Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 2 subscribers
  • Views 5558 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos update manager has not yet registered with the system

Blood

Hello

I am installing Sophos Enterprise Console 551 on a Windows 2016 Server (Standard Edition).

There is another installation on a 2008 R2 server (SEC v550) on the same network. The R2 server is going to be decommissioned. I am unable to 'move' the installation across because there is not enough hard drive space left to take a backup of the Sophos databases on the 2008 server. Both servers are domain controllers and are the only servers this charity has.

My intention was to install SEC on the 2016 server, configure it, then uninstall the SEC installation from the 2008 server and re-protect the clients so they picked up the new SEC.

I have created a single new user account (SophosTitan) that has been specified for both the database access and for the Update Manager's credentials.

When I start the SEC a dialog appears with the title Initializing. Checking configuration... Waiting for Sophos Update Manager to register... After a short time a notification with the title Sophos Enterprise Console appears stating: Sophos Update Manager has not yet registered with the ystem. Do you want to continue waiting for it?

I have followed the instructions given here: https://community.sophos.com/kb/en-us/65025 but the notification continues to be displayed. I have restarted the services (which were running) and looked at the agent log but don't understand what the contents mean:

******************************************************************************
05.12.2018 11:42:09 176C I SOF: C:\ProgramData/Sophos/Remote Management System/3/Agent/Logs/Agent-20181205-114209.log
05.12.2018 11:42:09 176C I Sophos Management Agent 4.1.1.127 starting...
05.12.2018 11:42:09 176C I Starting AdapterManager ...
05.12.2018 11:42:09 0688 I Starting AdapterMonitor thread ...
05.12.2018 11:42:09 0688 I Loading new adapters: 0 registered adapters; 0 loaded adapters.
05.12.2018 11:42:10 176C I InitialiseClientLibraryLocal Agent, SOFTWARE\Sophos\Remote Management System\ManagementAgent\Private, , 1, ...
05.12.2018 11:42:11 0CCC W MSClient::Connect: failed to get router's IOR from supplied address and port.
05.12.2018 11:42:11 0CCC W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
05.12.2018 11:42:17 0CCC W MSClient::Connect: failed to get router's IOR from supplied address and port.
05.12.2018 11:42:17 0CCC W NoRouterIORException: Caught MSClient::Connect: failed to get router's IOR from supplied address and port.
ClientConnection::Reconnect()
05.12.2018 11:42:22 0CCC I Initializing ...
05.12.2018 11:42:22 0CCC I Running certificate verification...
05.12.2018 11:42:22 0CCC I Compliant certificate hashing algorithm.
05.12.2018 11:42:22 0CCC E CORBA::Exception: Caught CORBA user exception, ID 'IDL:SophosMessaging/Rejected:1.0' ClientConnection::Reconnect()

05.12.2018 11:42:27 0CCC I Initializing ...
05.12.2018 11:42:27 0CCC I Running certificate verification...
05.12.2018 11:42:27 0CCC I Compliant certificate hashing algorithm.
05.12.2018 11:42:27 0CCC E CORBA::Exception: Caught CORBA user exception, ID 'IDL:SophosMessaging/Rejected:1.0' ClientConnection::Reconnect()

05.12.2018 11:42:32 0CCC I Initializing ...
05.12.2018 11:42:32 0CCC I Running certificate verification...
05.12.2018 11:42:33 0CCC I Compliant certificate hashing algorithm.
05.12.2018 11:42:33 0CCC E CORBA::Exception: Caught CORBA user exception, ID 'IDL:SophosMessaging/Rejected:1.0' ClientConnection::Reconnect()

05.12.2018 11:42:37 176C I Shutting down...
05.12.2018 11:42:37 176C I Stopping AdapterManager ...
05.12.2018 11:42:38 0CCC I Initializing ...
05.12.2018 11:42:38 0CCC I Running certificate verification...
05.12.2018 11:42:38 0CCC I Compliant certificate hashing algorithm.
05.12.2018 11:42:38 0CCC E CORBA::Exception: Caught CORBA user exception, ID 'IDL:SophosMessaging/Rejected:1.0' ClientConnection::Reconnect()

05.12.2018 11:42:39 0688 I Terminating the AdapterMonitor thread ...
******************************************************************************

I have checked the Windows Firewall and can see that ports 8192 to 8194 have been opened both inbound and outbound under the 'Domain' profile.

