Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 20 replies
  • Answers 1 answer
  • Subscribers 4 subscribers
  • Views 30649 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Upgrade SEC from 5.4.0 to 5.5.0

warnox

Hi,

I would like to do a standalone, in-place upgrade of SEC from 5.4.0 to 5.5.0. Reading through the installation and release notes, I came across this KB (https://community.sophos.com/kb/en-us/124873) regarding TLS 1.2.

The article states, 'Windows - All supported versions are compatible'. How do I find out which are the supported versions and if we have any clients running unsupported versions?

Thanks for any help.



This thread was automatically locked due to age.
Parents
  • 0

    Hi warnox,

    The below table might help you with the TLS 1.2 supported Windows OS.

    Windows OS Version SSL 2.0 SSL 3.0 TLS 1.0 TLS 1.1 TLS 1.2
    Windows XP & Windows Server 2003 ✓ ✓ ✓ X X
    Windows Vista & Windows Server 2008 ✓ ✓ ✓ ✓ ✓
    Windows 7 & Windows Server 2008 R2 ✓ ✓ ✓ ✓ ✓
    Windows 8 & Windows Server 2012 ✓ ✓ ✓ ✓ ✓
    Windows 8.1 & Windows Server 2012 R2 ✓ ✓ ✓ ✓ ✓
    Windows 10 & Windows Server 2016 ✓ ✓ ✓ ✓ ✓

    Hope it helps

    Regards,

    Gowtham Mani
    Community Support Engineer | Sophos Technical Support
    Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

  • 0 in reply to Gowtham Mani

    Thanks, I wasn't sure if it was referring to a Windows version or Sophos client version.

    So basically, if there are 2003/XP machines in the environment we can't upgrade past 5.4.0?

  • 0 in reply to QC

    Thanks, hopefully in 5.5.0 they do agree :)

  • 0 in reply to QC

    Hi 

    So I’ve been back and forth with Sophos support, and they won’t help me until we upgrade our version of Sophos Enterprise server from 5.2.0 to 5.5.0.

     I ran the 5.5.0 installer on our server, and I hit an issue regarding RMS. 

    You have managed computers running a version of RMS unsupported by Enterprise Console

    Looking on the net, Windows XP and Server 2003 can't run TLS 1.2.

    https://blogs.msdn.microsoft.com/kaushal/2011/10/02/support-for-ssltls-protocols-on-windows/

    I have extended support for XP & Server 2003, I'm worried if I upgrade SEC to 5.5.0, the XP and Server 2003 will stop receiving there updates.

    Has anyone upgraded to 5.5.0 and can confirm the XP and Server 2003 machines can still receive updates?

    Look forward to hearing from you.

    Regards

    Thomas

     

  • 0 in reply to Thomas Newman

    Hello Thomas,

    anyone [...] can confirm
    anyone other than yours truly who said so late December 2017? Note that RMS comes with its own libraries, it doesn't rely on OS support.
    In addition, RMS is "only" the management component, it doesn't affect updating. If RMS fails you would, of course, neither get the status of the endpoint not be able to change its policies but if updating has worked before it would continue to do so.

    Christian

  • 0 in reply to QC

    Hi Christian,

    I see thanks for clearing that up. I was worried that the legacy XP & Server 2003 machines would stop communicating when upgrading to 5.5.0, updates & policies.

    Thanks for all your help.

    Regards

    Thomas

  • 0 in reply to Thomas Newman

    I managed to update mine from 5.4.0 to 5.5.0 and 2003 machines are still reporting in but I didn't get any warnings during pre-checks. Suppose you need to update the RMS component on the affected machines before upgrading SEC.

  • 0 in reply to warnox

    Hello warnox et al.,

    update the RMS component
    just as AutoUpdate and the other (sub-)components you can't selectively update RMS - their version is determine by the Anti-Virus version. In addition as the relevant articles say all "current" Windows versions already fulfilled the requirement when SEC 5.4.1 was released.

    Christian

  • 0 in reply to QC

    Our 2003 servers are running 10.7.6 so I guess the latest Anti-Virus version still supports this legacy OS.

    "all "current" Windows versions already fulfilled", is a bit confusing as 2003 isn't a current (or supported) version of Windows.

  • 0 in reply to warnox

    Hello warnox,

    version of Windows
    my bad, should have said "current" Sophos Anti-Virus for Windows versions. And supported can have three meanings: Relating to support of the SAV version by Sophos, relating to support of the platform by SAV/Sophos, and relating to support of the platform/Windows version by Microsoft.
    As already mentioned there's also a lot of confusion regarding RMS and its protocol support vs. Windows and supported SSL/TLS versions.

    Christian

  • 0 in reply to QC

    Hi Christian,

    I tried to proceed with the install, but it won't let me get past this point.

    What version of Sophos Anti Virus contains the old version of RMS?

  • 0 in reply to Thomas Newman

    Hello Thomas,

    if it's due to an old version of SAV then these should be only Mac OS X or Linux endpoints that also are out-of-date.
    More likely you have endpoints that show an empty SAV version.

    Christian

Reply Children
Unfiltered HTML