This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Daily SophosUpdateManager warnings Event ID 16418 - The Share Deployment Operation Failed When Decoding Product Release

Getting the following warnings daily in event viewer SophosUpdateManager  Event ID 16418

The share deployment operation failed when decoding product release

The Product is Sophos Anti Virus SBE. This is installed on SBS 2011 and there are no red crosses on the server or client pc and they are

successfully checking for updates.

 

Does this error mean that it is not updating correctly

Many thanks

 



This thread was automatically locked due to age.
Parents
  • Hello James Mellor,

    which console version? You'd have to check there. The red cross is from the endpoint component which will not notice of share deployment fails - it just doesn't see any changes. To check open the Sophos GUI on an endpoint, click View product information -> expand Software. If Detection data is 5.34 then Detection identities should be more than 340, for 5.35 at least 217 identities. Also the Last updated under HIPS should be current.

    This is just to confirm - I'm pretty sure it's not updating.

    Christian

  • Thanks for your reply

     

    On the server Endpoint Security and Control is 10.6

    Detection Data is 5.35 and Detection Identities is 217

    Last updated is todays date.

  • Hello James,

    how frequent are these errors? While updating apparently works it's a good idea to assess the situation. Even transient deployment errors should be very rare.

    Christian

  • Every day at 5 minute intervals it would seem. There are no red crosses or failures on the Sophos shield as it were

    only in event viewer. The full message is

     

    C:\ProgramData\Sophos\Sophos Endpoint Management\4.0\Updates\Secure\SDFs\SophosMA
       sec
       7D48A012-0C64-4F21-BA27-A9CEDF442749
       0.0.0
       7D48A012-0C64-4F21-BA27-A9CEDF442749
       Couldn't create directory C:/ProgramData/Sophos/Sophos Endpoint Management/4.0/Updates/Secure

     

    Thanks

  • Daily. Looks like they can be every 5, or 10 minutes according to the event viewer

Reply Children
  • Hello James,

    thanks for the message. It suggests that your console is rather old (and retired - nevertheless as you can see basically it still works). Looks like it fails to update some metadata, management (of the current AV version) is likely impaired and you should upgrade ASAP. 

    Please see the release notes for SEC 5.4.1 - the Upgrading section contains link to articles with further information.

    Christian