[out of date] Endpoint Protections Clients Version 11.0.9 UTM

Hi,

Can you post the trace log of the last update attempt?

Under \ProgramData\Sophos\AutoUpdate\Logs there should find a SophosUpdate.log file.

Regards,

Jak

 

Hi,

jak said:

Hi,

Can you post the trace log of the last update attempt?

Under \ProgramData\Sophos\AutoUpdate\Logs there should find a SophosUpdate.log file.

Regards,

Jak

 

 

in SophosUpdate.log I see below Error/Warning Message. This is the log file from a win 2008 R2 server OS.
A reboot of the machine is required. Will further Sophos AutoUpates fail if I do not reboot the machine?

Kind regards,
Roland

2016-11-06T19:25:03.058Z [102852] INFO IPCSender::Write IPCSender::Write: Writing message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate"><ErrorMessage><ID>AutoUpdate.RebootNeeded</ID><StringID>109</StringID><Sender>SophosUpdate</Sender></ErrorMessage><ReadableMessage>WARNING: Restart needed for updates to take effect</ReadableMessage></Config>

Hello Roland,

Will further Sophos AutoUpates fail
no, this is not the cause and not an error. If you can't spot the error please post a complete cycle, i.e. somewhere above there's another message like the one you've posted - the stuff between these messages constitutes a cycle.

Christian 

QC said:

Hello Roland,

Will further Sophos AutoUpates fail
no, this is not the cause and not an error. If you can't spot the error please post a complete cycle, i.e. somewhere above there's another message like the one you've posted - the stuff between these messages constitutes a cycle.

Christian 

 

Hello Christian,

I am not sure which line exactly to post. The following is the complete SophosUpdate.log (today) of a Windows 7 Client which Endpoint Protection is out of date.

Kind regards,
Roland

 

edited:

the following is SophosUpdate.log of another Windows 7 Client which Endpoint Proctection is out-of-date

 

Hello Roland,

thanks. The first log seems OK, apart from the Restart needed it looks fine and I see nothing which would indicate that the endpoint is out of date and there is no download error.

In the second log there is an error: ERROR SUL-Log [E83521] Cannot create stream 8d4b6263e104c0d22d3ef3d9e30415fax000.xml .... From what you say it looks like Web Protection blocks this file. I don't have a UTM so I can't say why this is so and where to find the log which could tell more.

Christian

QC said:

Hello Roland,

thanks. The first log seems OK, apart from the Restart needed it looks fine and I see nothing which would indicate that the endpoint is out of date and there is no download error.

In the second log there is an error: ERROR SUL-Log [E83521] Cannot create stream 8d4b6263e104c0d22d3ef3d9e30415fax000.xml .... From what you say it looks like Web Protection blocks this file. I don't have a UTM so I can't say why this is so and where to find the log which could tell more.

Christian

 

Hello Christian,

thank you for your kind help.
I will try to put http://dci.sophosupd.com to my exceptions in Web Protection. A Firewall should not block its own Endpoint Protection Clients.

Kind regards,
Roland

QC said:

Hello Roland,

thanks. The first log seems OK, apart from the Restart needed it looks fine and I see nothing which would indicate that the endpoint is out of date and there is no download error.

In the second log there is an error: ERROR SUL-Log [E83521] Cannot create stream 8d4b6263e104c0d22d3ef3d9e30415fax000.xml .... From what you say it looks like Web Protection blocks this file. I don't have a UTM so I can't say why this is so and where to find the log which could tell more.

Christian

 

Hello Christian,

thank you for your kind help.
I will try to put http://dci.sophosupd.com to my exceptions in Web Protection. A Firewall should not block its own Endpoint Protection Clients.

Kind regards,
Roland