This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

problem with configuring sophos update manager

Hello,

 

Installed on: Windows Server 2012 

I got the following problem when I want to air gap my Sophos Enterprise Console. I configured a share and added this share to the source of the update manager. When I click OK Sophos warns me that the folder is not managed. When I click Yes I'm able to continue. But when I want to update, it said the update failed. I've included the log file below:

 

 

 

 

2017-06-22 06:45:43 : <Warning> Attempt to modify file system according to license state was unsuccessful<Info> Payload has changed. Attempting to start escalation.
2017-06-22 06:45:43 : <Info> Downloading and processing customer file data...
2017-06-22 06:45:43 : <Info> Attempting to read local customer file: catalogue/sumcf.dat
2017-06-22 06:45:43 : <WARNING> Failed to load any customer file contents. Enforcing product synchronisation ...
2017-06-22 06:45:43 : <Info> Downloading remote customer file.
2017-06-22 06:45:43 : <Info> Successfully downloaded remote customer file content from \\EHVSVR001\SophosUpdateManager\Warehouse
2017-06-22 06:45:43 : <Info> Modifying file according to license state 0
2017-06-22 06:45:43 : <Warning> Attempt to modify file system according to license state was unsuccessful
2017-06-22 06:45:43 : <Info> Loading warehouses...
2017-06-22 06:45:43 : <WARNING> Failed to retrieve timestamp from local warehouse sdds.def_retired.xml (error: Catalogue does not exist or its content is invalid: sdds.def_retired.xml)
2017-06-22 06:45:43 : <WARNING> Failed to retrieve timestamp from local warehouse sdds.SUM2016-4.2.xml (error: Catalogue does not exist or its content is invalid: sdds.SUM2016-4.2.xml)
2017-06-22 06:45:43 : <WARNING> Failed to retrieve timestamp from local warehouse sdds.fw_osx_epa_MAC2017-2.1.xml (error: Catalogue does not exist or its content is invalid: sdds.fw_osx_epa_MAC2017-2.1.xml)
2017-06-22 06:45:43 : <WARNING> Failed to retrieve timestamp from local warehouse sdds.epa_WIN2017-3.2.xml (error: Catalogue does not exist or its content is invalid: sdds.epa_WIN2017-3.2.xml)
2017-06-22 06:45:43 : <WARNING> Failed to retrieve timestamp from local warehouse sdds.fw_x_xp_2060.3.xml (error: Catalogue does not exist or its content is invalid: sdds.fw_x_xp_2060.3.xml)
2017-06-22 06:45:43 : <WARNING> Failed to retrieve timestamp from local warehouse sdds.fw_linux_s_LIN2017-5.1.xml (error: Catalogue does not exist or its content is invalid: sdds.fw_linux_s_LIN2017-5.1.xml)
2017-06-22 06:45:43 : <Info> Adding packages to sync...
2017-06-22 06:45:43 : <Info> Finding dependencies...
2017-06-22 06:45:43 : <Info> Syncing packages...
2017-06-22 06:45:43 : <WARNING> Sync iteration failed. CurrentResult: 6, Error: Cannot create stream 50c99a173406862c8dc889fc2f8c5729x000.xml

 

 

 



This thread was automatically locked due to age.
  • Hello CIS EHV,

    the \\...\SophosUpdateManager\Warehouse is a copy of the \Warehouse on the on-Internet SUM (if it'd be on the SUM there wouldn't be an air-gap)?

    Christian

  • Hello Christian,

     

    That's true. But we still need to work with the warehouse copy from the internet. My question is: how do I get it working?  The network itself has no internet.

     

    kind regards,

     

    CIS EHV

     

  • Hello CIS EHV,

    you've probably read the SESC in an air gapped network article. Did you make sure that the Warehouse copy is consistent and complete? The source SUM must not perform an update while the Warehouse is copied. 

    Christian

  • Hello Christian,

     

    the warehouse copy is indeed complete when i've downloaded it from the company's network. When i click update now he copy's the warehouse folder from the local share to the SophosUpdate share. After the copy there are some folders he didn't copy from my local share. the catelogue + the APPFEED folder. When i configured this share folder and added this to the sources tab in the SUM he gives me the following notice:

     

    It is not possible to determine if the source location \\...\SophosUpdateManager has a direct network path to sophos because the location is not managed.

     

    i don't know if this has something to do with my problem?

     

    Thank you for your help.

     

    Erik

  • Hello Erik,

    as for the notice: A manged location is a SUM's default share \\...\SophosUpdate\. If a SUM has has a managed location \\OtherSUM\SophosUpdate\ as source then SEC can determine OtherSUM's source. 

    some folders he didn't copy from my local share. the catelogue + the APPFEED folder
    to make sure I understand you correctly (using SUM-AG as name for the air gapped server): \\SUM-AG\SophosUpdate\Warehouse\ is populated but there's no \\SUM-AG\SophosUpdate\Warehouse\catalogue\ and no \\SUM-AG\SophosUpdate\Warehouse\APPFEED\ folder?

    You get the same Cannot create stream error in the SUMTrace log as before? Or for some other file?

    Christian