I have not proceeded with configuration of the new installation.

I was wondering if I needed to uninstall the old v550 installation before proceeding with the new v551 installation. If so, can anyone recommend a best practice to completely remove all traces of the old (and the new) installations so that I can start again? Or, perhaps someone can help me decipher the log so that I can understand what is happening and resolve this issue.

Many thanks!

Mark



This thread was automatically locked due to age.
  • 0

    Hello Mark,

    for both the database access and for the Update Manager's credentials
    first of all, two (2, 0x00000002, 0b00000010) accounts are recommended - one (the Database account) has extended rights, the other (the SUM account - IMO a misnomer) should only have read access to the update locations. The latter's password is stored in the update configuration, while obfuscated it's naturally reversible. "Anyone" can get access to your database, so please separate these accounts.

    No uninstall is needed, of SECs  (evens with the same certificates and of course of different versions) can coexist on the same network.

    not enough hard drive space
    the database might be bloated, a rough and very very conservative estimate is 1MB/endpoint.

    Looks like the Agent can't connect to the Router - what's in the Router logs? As far as SUM is concerned the SUMTrace logs would have the interesting information.

    Christian

  • 0 in reply to QC

    Hi, Christian, thanks for replying.

    I will add a separate account.

    The drive space issue derives from C.130MB of free space... But, this isn't a real problem as the network is very small so reprotecting the clients from the new installation will be a trivial task.

    Here's the relvant parts of the SUMTrace log. There's more to the log, but it comprises 'No action' statements (I've replaced the obfuscated password in the log below):

    *********************************************************************

    2018-12-05 11:43:04 :

    -----------
    Sophos Update Manager v1.6.2.186 Copyright 2009-2017 Sophos Limited. All rights reserved.

    Sophos Update Manager has started up.

