Out dated "Engine version"

Hello Faisal,

where is this information from about 3.74.1 being the oldest (I guess you mean latest)?
The on-premise Recommended Release Notes name 3.73.0.

Christian

I'm also seeing the same on a Nessus report, Plugins Last Updated November 11 at 4:52 PM Plugin Set 201811111652

Sophos Anti-Virus is installed on the remote host :

  Installation path : C:\Program Files (x86)\Sophos\Sophos Anti-Virus
  Product version   : 10.8.2.334
  Engine version    : 3.73.0.2420

The engine version is out-of-date. The oldest supported version from
the vendor is 3.74.1.
  Virus signatures last updated   : 2018/11/13
Virus signatures last updated   : 2018/11/13

As a result, the remote host might be infected by viruses.

Hello Faisal and JT~,

whom do you trust, Nessus or me [;)]?

Seriously - tenable's description of the Nessus Plugin for Sophos (12215) has four links that refers to the Sophos site: The home page, two regarding the Latest IDE, and the fourth links to the Version release dates page (note that it refers only to the on-premise SESC, not Central). The Nessus page states the plugin was last Modified: 2018/10/10. Dunno if thie Engine check was introduced at this time, maybe.
Two points are obvious though:
1. tenebale has no direct information feed (i.e. official data from Sophos)
2. they mis-interpret the version article

As to 2.: It seems that neither the staged rollout is taken into account, nor the fact that these are proposed dates (it's not uncommon that a new version is behind this schedule)

Christian

I am seeing the same information from a Nessus report:

Plugin Output: Sophos Anti-Virus is installed on the remote host :
Installation path : C:\Program Files (x86)\Sophos\Sophos Anti-Virus

Product version : 10.8.2.334

Engine version : 3.73.0.2420
The engine version is out-of-date. The oldest supported version from the vendor is 3.74.1.

Virus signatures last updated : 2018/11/12 Virus signatures last updated : 2018/11/12
As a result, the remote host might be infected by viruses.

However, I can't find instructions on how to update the Engine version to 3.74.1.

Hello ISSA_SESC,

you are just quoting IT~'s post - forgot to add content or is this an I have this problem too?

Christian

I am having the same same problem and I cut and pasted my Nessus results.  Here they are again below.  Hopefully you can see them now:

I am seeing the same information from a Nessus report:

Plugin Output: Sophos Anti-Virus is installed on the remote host :
Installation path : C:\Program Files (x86)\Sophos\Sophos Anti-Virus

Product version : 10.8.2.334

Engine version : 3.73.0.2420
The engine version is out-of-date. The oldest supported version from the vendor is 3.74.1.

Virus signatures last updated : 2018/11/12 Virus signatures last updated : 2018/11/12
As a result, the remote host might be infected by viruses.

However, I can't find instructions on how to update the Engine version to 3.74.1.

Hello ISSA_SESC,

I can't find instructions on how to update the Engine version to 3.74.1
maybe my post isn't as clear as I thought it is - I've left out the conclusion as I assumed it's obvious.
There are no instructions because you can't update the engine because it is not (yet) out. Nessus incorrectly assumes the article lists actual definite deployment dates. Furthermore - I didn't mention this in my previous post - the "announcement" (that isn't one) of 3.74.1 for November is for the Preview version. For Recommended the estimate is Jan 2019.

Christian

Hi Christian,

Thank you for the update and the details.  This will be good to note in my security report.  

I had the same issue. I've opened a ticket with Nessus in hopes they will correct their plugin and get this fixed.

Hi QC;

Thanks for such great posts. As I can see from the dates of these posts, I believe we should have the update now. However, we are still having the same vulnerabilities being detected. Could you be please able to advise when the update would be released?

Kind Regards;

Abdul.