Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 12 replies
  • Subscribers 0 subscribers
  • Views 40453 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Client machine not showing status on SEC

toddh

Hey,

Server: MS Server 2003 32-bit

SEC: v5.0.0.8

Client: v10.0.3

Client OS: Windows 7 Pro 64-bit

I have a client machine that for some reason is not showing a status for the following categories:

Up to date

On-access

Application Control on-access

Data control scanning

Device control scanning

Tamper protection

It is showing status for the following categories:

Firewall

Patch assessment

I can't seem to pinpoint what is causing the issue.

I have had problems with the same client in the past but have somehow been successful in getting the status to show up again. This time around I am unable to get the status to come. I have tried reinstalling the client software with no luck.

I have followed the advice given in this post: No Status for On-access

I know there is communication between the client and the SEC because when I stop the "Sophos Message Router" service on the client machine the status of the client's machine shows offline on the SEC.

Is there anything further that I can do to try and figure out why the status keeps dropping out on this client machine?

Cheers

:24407


This thread was automatically locked due to age.
Parents
  • 0

    Hi jak,

    Thank you for your reply.

    As far as I can tell the SAV is working on the machine. And as far as I can tell all the components are working

    on the machine. It is definitely a weird situation.

    I will take your suggestions and start digging through the logs to see if I can figure out what is going on.

    At one point yes this particular machine was showing its status correctly. I have had this issue in the past

    with the particular machine (it happens to be the same user as well), but I have been able to correct it.

    Now, when you started talking about the registry you got me thinking.

    This particular user looks like they have installed and probably run a utility called CCleaner. This

    utility (among other things) is used to clean out registry files that are deemed "unused".

    I wonder if its possible that this program has removed registry keys it shouldn't have.

    (don't ask why the user why the user is allowed to install an application such as this, this is a soar subject :smileyvery-happy:)

    What I migth try and do after doing some digging and doing a completely fresh install of Sophos.

    And then remove CCleaner so that the user can't run it and just see what happens.

    I will try all that you have suggsted though and report back.

    thank you

    :24447
Reply
  • 0

    Hi jak,

    Thank you for your reply.

    As far as I can tell the SAV is working on the machine. And as far as I can tell all the components are working

    on the machine. It is definitely a weird situation.

    I will take your suggestions and start digging through the logs to see if I can figure out what is going on.

    At one point yes this particular machine was showing its status correctly. I have had this issue in the past

    with the particular machine (it happens to be the same user as well), but I have been able to correct it.

    Now, when you started talking about the registry you got me thinking.

    This particular user looks like they have installed and probably run a utility called CCleaner. This

    utility (among other things) is used to clean out registry files that are deemed "unused".

    I wonder if its possible that this program has removed registry keys it shouldn't have.

    (don't ask why the user why the user is allowed to install an application such as this, this is a soar subject :smileyvery-happy:)

    What I migth try and do after doing some digging and doing a completely fresh install of Sophos.

    And then remove CCleaner so that the user can't run it and just see what happens.

    I will try all that you have suggsted though and report back.

    thank you

    :24447
Children
No Data
Unfiltered HTML