    2018-12-05 11:43:04 : EventLog: 1610616833 4 Inserts:>
    2018-12-05 11:43:04 : Cmd-Terminal <<
    2018-12-05 11:43:04 : Cmd-Terminal >> ParseConfigFile system.xml reserved
    2018-12-05 11:43:04 : Cmd-Terminal << [R0000] Parsed Config File 'system.xml': 13 objects created.
    2018-12-05 11:43:04 : Cmd-Terminal <<
    2018-12-05 11:43:04 : Cmd-Terminal >> ParseConfigFile config.xml default
    2018-12-05 11:43:04 : Cmd-Terminal << [R0000] Parsed Config File 'config.xml': 1 objects created.
    2018-12-05 11:43:04 : Cmd-Terminal <<
    2018-12-05 11:43:04 : Cmd-Terminal >> ParseConfigFile specialactions.xml specialactions
    2018-12-05 11:43:04 : Cmd-Terminal << [R4000] Config file 'specialactions.xml' not found.
    2018-12-05 11:43:04 : Cmd-Terminal <<
    2018-12-05 11:43:04 : Cmd-Terminal >> Execute ApplyOverrideFile
    2018-12-05 11:43:04 : Cmd-Terminal << [R4000] Could not find object named ApplyOverrideFile
    2018-12-05 11:43:04 : Cmd-Terminal <<
    2018-12-05 11:43:04 : Cmd-Terminal >> Restart
    2018-12-05 11:43:04 : Cmd-ALL << [W403F][Input XML state invalid] Warning: Exception caught while loading the system state. Details: Input XML state invalid
    2018-12-05 11:43:04 : SUM_Status.xml not found. SUM will start with no initial object status.
    2018-12-05 11:43:04 : Cmd-Terminal << [R0000] Restart complete.
    2018-12-05 11:43:04 : Cmd-Terminal <<
    2018-12-05 11:43:04 : Cmd-Terminal >> StartListeners
    2018-12-05 11:43:04 : Cmd-Terminal << [R0000] Started 1 SocketListener.
    2018-12-05 11:43:04 : Cmd-Terminal <<
    2018-12-05 11:43:04 : Cmd-Terminal >> Execute WeeklyReportDispatcher
    2018-12-05 11:43:04 : Cmd-Terminal << [R4000] Could not find object named WeeklyReportDispatcher
    2018-12-05 11:43:04 : Cmd-Terminal <<
    2018-12-05 11:43:04 : Cmd-Terminal >> Execute __MAINTENANCE_DISPATCHER__
    2018-12-05 11:43:04 : Cmd-Terminal << [R0000] Executing Object named __MAINTENANCE_DISPATCHER__...
    2018-12-05 11:43:04 : Dispatcher started...
    2018-12-05 11:43:04 : Schedule '__MAINTENANCE_SCHEDULE__' entered new TimeBlock, trigger offset = 587 minutes.
    2018-12-05 11:43:04 : Wed Dec 05 11:43:04 2018 - No action
    2018-12-05 11:43:04 : Cmd-Terminal <<
    2018-12-05 11:43:04 : Cmd-Terminal >> ForceDispatcher __MAINTENANCE_DISPATCHER__
    2018-12-05 11:43:04 : Cmd-ALL << [I101D][__MAINTENANCE_DISPATCHER__-2018-12-05T11-43-04-1][1] Events of dispatcher with ID '__MAINTENANCE_DISPATCHER__-2018-12-05T11-43-04-1' triggered by user. It will run 1 events.
    2018-12-05 11:43:04 : Cmd-ALL << [I1021][__MAINTENANCE_ACTION__][__MAINTENANCE_DISPATCHER__-2018-12-05T11-43-04-1] Action '__MAINTENANCE_ACTION__' with caller '__MAINTENANCE_DISPATCHER__-2018-12-05T11-43-04-1' started...
    2018-12-05 11:43:04 : Cmd-Terminal << [R0000] Forced Dispatcher named __MAINTENANCE_DISPATCHER__...
    2018-12-05 11:43:04 : Cmd-Terminal <<
    2018-12-05 11:43:04 : Cmd-Terminal >> StartDispatchers
    2018-12-05 11:43:04 : <Info> Working path appears to be: C:\ProgramData\Sophos\Update Manager\Working\
    2018-12-05 11:43:04 : <Info> PurgeFolder execution skipped. Up time: 0 sec. Latency period: 36000 sec.
