Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 4 replies
  • Subscribers 3 subscribers
  • Views 2623 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Update location changes do not persist

Jelko Seiboth

Hello everyone,

we've got some endpoints which are not connected to the local network of our company the whole time.

To make them able to update I've changed the Update location for Sophos AutoUpdate by editing the AllowLocalConfig line in file  %ProgramData%\Sophos\AutoUpdate\Config\iconn.cfg and setting the update location in AutoUpdate to Sophos with the corresponding credentials.

All done according to this https://support.sophos.com/support/s/article/KB-000033604?language=en_US KB (and some Posts in this community).

Some time ago the automatic updates on some endpoints stopped working and I've figured out that I can still change the Update location in Sophos AutoUpdate and successfully update them after that. But after reboot the settings are lost and the update fails.

The KB mentioned above seems to be up to date, so is this a bug or is there a new way to change the connection settings?

The affected endpoints are running Sophos Endpoint Security and Control version 10.8 with AutoUpdate version 5.16.37.

Thanks in advance for Your help.

Best regards,

Jelko



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to Jelko Seiboth

    The primary is not designed to be Sophos. It can be a http or unc path to your update location. The secondary can be Sophos. Surely for those computers that can’t contact your primary they will fail over to Sophos and then work. I’m not sure what the issue is.

  • +1 in reply to Sophos User930

    Well it worked for us for years this way. Anyway I know it might not be best practice to have no externally accessible update server/path.

    I just want to mention that the standalone installer of Sophos Endpoint Security and Control uses the same configuration (which it is not designed to do?): It uses Sophos primary (and only) update location, with the credentials provided during installation.

    Installing it standalone on another machine I've found a workaround, which might be useful for anybody trying to do it the same way:

    When entering the credentials in the configuration window of AutoUpdate, a file named "iconnlocal.cfg" is created. Since some time this file seems to be removed (by Sophos AutoUpdate?) on reboot so the settings are lost. To keep the settings enter the credentials in the configuration window so that a iconnlocal.cfg is created. Then copy the lines of that file below [PPI.WebConfig_Primary] to the same section of the iconn.cfg file.

    Whether it is supposed to do so or not, this keeps the changes after reboot and - as mentioned above - it is the same way the standalone installer does, so it can't be too bad it think.

Unfiltered HTML