This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Event Error: 1001 Unable to download the current signature

Hello there,

Perusing the Event viewer on our Enterprise Console server I noticed the following errors  repeated every hour in the Application folder:

Error 1013 - Failure processin repository provider (Unable to download the current signature)

Error 1001 - Unable to download the current signature (The remote name could not be resolved: 'nacsigdefupdate.sophos.com')

The Source is the Sophos NAC. We don't use it, but I would like to know what is causing these and how I can stop them as they are filling up the events.

I have attached a copy of our Application Events for reference. You will need to change the extension back to .evt to view it properly.

Thanks for you help.

Damon

:57975


This thread was automatically locked due to age.
  • Hello Damon,

    (Sandy has already replied while I was writing this post)

    We don't use [Sophos NAC]

    plausible. Now, SEC just maintains and provides the Compliance Agent for the endpoints, telling them where the NAC server is and which policy to use - any chance that the NAC Server component has been installed at some time and is still present (and running)?

    Christian

    :57981
  • Thank you for the quick replies Sandy and Christian.

    Christian, we definitaly didn't install NAC manager, but checking services I find the following services that are running: Sophos NAC Agent Report Service, Sophos NAC Enforcer Report Service, and Sophos NAC Host Service.

    Can I get away with just diasbling them? Is their something I should uninstall that won't affect the Enterprise Console?

    Thanks,

    Damon

    :57986
  • Hello Damon,

    we definitaly didn't install NAC manager

    sure :smileyvery-happy: 'twas <insert your favourite three-letter agency here> :smileytongue: :smileyvery-happy:

    IIRC ... naw, it might have been more or less included in the install of a certain SEC version. Please check Programs and Features - it's likely there.

    Christian

    :57987
  • Well that's embarassing. I really should have checked that - and where else would the processes have come from?

    It's Friday. My mind is already knocking back Corona's while soaking in the sun. That's my defence.

    Okay. So I hace Sophos NAC Application Server and Sophos NAC Databases in Add or Remove Programs. Can I simply remove them without worrying about the Management Console and Update Manager or do I have to perform a sacrificial rite?

    Thanks again,
    Damon

    :57988
  • Hello Damon,

    Friday or not - no product placement please :smileyvery-happy:

    simply remove them, there's no interdependency.

    Christian

    :57991