    2018-12-05 11:43:04 : Cmd-ALL << [I0019] Successfully carried out maintenance operation.
    2018-12-05 11:43:04 : Cmd-ALL << [I0009][__MAINTENANCE_ACTION__][__MAINTENANCE_DISPATCHER__-2018-12-05T11-43-04-1] Action '__MAINTENANCE_ACTION__' with caller '__MAINTENANCE_DISPATCHER__-2018-12-05T11-43-04-1' succeeded!
    2018-12-05 11:43:04 : Cmd-Terminal << [R0000] Started 1 dispatcher.
    2018-12-05 11:43:04 : Cmd-Terminal <<
    2018-12-05 11:43:04 : Cmd-ALL << [S000A][__MAINTENANCE_DISPATCHER__-2018-12-05T11-43-04-1] Event with dispatcher ID '__MAINTENANCE_DISPATCHER__-2018-12-05T11-43-04-1' completed successfully.
    2018-12-05 11:43:04 : Cmd-ALL << [I1020][__MAINTENANCE_DISPATCHER__-2018-12-05T11-43-04-1] All events with dispatcher ID '__MAINTENANCE_DISPATCHER__-2018-12-05T11-43-04-1' complete.
    2018-12-05 11:43:12 : SocksSocketAcceptor called Accept. Parameters: socket = 204 sockaddr = 0x0238FCE8 addr_length = 0x0238FCE4 Return code: 320
    2018-12-05 11:43:12 : Connection accepted from host 127.0.0.1
    2018-12-05 11:43:12 : The socket 800 was created.
    2018-12-05 11:43:12 : Cmd-Sock-800 <<
    2018-12-05 11:43:12 : Cmd-Sock-800 >>
    2018-12-05 11:43:12 : Cmd-Sock-800 >> DumpConfigXML default
    2018-12-05 11:43:12 : Cmd-Sock-800 << [R0000][<?xml version="1.0" encoding="utf-8" ?><Config><LogSettings><ID>LangIndLog</ID><MaxAge>20</MaxAge><MaxSize>999</MaxSize></LogSettings></Config>] Dumped 1 objects.
    2018-12-05 11:43:12 : Cmd-Sock-800 <<
    2018-12-05 11:43:12 : Cmd-Sock-800 >> DumpLogHistory
    2018-12-05 11:43:12 : Cmd-Sock-800 << [R0000] Dumping the log history...
    2018-12-05 11:43:12 : Cmd-Sock-800 << [I1001]
    2018-12-05 11:43:12 : Cmd-Sock-800 << [W403F][Input XML state invalid]
    2018-12-05 11:43:12 : Cmd-Sock-800 << [I101D][__MAINTENANCE_DISPATCHER__-2018-12-05T11-43-04-1][1]
    2018-12-05 11:43:12 : Cmd-Sock-800 << [I1021][__MAINTENANCE_ACTION__][__MAINTENANCE_DISPATCHER__-2018-12-05T11-43-04-1]
    2018-12-05 11:43:12 : Cmd-Sock-800 << [I0019]
    2018-12-05 11:43:12 : Cmd-Sock-800 << [I0009][__MAINTENANCE_ACTION__][__MAINTENANCE_DISPATCHER__-2018-12-05T11-43-04-1]
    2018-12-05 11:43:12 : Cmd-Sock-800 << [S000A][__MAINTENANCE_DISPATCHER__-2018-12-05T11-43-04-1]
    2018-12-05 11:43:12 : Cmd-Sock-800 << [I1020][__MAINTENANCE_DISPATCHER__-2018-12-05T11-43-04-1]
    2018-12-05 11:43:12 : Cmd-Sock-800 <<
    2018-12-05 11:43:12 : Cmd-Sock-800 >> DumpDefaultTargetSite
    2018-12-05 11:43:12 : Cmd-Sock-800 << [R0000][C:\ProgramData\Sophos\Update Manager\Update Manager\][\\TITUS\SophosUpdate][SLHA\sophostitan][password] Local path: C:\ProgramData\Sophos\Update Manager\Update Manager\ Remote path: \\TITUS\SophosUpdate Username: SLHA\sophostitan Obfuscated password: password
    2018-12-05 11:43:12 : Cmd-Sock-800 <<
    2018-12-05 11:43:12 : Cmd-Sock-800 >> DumpConfigXML default
    2018-12-05 11:43:12 : Cmd-Sock-800 << [R0000][<?xml version="1.0" encoding="utf-8" ?><Config><LogSettings><ID>LangIndLog</ID><MaxAge>20</MaxAge><MaxSize>999</MaxSize></LogSettings></Config>] Dumped 1 objects.
    2018-12-05 11:43:12 : Cmd-Sock-800 <<
    2018-12-05 11:43:12 : Cmd-Sock-800 >> DumpDefaultTargetSite
