -bool false; sudo launchctl stop com.sophos.configuration
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable for us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. For technical support post a question to the community. Or click here for new feature/product improvements. Alternatively for paid/licensed products open a support ticket.