Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 1 subscriber
  • Views 5587 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Odd Issues with Enterprise Console 4.5

Longun

Hi all.


I've been doing a quick lab with 4.5 before putting it into production but I've encountered a few issues.


For information I'm running on 2008 SP2 x64.  Using the inbuilt SQL express 2008 although in production it will use the full fat version.

Now the issues.

First the Sophos Management Service won't start correctly.  The service seems to start if left over night (Possible SQL slow to start issue?) I don't know SQL very well but was wondering if the database is starting correctly.  I'm getting two events.  In System I get Event ID 7031, "The service terminated unexpectedly".  In the application logs I've got Event ID 8004 " Data: 0x80007042b - The process terminated unexpectedly".

The other issue is the console, the status window appears to have frozen.  Lab PC's are updating ok and polices appear to be applying as I can see the changes on the endpoints when I change something in the policy but the console still shows them as "awaiting policy transfer".


I'll be raising a support call later but thought I'd ask on here first.

:3745


This thread was automatically locked due to age.
Parents
  • 0

    Hi Longun

    The issues regarding event viewer look like they need a full investigation and I would recommend contacting support about this.

    Awaiting policy transfer is most likely the ports 8192, 8193 and 8194. Please add exceptions in the windows firewall for these ports if it is being used. (Control Panel -> Administrative Tools -> Windows Firewall with Advanced Security then create a new rule.)

    If a rule already exists to open the ports then check that the Sophos Agent service is started and that you can do a telnet test to the machine (cmd -> Telnet <ip address> 8192), if you do not get an IOR return then the port is not open somewhere, if you do get a IOR then the port is talking, check the IOR is both directions. From the server to the client and the client to the server. If there is still no error you will need to start looking into the agent logs.

    C:\Documents and Settings\All Users\Application Data\Sophos\Remote Management System\3\Agent\Logs\

    If you are having difficulty in read the logs then contact support.

    :3748
Reply
  • 0

    Hi Longun

    The issues regarding event viewer look like they need a full investigation and I would recommend contacting support about this.

    Awaiting policy transfer is most likely the ports 8192, 8193 and 8194. Please add exceptions in the windows firewall for these ports if it is being used. (Control Panel -> Administrative Tools -> Windows Firewall with Advanced Security then create a new rule.)

    If a rule already exists to open the ports then check that the Sophos Agent service is started and that you can do a telnet test to the machine (cmd -> Telnet <ip address> 8192), if you do not get an IOR return then the port is not open somewhere, if you do get a IOR then the port is talking, check the IOR is both directions. From the server to the client and the client to the server. If there is still no error you will need to start looking into the agent logs.

    C:\Documents and Settings\All Users\Application Data\Sophos\Remote Management System\3\Agent\Logs\

    If you are having difficulty in read the logs then contact support.

    :3748
Children
No Data
Unfiltered HTML