    2018-12-05 11:43:12 : Cmd-Sock-800 << [R0000][C:\ProgramData\Sophos\Update Manager\Update Manager\][\\TITUS\SophosUpdate][SLHA\sophostitan][password] Local path: C:\ProgramData\Sophos\Update Manager\Update Manager\ Remote path: \\TITUS\SophosUpdate Username: SLHA\sophostitan Obfuscated password: password
    2018-12-05 11:43:12 : Cmd-Sock-800 <<
    2018-12-05 11:44:07 : Wed Dec 05 11:44:07 2018 - No action
    2018-12-05 11:45:09 : Wed Dec 05 11:45:09 2018 - No action
    2018-12-05 11:46:11 : Wed Dec 05 11:46:11 2018 - No action
    2018-12-05 11:47:14 : Wed Dec 05 11:47:14 2018 - No action
    2018-12-05 11:48:16 : Wed Dec 05 11:48:16 2018 - No action
    2018-12-05 11:49:18 : Wed Dec 05 11:49:18 2018 - No action
    2018-12-05 11:50:21 : Wed Dec 05 11:50:21 2018 - No action
    2018-12-05 11:51:23 : Wed Dec 05 11:51:23 2018 - No action
    2018-12-05 11:52:25 : Wed Dec 05 11:52:25 2018 - No action
    2018-12-05 11:53:28 : Wed Dec 05 11:53:28 2018 - No action
    2018-12-05 11:54:30 : Wed Dec 05 11:54:30 2018 - No action
    2018-12-05 11:55:33 : Wed Dec 05 11:55:33 2018 - No action
    2018-12-05 11:56:35 : Wed Dec 05 11:56:35 2018 - No action
    2018-12-05 11:57:37 : Wed Dec 05 11:57:37 2018 - No action
    2018-12-05 11:58:40 : Wed Dec 05 11:58:40 2018 - No action
    2018-12-05 11:59:42 : Wed Dec 05 11:59:42 2018 - No action
    2018-12-05 12:00:45 : Wed Dec 05 12:00:45 2018 - No action
    2018-12-05 12:01:47 : Wed Dec 05 12:01:47 2018 - No action
    2018-12-05 12:02:49 : Wed Dec 05 12:02:49 2018 - No action
    2018-12-05 12:03:52 : Wed Dec 05 12:03:52 2018 - No action
    2018-12-05 12:04:54 : Wed Dec 05 12:04:54 2018 - No action
    2018-12-05 12:05:56 : Wed Dec 05 12:05:56 2018 - No action
    2018-12-05 12:06:59 : Wed Dec 05 12:06:59 2018 - No action
    2018-12-05 12:08:01 : Wed Dec 05 12:08:01 2018 - No action
    2018-12-05 12:09:04 : Wed Dec 05 12:09:04 2018 - No action
    2018-12-05 12:10:06 : Wed Dec 05 12:10:06 2018 - No action
    2018-12-05 12:11:08 : Wed Dec 05 12:11:08 2018 - No action
    2018-12-05 12:12:11 : Wed Dec 05 12:12:11 2018 - No action
    2018-12-05 12:13:13 : Wed Dec 05 12:13:13 2018 - No action
    2018-12-05 12:14:15 : Wed Dec 05 12:14:15 2018 - No action
    2018-12-05 12:15:18 : Wed Dec 05 12:15:18 2018 - No action
    2018-12-05 12:16:20 : Wed Dec 05 12:16:20 2018 - No action
    2018-12-05 12:17:23 : Wed Dec 05 12:17:23 2018 - No action
    2018-12-05 12:18:25 : Wed Dec 05 12:18:25 2018 - No action
    2018-12-05 12:19:27 : Wed Dec 05 12:19:27 2018 - No action
    2018-12-05 12:20:30 : Wed Dec 05 12:20:30 2018 - No action
    2018-12-05 12:21:32 : Wed Dec 05 12:21:32 2018 - No action
    2018-12-05 12:22:34 : Wed Dec 05 12:22:34 2018 - No action
    2018-12-05 12:23:37 : Wed Dec 05 12:23:37 2018 - No action
    2018-12-05 12:24:39 : Wed Dec 05 12:24:39 2018 - No action
    2018-12-05 12:25:42 : Wed Dec 05 12:25:42 2018 - No action
    2018-12-05 12:26:44 : Wed Dec 05 12:26:44 2018 - No action
    2018-12-05 12:27:31 : Cmd-Terminal >> Shutdown
    2018-12-05 12:27:31 : Cmd-Terminal << Shutdown command received...
    2018-12-05 12:27:31 : Cmd-ALL << [X????] System shutdown started!

