The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
At the end of the installation of Sophos Cloud Managed Endpoint on Windows you receive the following warning message dialog:
Installation is almost Complete Sophos Endpoint Security and Control has been installed. An internet connection is required for registration, updates and configuration. Registration, updates and configuration will being when a connection becomes available.
In addition to the above, the following symptoms can be observed:
Sophos AutoUpdate could not continue due to a missing or wrong item of information in the config file
First seen in Sophos Cloud Managed EndpointSophos Cloud Managed Server 1.3.0
The computer has failed to register with Sophos Central Admin and/or the updating policy has not been received by Sophos AutoUpdate: As a result AutoUpdate is unable to download and install Sophos Anti-Virus to complete the installation.
The installer will wait 5 minutes for the computer to register with Sophos Central Admin and obtain an updating policy after which the above dialog is displayed.
If after waiting 15 minutes the symptoms in the 'Issue' section are still observed, it is suggested you check the Sophos Management Communication (MCS) log files, specifically the MCSClient.log file. Note: Information on locating MCS log files can be found in article 119626.
In the first instance you should check if the computer has obtained a unique Computer ID from Sophos Central Admin.
Note: Information on how to check if a computer has obtained a computer ID can be found in article 119652.
Following which checking for HTTP response codes in the MCSClient.log may prove helpful. For example:
A 503 response code is indicative of the server being busy and asking the computer to back off and retry later.
A 500 error on the other hand would indicate a server side issue and one you should contact Support for assistance.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.