Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 6 replies
  • Answers 1 answer
  • Subscribers 3 subscribers
  • Views 5495 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Daily SophosUpdateManager warnings Event ID 16418 - The Share Deployment Operation Failed When Decoding Product Release

James Mellor

Getting the following warnings daily in event viewer SophosUpdateManager  Event ID 16418

The share deployment operation failed when decoding product release

The Product is Sophos Anti Virus SBE. This is installed on SBS 2011 and there are no red crosses on the server or client pc and they are

successfully checking for updates.

 

Does this error mean that it is not updating correctly

Many thanks

 



This thread was automatically locked due to age.
Parents
  • 0

    Hello James Mellor,

    which console version? You'd have to check there. The red cross is from the endpoint component which will not notice of share deployment fails - it just doesn't see any changes. To check open the Sophos GUI on an endpoint, click View product information -> expand Software. If Detection data is 5.34 then Detection identities should be more than 340, for 5.35 at least 217 identities. Also the Last updated under HIPS should be current.

    This is just to confirm - I'm pretty sure it's not updating.

    Christian

  • 0 in reply to QC

    Thanks for your reply

     

    On the server Endpoint Security and Control is 10.6

    Detection Data is 5.35 and Detection Identities is 217

    Last updated is todays date.

Reply Children
  • 0 in reply to James Mellor

    Hello James,

    how frequent are these errors? While updating apparently works it's a good idea to assess the situation. Even transient deployment errors should be very rare.

    Christian

  • 0 in reply to QC

    Every day at 5 minute intervals it would seem. There are no red crosses or failures on the Sophos shield as it were

    only in event viewer. The full message is

     

    C:\ProgramData\Sophos\Sophos Endpoint Management\4.0\Updates\Secure\SDFs\SophosMA
       sec
       7D48A012-0C64-4F21-BA27-A9CEDF442749
       0.0.0
       7D48A012-0C64-4F21-BA27-A9CEDF442749
       Couldn't create directory C:/ProgramData/Sophos/Sophos Endpoint Management/4.0/Updates/Secure

     

    Thanks

  • 0 in reply to QC

    Daily. Looks like they can be every 5, or 10 minutes according to the event viewer

  • 0 in reply to James Mellor

    Hello James,

    thanks for the message. It suggests that your console is rather old (and retired - nevertheless as you can see basically it still works). Looks like it fails to update some metadata, management (of the current AV version) is likely impaired and you should upgrade ASAP. 

    Please see the release notes for SEC 5.4.1 - the Upgrading section contains link to articles with further information.

    Christian

Unfiltered HTML