    2018-12-05 12:27:31 : SocksSocketAcceptor called Accept. Parameters: socket = 204 sockaddr = 0x0238FCE8 addr_length = 0x0238FCE4 Return code: ffffffff
    2018-12-05 12:27:31 : The socket 800 was shut down.
    2018-12-05 12:27:31 : The socket 800 was closed.
    2018-12-05 12:27:31 : Socket 4294967295: receive failed with error code 10004.
    2018-12-05 12:27:31 : Cmd-Sock-800 << Input stream closed
    2018-12-05 12:27:31 : Cmd-Sock-800 <<
    2018-12-05 12:27:31 : <<
    2018-12-05 12:27:31 :
    Sophos Update Manager is shutting down...

    2018-12-05 12:27:31 : EventLog: 1610616834 4 Inserts:>
    2018-12-05 12:27:32 :

    -----------
    Sophos Update Manager v1.6.2.186 Copyright 2009-2017 Sophos Limited. All rights reserved.

    Sophos Update Manager has started up.

    2018-12-05 12:27:32 : EventLog: 1610616833 4 Inserts:>
    2018-12-05 12:27:32 : Cmd-Terminal <<
    2018-12-05 12:27:32 : Cmd-Terminal >> ParseConfigFile system.xml reserved
    2018-12-05 12:27:32 : Cmd-Terminal << [R0000] Parsed Config File 'system.xml': 13 objects created.
    2018-12-05 12:27:32 : Cmd-Terminal <<
    2018-12-05 12:27:32 : Cmd-Terminal >> ParseConfigFile config.xml default
    2018-12-05 12:27:32 : Cmd-Terminal << [R0000] Parsed Config File 'config.xml': 1 objects created.
    2018-12-05 12:27:32 : Cmd-Terminal <<
    2018-12-05 12:27:32 : Cmd-Terminal >> ParseConfigFile specialactions.xml specialactions
    2018-12-05 12:27:32 : Cmd-Terminal << [R4000] Config file 'specialactions.xml' not found.
    2018-12-05 12:27:32 : Cmd-Terminal <<
    2018-12-05 12:27:32 : Cmd-Terminal >> Execute ApplyOverrideFile
    2018-12-05 12:27:32 : Cmd-Terminal << [R4000] Could not find object named ApplyOverrideFile
    2018-12-05 12:27:32 : Cmd-Terminal <<
    2018-12-05 12:27:32 : Cmd-Terminal >> Restart
    2018-12-05 12:27:32 : Cmd-Terminal << [R0000] Restart complete.
    2018-12-05 12:27:32 : Cmd-Terminal <<
    2018-12-05 12:27:32 : Cmd-Terminal >> StartListeners
    2018-12-05 12:27:32 : Dispatcher started...
    2018-12-05 12:27:32 : Cmd-Terminal << [R0000] Started 1 SocketListener.
    2018-12-05 12:27:32 : Schedule '__MAINTENANCE_SCHEDULE__' entered new TimeBlock, trigger offset = 302 minutes.
    2018-12-05 12:27:32 : Cmd-Terminal <<
    2018-12-05 12:27:32 : Wed Dec 05 12:27:32 2018 - No action
    2018-12-05 12:27:32 : Cmd-Terminal >> Execute WeeklyReportDispatcher
    2018-12-05 12:27:32 : Cmd-Terminal << [R4000] Could not find object named WeeklyReportDispatcher
    2018-12-05 12:27:32 : Cmd-Terminal <<
    2018-12-05 12:27:32 : Cmd-Terminal >> Execute __MAINTENANCE_DISPATCHER__
    2018-12-05 12:27:32 : Cmd-Terminal << [R0000] Executing Object named __MAINTENANCE_DISPATCHER__...
    2018-12-05 12:27:32 : Cmd-Terminal <<
    2018-12-05 12:27:32 : Cmd-Terminal >> ForceDispatcher __MAINTENANCE_DISPATCHER__
    2018-12-05 12:27:32 : Cmd-ALL << [I101D][__MAINTENANCE_DISPATCHER__-2018-12-05T12-27-32-1][1] Events of dispatcher with ID '__MAINTENANCE_DISPATCHER__-2018-12-05T12-27-32-1' triggered by user. It will run 1 events.
    2018-12-05 12:27:32 : Cmd-ALL << [I1021][__MAINTENANCE_ACTION__][__MAINTENANCE_DISPATCHER__-2018-12-05T12-27-32-1] Action '__MAINTENANCE_ACTION__' with caller '__MAINTENANCE_DISPATCHER__-2018-12-05T12-27-32-1' started...
    2018-12-05 12:27:32 : Cmd-Terminal << [R0000] Forced Dispatcher named __MAINTENANCE_DISPATCHER__...
    2018-12-05 12:27:32 : Cmd-Terminal <<
    2018-12-05 12:27:32 : Cmd-Terminal >> StartDispatchers
    2018-12-05 12:27:32 : <Info> Working path appears to be: C:\ProgramData\Sophos\Update Manager\Working\
    2018-12-05 12:27:32 : <Info> PurgeFolder execution skipped. Up time: 0 sec. Latency period: 36000 sec.
