This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Enterprise Console management application failing to run

Hello,


Recently I performed an migration and upgrade the Sophos Enterprise Console and it has been running smoothly ever since. However, previously I had the Enterprise Console management application installed on my workstation, so that I didn't have to connect the Sophos server to see the current stats. With that said,  I had to upgrade this application on my workstation and now every time I try to run it, I receive the  below error and nothing more:

I am missing something here? I believe I'm running the correct installer viewing stats from a workstation. I ran the "Sophos Enterprise Console" installer. I believe I had a VIP support ticket for this in the past  but I was never able to get this resolved :( ....Any help is appreciated.



This thread was automatically locked due to age.
Parents
  • Hello jimmy luciano,

    this picture falls short of the familiar adage by 996 words (factoring in the window title) [;)] ... It's the Management server connection failed window - it's also blank on my Windows 7 (as well as an XP I've kept for reference) but works on 2008R2 and seems to be a problem with the latest version. 

    The console (5.4.0?) works on your server and fails only on your workstation? This would leave connectivity issues - network cable unplugged or server not found/reachable rather unlikely - with a firewall on the workstation as primary suspect. This happened after the upgrade to 5.4.0 (and previously is the last week)?

    Christian

  • Hi,

    The first thing (other than ensuring the same versions are being used) I would check is where the console is pointing and how it is resolving the management server.

    HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\Management Tools

    ServerLocation.

    This could be IP/NetBIOS/FQDN, as long as it resolves to the management server.

    The next thing would be to check, the entries in: EnterpriseConsole.exe.config. Same directory as the exe of the same name. 

    Are the addresses in there resolvable? E.g.

    <client>
    <endpoint binding="ws2007HttpBinding" bindingConfiguration="WS2007HttpBinding_IAdminConsole_Configuration" contract="Sophos.Patch.ServerCommunicator.IAdminConsole" name="WS2007HttpBinding_IAdminConsole" address="WIN-CHJ3RV7TFCK:80/.../ServerCommunicator">

    </endpoint>

    <endpoint behaviorConfiguration="WS2007HttpBinding_IWebControlFrontEndService_Behavior" binding="ws2007HttpBinding" bindingConfiguration="WS2007HttpBinding_IWebControlFrontEndService_Configuration" contract="Sophos.WebControl.FrontEnd.IWebControlFrontEndService" name="WS2007HttpBinding_IWebControlFrontEndService" address="WIN-CHJ3RV7TFCK:80/.../WebControlFrontEndService">

    </endpoint>

    <endpoint behaviorConfiguration="WS2007HttpBinding_IEncryptionFEService_Behavior" binding="ws2007HttpBinding" bindingConfiguration="WS2007HttpBinding_IEncryptionFEService_Configuration" contract="Sophos.Encryption.FrontEnd.Interfaces.IEncryptionFEServiceAsync" name="WS2007HttpBinding_IEncryptionFEService" address="WIN-CHJ3RV7TFCK:80/.../EncryptionFrontEnd">

    </endpoint>

    <endpoint binding="ws2007HttpBinding" bindingConfiguration="WS2007HttpBinding_IIdentityService_Configuration" contract="Sophos.Management.Identity.Interfaces.IWSTrust" name="WS2007HttpBinding_IIdentityService" address="WIN-CHJ3RV7TFCK:80/.../WSTrustService">

    </endpoint>

    <endpoint binding="ws2007HttpBinding" bindingConfiguration="WS2007HttpBinding_IAuditingService_Configuration" contract="Sophos.Management.Auditing.FrontEndService.Interfaces.IAuditingService" name="WS2007HttpBinding_IAuditingService" address="WIN-CHJ3RV7TFCK:80/.../AuditingService">

    </endpoint>
    </client>

    So the communication from the remote console to the management server is over DCOM and HTTP. Ensure any necessary firewall rules are in place.

    Regards,

    Jak

Reply
  • Hi,

    The first thing (other than ensuring the same versions are being used) I would check is where the console is pointing and how it is resolving the management server.

    HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\EE\Management Tools

    ServerLocation.

    This could be IP/NetBIOS/FQDN, as long as it resolves to the management server.

    The next thing would be to check, the entries in: EnterpriseConsole.exe.config. Same directory as the exe of the same name. 

    Are the addresses in there resolvable? E.g.

    <client>
    <endpoint binding="ws2007HttpBinding" bindingConfiguration="WS2007HttpBinding_IAdminConsole_Configuration" contract="Sophos.Patch.ServerCommunicator.IAdminConsole" name="WS2007HttpBinding_IAdminConsole" address="WIN-CHJ3RV7TFCK:80/.../ServerCommunicator">

    </endpoint>

    <endpoint behaviorConfiguration="WS2007HttpBinding_IWebControlFrontEndService_Behavior" binding="ws2007HttpBinding" bindingConfiguration="WS2007HttpBinding_IWebControlFrontEndService_Configuration" contract="Sophos.WebControl.FrontEnd.IWebControlFrontEndService" name="WS2007HttpBinding_IWebControlFrontEndService" address="WIN-CHJ3RV7TFCK:80/.../WebControlFrontEndService">

    </endpoint>

    <endpoint behaviorConfiguration="WS2007HttpBinding_IEncryptionFEService_Behavior" binding="ws2007HttpBinding" bindingConfiguration="WS2007HttpBinding_IEncryptionFEService_Configuration" contract="Sophos.Encryption.FrontEnd.Interfaces.IEncryptionFEServiceAsync" name="WS2007HttpBinding_IEncryptionFEService" address="WIN-CHJ3RV7TFCK:80/.../EncryptionFrontEnd">

    </endpoint>

    <endpoint binding="ws2007HttpBinding" bindingConfiguration="WS2007HttpBinding_IIdentityService_Configuration" contract="Sophos.Management.Identity.Interfaces.IWSTrust" name="WS2007HttpBinding_IIdentityService" address="WIN-CHJ3RV7TFCK:80/.../WSTrustService">

    </endpoint>

    <endpoint binding="ws2007HttpBinding" bindingConfiguration="WS2007HttpBinding_IAuditingService_Configuration" contract="Sophos.Management.Auditing.FrontEndService.Interfaces.IAuditingService" name="WS2007HttpBinding_IAuditingService" address="WIN-CHJ3RV7TFCK:80/.../AuditingService">

    </endpoint>
    </client>

    So the communication from the remote console to the management server is over DCOM and HTTP. Ensure any necessary firewall rules are in place.

    Regards,

    Jak

Children
  • Thanks for the guidance, your troubleshooting notes led me to the Windows server firewall where I needed to make some changes. After the changes were made I then found I was using the wrong version of the console on my workstation. Which lead to download the correct version and installing. But now everything works perfectly, thanks for your assistance.