"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
If you have two or more client computers connected to Enterprise Console via a message relay server, and the message relay server is shut down, there is no indication of this to the console administrator. Neither is the user of the client computer informed.
Applies to the following Sophos product(s) and version(s) Enterprise Console
If a message relay server is closed down in the following circumstances, no further information of value will be displayed in the console or on the client computers.
The console administrator will see only one computer as unconnected, that being the message relay server. As there will be no clear indication as to which computer is the message relay server, this can be confusing. The clients of that message relay server will be listed in the console as being in the same state that they were when the message relay server was shut down. Also, the loss of communication with the server will not be indicated on the client computers.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.