    2018-12-05 12:27:32 : Cmd-ALL << [I0019] Successfully carried out maintenance operation.
    2018-12-05 12:27:32 : Cmd-ALL << [I0009][__MAINTENANCE_ACTION__][__MAINTENANCE_DISPATCHER__-2018-12-05T12-27-32-1] Action '__MAINTENANCE_ACTION__' with caller '__MAINTENANCE_DISPATCHER__-2018-12-05T12-27-32-1' succeeded!
    2018-12-05 12:27:32 : Cmd-Terminal << [R0000] Started 1 dispatcher.
    2018-12-05 12:27:32 : Cmd-Terminal <<
    2018-12-05 12:27:32 : Cmd-ALL << [S000A][__MAINTENANCE_DISPATCHER__-2018-12-05T12-27-32-1] Event with dispatcher ID '__MAINTENANCE_DISPATCHER__-2018-12-05T12-27-32-1' completed successfully.
    2018-12-05 12:27:32 : Cmd-ALL << [I1020][__MAINTENANCE_DISPATCHER__-2018-12-05T12-27-32-1] All events with dispatcher ID '__MAINTENANCE_DISPATCHER__-2018-12-05T12-27-32-1' complete.
    2018-12-05 12:27:42 : SocksSocketAcceptor called Accept. Parameters: socket = 800 sockaddr = 0x021AF668 addr_length = 0x021AF664 Return code: 360
    2018-12-05 12:27:42 : Connection accepted from host 127.0.0.1
    2018-12-05 12:27:42 : The socket 864 was created.
    2018-12-05 12:27:42 : Cmd-Sock-864 <<
    2018-12-05 12:27:42 : Cmd-Sock-864 >>
    2018-12-05 12:27:42 : Cmd-Sock-864 >> DumpLogHistory
    2018-12-05 12:27:42 : Cmd-Sock-864 << [R0000] Dumping the log history...
    2018-12-05 12:27:42 : Cmd-Sock-864 << [I1001]
    2018-12-05 12:27:42 : Cmd-Sock-864 << [I101D][__MAINTENANCE_DISPATCHER__-2018-12-05T12-27-32-1][1]
    2018-12-05 12:27:42 : Cmd-Sock-864 << [I1021][__MAINTENANCE_ACTION__][__MAINTENANCE_DISPATCHER__-2018-12-05T12-27-32-1]
    2018-12-05 12:27:42 : Cmd-Sock-864 << [I0019]
    2018-12-05 12:27:42 : Cmd-Sock-864 << [I0009][__MAINTENANCE_ACTION__][__MAINTENANCE_DISPATCHER__-2018-12-05T12-27-32-1]
    2018-12-05 12:27:42 : Cmd-Sock-864 << [S000A][__MAINTENANCE_DISPATCHER__-2018-12-05T12-27-32-1]
    2018-12-05 12:27:42 : Cmd-Sock-864 << [I1020][__MAINTENANCE_DISPATCHER__-2018-12-05T12-27-32-1]
    2018-12-05 12:27:42 : Cmd-Sock-864 <<
    2018-12-05 12:27:42 : Cmd-Sock-864 >> DumpConfigXML default
    2018-12-05 12:27:42 : Cmd-Sock-864 << [R0000][<?xml version="1.0" encoding="utf-8" ?><Config><LogSettings><ID>LangIndLog</ID><MaxAge>20</MaxAge><MaxSize>999</MaxSize></LogSettings></Config>] Dumped 1 objects.
    2018-12-05 12:27:42 : Cmd-Sock-864 <<
    2018-12-05 12:27:42 : Cmd-Sock-864 >> DumpDefaultTargetSite
    2018-12-05 12:27:42 : Cmd-Sock-864 << [R0000][C:\ProgramData\Sophos\Update Manager\Update Manager\][\\TITUS\SophosUpdate][SLHA\sophostitan][password] Local path: C:\ProgramData\Sophos\Update Manager\Update Manager\ Remote path: \\TITUS\SophosUpdate Username: SLHA\sophostitan Obfuscated password: password
    2018-12-05 12:27:42 : Cmd-Sock-864 <<
    2018-12-05 12:27:42 : Cmd-Sock-864 >> DumpConfigXML default
    2018-12-05 12:27:42 : Cmd-Sock-864 << [R0000][<?xml version="1.0" encoding="utf-8" ?><Config><LogSettings><ID>LangIndLog</ID><MaxAge>20</MaxAge><MaxSize>999</MaxSize></LogSettings></Config>] Dumped 1 objects.
    2018-12-05 12:27:42 : Cmd-Sock-864 <<
    2018-12-05 12:27:42 : Cmd-Sock-864 >> DumpDefaultTargetSite
    2018-12-05 12:27:42 : Cmd-Sock-864 << [R0000][C:\ProgramData\Sophos\Update Manager\Update Manager\][\\TITUS\SophosUpdate][SLHA\sophostitan][password] Local path: C:\ProgramData\Sophos\Update Manager\Update Manager\ Remote path: \\TITUS\SophosUpdate Username: SLHA\sophostitan Obfuscated password: password
    2018-12-05 12:27:42 : Cmd-Sock-864 <<
    2018-12-05 12:28:35 : Wed Dec 05 12:28:35 2018 - No action
    2018-12-05 12:29:37 : Wed Dec 05 12:29:37 2018 - No action
    2018-12-05 12:30:39 : Wed Dec 05 12:30:39 2018 - No action

