Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 7 replies
  • Answers 1 answer
  • Subscribers 2 subscribers
  • Views 8365 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

fresh install SEC 5.5.1 enterprise console on new server with no outside internet access

Jeff Mann

I had to rebuild Sophos Enterprise Console on a new server, everything is setup, but I have no subscriptions available and it wants me to put in credentials to pull the initial download from Sophos. No way I can do this because we are not connected to the outside world, although, I do have access to warehouse and CIDs folders that someone in the company loads into a shared drive for us. I’ve searched everywhere and can’t seem to find instructions on what to do in this case... are the subscriptions in the warehouse? What exactly do I need to do to get the console to have a list of available subscriptions?

Thanks



This thread was automatically locked due to age.
Parents
  • 0

    Hello Jeff Mann,

    Sophos Update Manager: Install and configure Endpoint security and control on air gapped network describes this scenario.

    Please note that

    1. the SEC and SUM versions should be the same on either side
    2. only the subscriptions and packages the connected SUM has subscribed to are available (for the disconnected SUM) in the Warehouse.

    Christian 

  • 0 in reply to QC

    Ive read that already, maybe I wasn’t clear on what’s happening...  it wants me to use the wizard and put in credentials to download from Sophos, otherwise it just says there is no subacriptions list available. I dropped the warehouse into my Sophos Dropbox share and it successfully reads and decodes, and transfers the warehouse and CIDs folder to C:\ProgramData\Sophos\Update Manager\Update Manager , the subscriptions list in the console is still empty

  • 0 in reply to Jeff Mann

    Hello Jeff Mann,

    ah, I see.

    Dropbox share
    Dropbox? But no Internet?

    Assuming you have copied the Warehouse to some shared folder (can be on the management server or somewhere else) on your disconnected network.
    After you have cancelled the wizard you View/Edit the SUM configuration (in the Update managers view) and enter the UNC path to the Warehouse copy. It should then attempt to access the share fetch the metadata. Check if Recommended is Subscribed to in the Subscription tab.
    After clicking OK you should be able to see the available and selectable products in the Recommended subscription (Software subscriptions pane on the left).

    Christian

  • 0 in reply to QC

    That’s just what we name the folder that we drop the warehouse into. So I guess you answered my question.. I take the warehouse and drop it into the shared folder, It then gets decoded and transfers a copy of the warehouse folder and CIDs folders to C:\ProgramData\Sophos\Update Manager\Update Manager\.. the thing is, the only thing that shows up in CIDs is OPMHMPA which is hitman.. i need SAVSCFXP.. and even after I updated the binaries the log viewer just shows that everything decoded successfully and no new files were added.. and the when I go to subscriptions it says the list hasn’t arrived yet.

Reply
  • 0 in reply to QC

    That’s just what we name the folder that we drop the warehouse into. So I guess you answered my question.. I take the warehouse and drop it into the shared folder, It then gets decoded and transfers a copy of the warehouse folder and CIDs folders to C:\ProgramData\Sophos\Update Manager\Update Manager\.. the thing is, the only thing that shows up in CIDs is OPMHMPA which is hitman.. i need SAVSCFXP.. and even after I updated the binaries the log viewer just shows that everything decoded successfully and no new files were added.. and the when I go to subscriptions it says the list hasn’t arrived yet.

Children
  • 0 in reply to Jeff Mann

    Hello Jeff Mann,

    could you show what the Recommended subscription shows? It should look similar to this:

    OPMHMPA is part of the SAVSCFXP product even though it has its own folder. Can you open the product details of the Windows product?

    There's a sumcf.dat in %ProgramData%\Sophos\Update Manager\Update Manager\Warehouse\catalogue\ (it's an XML file with an attached signature) that should have an entry for sdds.epa_WIN2018-3.4.xml (or similar) and a file with this name should reside in the same folder.

    Christian

  • 0 in reply to QC

    I can not take a screenshot for security reasons, but I can tell you that the  files that you mentioned do exist in the catalog folder in the warehouse.. I’m not sure what version of SEC the warehouse was generated from, would you recommend trying 5.5.0 rather than 5.5.1? Also.. when I go to subscriptions there are none available. It just says the subscriptions list hasn’t arrived. I’m guessing I might be trying to use a newer version of SEC? Because those files do exist in the warehouse, and the logviewer shows no errors decoding

  • +1 in reply to QC

    Just wanted to let you know that I uninstalled SEC 5.51 and installed 5.50 and the subscription list is now available.. Thank you

Unfiltered HTML