Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 1 subscriber
  • Views 1153 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Shield icon - "update failed" indication

QC

I noticed yesterday that the shield icon does not "immediately" indicate an update failure with the white-on-red cross. It looks like it takes about an hour until the overlay appears. There's also no pop-up before that but the tooltip correctly indicates the failed update. The Changes to the shield icon ... article makes no mention of this.

Christian

:7061


This thread was automatically locked due to age.
  • 0

    I also noticed when poking about with Process Monitor the key:

    HKLM\SOFTWARE\[Wow6432Node]\Sophos\AutoUpdate\StartupDelay

    is looked for.

    Using Process Monitor with a filter for: Path contains "\sophos\" and Result is: "NAME NOT FOUND" Can be quite useful. :)

    The AutoUpdate Service (alsvc.exe) on start-up checks for this key and if it finds it adjust the time after the service starts to perform the first update, i.e. kick off alupdate.exe.

    The change in only alerting to a failed update after 1 hour is a good thing in my opinion.  Especially if a machine takes a while to get an IP for whatever reason, no one is alarmed falsely.

    Jak

    :7091
  • 0

    The change in only alerting to a failed update after 1 hour is a good thing in my opinion.  Especially if a machine takes a while to get an IP for whatever reason, no one is alarmed falsely.

    If you are not notified at the first failure when using a short interval or if the "initial" update fails it is probably a good thing. OTOH it might delay detection of a more general issue (who is constantly monitoring SEC :smileywink:?). If it is really one hour then it should be documented (if it is configurable this too should be published).

    Christian

    :7101
Unfiltered HTML