    etc.

    *************************************************************************

     

  • 0 in reply to Blood

    Hello Mark,

    what does the Router log say?
    You can open the console, can't you? But when you select Update Managers there is none?

    Christian

  • 0 in reply to QC

    Hi, Christian - Have been side-tracked by a manager(!). Will get back to this Mon.

  • 0 in reply to Blood

    Side tracked? High-jacked would have been a better expression!

    Sorry for the delay.

    If I cancel the notification the console stays open. However, if I try to add a subscription etc., a new notification appears asking if I want to add an Update Manager. When I click the Yes button, the same notification as described above appears.

     

    Here's the text from the router log. After the initial two lines the remainder of the log comprises the same sets of lines repeating:

    *******************************************************

    10.12.2018 12:47:00 1178 I SOF: C:\ProgramData/Sophos/Remote Management System/3/Router/Logs/Router-20181210-124700.log
    10.12.2018 12:47:00 1178 I UNLINK: C:\ProgramData/Sophos/Remote Management System/3/Router/Logs/Router-20181206-115530.log
    10.12.2018 12:47:00 1244 E Attempt to get client interface from non-local caller
    10.12.2018 12:47:01 1178 E Attempt to get client interface from non-local caller
    10.12.2018 12:47:05 1244 E Attempt to get client interface from non-local caller
    10.12.2018 12:47:06 1178 E Attempt to get client interface from non-local caller
    10.12.2018 12:47:06 1244 E Attempt to get client interface from non-local caller
    10.12.2018 12:47:10 1178 E Attempt to get client interface from non-local caller
    10.12.2018 12:47:11 1244 E Attempt to get client interface from non-local caller
    10.12.2018 12:47:11 1178 E Attempt to get client interface from non-local caller

    ~~snip~~

    11.12.2018 00:53:17 15E8 E Attempt to get client interface from non-local caller
    11.12.2018 00:53:18 1178 E Attempt to get client interface from non-local caller
    11.12.2018 00:53:19 15E8 E Attempt to get client interface from non-local caller
    11.12.2018 00:53:22 1178 E Attempt to get client interface from non-local caller
    11.12.2018 00:53:23 15E8 E Attempt to get client interface from non-local caller
    11.12.2018 00:53:24 1178 E Attempt to get client interface from non-local caller
    11.12.2018 00:53:24 1178 I EOF: C:\ProgramData/Sophos/Remote Management System/3/Router/Logs/Router-20181210-124700.log

    *******************************************************

    I hope this helps shed some light on what is happening.

  • 0 in reply to Blood

    Hello Mark,

    there's an article about this message though it mentions an additional "This machine may have more IP addresses than are supported".

    I remember two related threads (one rather convoluted, the other about an issue with an endpoint). Not an exact match though I think the above article is worth a try even if you don't have that number of IP addresses.

    Christian

  • 0 in reply to QC

    Hi, Christian.

    Thanks again for the help. I have opened a support case with Sophos so will report back once it has been resolved.

Unfiltered HTML