Upgrade error when updating to Enterprise console 4 on a air gapped network

Christian,

There are no errors in the logs.

From what section do you need a screen shot? This is not on the "child" sum these errors are on the server connected to the internet (sophos). The one i use to download the latest defenitions.

Peter

From what section do you need a screen shot

Well, the Update managers view - the status (including the Configuration column) and the Details for the "main" server (Software subscriptions status and a few lines of History).

There are no errors in the logs

As only four SUMTrace logs are kept the error might "scroll off" after a short time. That's why I'm interested in the details.

Apart from these errors you want to know whether your air-gapped server is now up to date?

Christian

Update manager details:

http://img832.imageshack.us/i/updatemanagerdetails.jpg/

Status overview:

http://img854.imageshack.us/i/statusoverview.jpg/

Subscriptions overview:

http://img854.imageshack.us/i/statusoverview.jpg/

The air gapped server is not up to date because my enterprise console on my download server is having these errors we are trying to solve now. I think when we solve these errors we solve also the erros on the air gapped server.

Thank you for all your work you've have done so far.

The third link (subscriptions) duplicates the second.

Anyway the SUM looks up to date (note that the error is under History and from 3:04 a.m.). But there is no Software subscription status (which should come above History) and the Configuration Does not match (almost as if it hasn't subscribed to anything). Right-clicking the SUM please select Comply with Configuration. It should then show Matches after a short time or report some error - that is, it shouldn't but it might :smileyhappy:.

Christian

Christian

Herby the correct link for the 3th screen shot:

http://img638.imageshack.us/i/softwaresubscriptions.jpg/

The SUM is up to date now on my main (internet) server (as far as i can see). There is also a new folder in the C:\Documents and Settings\All Users\Application Data\Sophos\Update Manager\Update Manager named CIDs.

Do i have to copy this folder as well to my air gapped server? It seems to me that the installation files for the new (up to date) clients are in here.

Peter

There is also a new folder

That's the "Distribution" folder, Peter. For whatever reason the SUM was not "fully configured" and although it downloaded "something" it did not think that it should it also write it to a CID. No wonder you did not get any additional messages as these usually refer to an active subscription. The CIDs are what the clients need to update their software - the "additional" SUM only needs the warehouse but it might be that this was incomplete (just compare the number of files in the copy with the main one- before copying again of course).

After the copy the logviewer on your air-gapped server should tell you whether it deployed anything.

Christian

Christian,

The upgrade succeeded both on my internet connected server as wel on my air gapped server. The clients are receiving the new (9.5) version of endpoint security and control.

I created a new share for the "warehouse" folder and pointed the SUM to it and pushed the "comply with configuration" option.

Now i want to remove the "old" em library from my consoles. I tried it with these solutions:

http://www.sophos.com/support/knowledgebase/article/61481.html

http://www.sophos.com/support/knowledgebase/article/29068.html

But the Em library is still in the "updates" section.

Regards,

Peter

Peter,

do you get the EM Library is still running ... pop up when starting the console (you might have checked Do not ask me again)? Anyway - click Tools->Manage Libraries, it should not open EM Library but tell you There are no console groups using managed EM Library CIDs. Read carefully and choose the correct answer :smileywink:

Christian

Christian,

Yes i get the popup and no it doesn't tell me "There are no console groups using managed EM Library CIDs." when i click  on the manage libraries. The MMC pops up but there is no EM library. This is not possible cause i uninstalled it accordingly the 2 articles i used to remove the em library.

The EM library link is still in the console.

Any idea's

Peter

Peter,

please run the Updating Hierarchy report and scroll to the last page(s).  You should see Legacy updating policies (showing the EM Library CIDs last known to SEC) and Groups using legacy updating policies. Does the latter list any group?

Christian