"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
An Update Manager reports:
Threat detection data update failed.
In the Update Manager details (see below) you see the following error:
[Date/Time] 80040404 Threat detection data update failed.
First seen in Enterprise Console 4.0.0
The error '80040404' is purely designed to alert you to a problem with your Update Manager and is generic in nature. As such, further investigation is required to establish the root cause and a fix.
This error appears with another (specific) error code that identities the cause of the error.
Note: The release of Sophos Update Manager (SUM) 1.6.0 alerts to expired licenses. This error code can be triggered if your license has expired.
If your license has expired:
The error will be logged following a period of 20 days. Before, this 20 day period you will see the following error being logged:
[Date/Time] 80040401 Software update failed.
Following the 20 day period you will also see:
Decode operation failed. Details: License has expired. Please renew your license and force an update.
Event ID: 16389 Source: SophosUpdateManager Details: Decode operation failed. Details: License has expired. Please renew your license and force an update
For further information see Information on Sophos Update Manager (SUM) 1.6.0 in the Related Information section.
If your license has not expired:
Review the Update Manager details and look for an entry under "Outstanding alerts and errors" that has a different code than the two listed below:
80040404 Threat detection data update failed. 80040401 Software update failed.
In some cases it may be easier to use the Sophos Update Manager Logviewer to find the underlying cause. To do this:
The Message field will contain information about the most recent error(s). Search the Sophos Knowledge base for information on the error(s) you find. If you are unable to find an article that pertains to the error message(s) you see using either of these methods, please contact Sophos Technical Support for further assistance.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.