Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 3291 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Enterprise not showing any status for on-access scanning

stevmorr_sfait

Hi,

On my Sophos enterprise manager there is sometimes PC's which do not show the 'on-access' scanning as active (when you log into this PC locally, it is active/enabled).

Enterprise does not say it is inactive, but instead just lists as blank. The updates are listed as 'Yes' and policys are 'same as policy' so it does receive updates ok.

I have browsed through the knowledge base but not found anything similar. Any suggestions for a cause or possible solution would be much appreciated.

Enterprise 4.5.1

client PC - sophos endpoint and control 9.5

:11881


This thread was automatically locked due to age.
  • 0

    Hello,

    most likely the Anti-Virus Details tab is also mostly blank. Try restarting the Sophos Agent service on the client. Also check if the HKLM\SOFTWARE\Sophos\Remote Management System\ManagementAgent\Adapters\SAV key is present and contains a non-blank value for DLLPath.

    Christian

    :11883
  • 0

    Thanks for the quick response Christian. Restarting the 'sophos agent' service appears to work!

    This helps a lot as previously I had resorted to reinstalling the endpoint security on the PC, at least I can do this remotely without causing any interuption to our users.

    Would be good to find a cause for this but not essential.

    Thanks for your help.

    Steven

    :11887
  • 0

    Hello Steven,

    thanks for the kudos.

    Would be good to find a cause for this

    I haven't seen it with A-V lately (except when the mentioned regkey was missing) but it regularly happens with the Device and Data Control status. As is usually only lasts for the session (or until the Agent is restarted) it doesn't seem  essential - but it looks like the client reverts to the default policy in these cases. I have a call open and am trying to get some useful traces.

    Christian     

    :11895
  • 0

    Hi, I have noticed this too particularly with the Data Control, again restarting the sophos agent helps, i also thought it may have had something to do with power options, but the pc was left with none set, and it still happens, would be interested if there is any fixes.

    :11899
  • 0

    Thanks again.If you need any more information on my set up then feel free to ask.

    Beaufort - all of the PC's on my network are set so they never shut down(only screensaver/requires login when left for several minutes) so that should not interfere or cause this.

    Yes now that you mention it this seems to happen a lot for the Data Control displaying as blank.

    Thanks

    :11913
  • 0

    I had this issue again and restarting the 'Sophos Agent' did not resolve. However you were correct in that the registry entry was mssing. I created a reg fix (below) which I applied to the PC, then restarted the agent service and now shows Active!

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Remote Management System\ManagementAgent\Adapters\SAV]
    "DLLPath"="C:\\Program Files\\Sophos\\Sophos Anti-Virus\\SAVAdapter.dll"

    Obviously if you are on Vista/ win 7 the DLL path may vary from the above.

    Thanks again

    :12221
Unfiltered HTML