"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
This article explains the updating behaviour of Sophos Anti-Virus for Mac OS X when its Secondary Update Location is configured to be Sophos.
Applies to the following Sophos product(s) and version(s) Sophos Anti-Virus for Mac OS X
Sophos Anti-Virus for Mac OS X can be configured with both a Primary and a Secondary update location. This provides a failover update location for endpoints that may travel outside of the corporate network. This Knowledgebase article only pertains to customers who use both Sophos Anti-Virus for Mac OS X and update from Sophos as a secondary update location.
Whenever Sophos Anti-Virus for Mac OS X updates from Sophos, it will always update to the latest version available. Depending on which client subscription you are using for their Primary update location, you may see unexpected updating behaviour if those clients switch over to the Secondary/Sophos update location.
To avoid any unwanted upgrade/downgrade scenarios when using either a Fixed version or a Previous tagged version; you will need to create your own externally accessible Secondary update location. Once created, you would then change the Secondary update location for those clients from Sophos, to the new update location created.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.