This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Update Manager stuck at Downloading Binaries

 I've noticed that my Update manager (only 1 server) has been stuck at Downloading Binaries since Aug 15th. It's showing Version 1.6.1.124, and there are no errors/alerts showing on that Dashboard screen. 

I've look this issue online, and tried a few things, Delete folders, restart services, restarted server and so on... nothing worked. I even have a ticket open with Sophos, and I'm currently not impressed with their support... i've had better service from TrendMicro.

I've upgraded the Enterprise Console back in May from 5.2.2 to 5.5.0, and haven't had a problem since. Looks like my Endpoints are still getting updates via the manager, and they seem current, but when doesn't the Console show it?

I've tried to reinstall the update manager, as per support, and it seemed to go through... i didn't get any errors, it just went by quick.

Only thing I've noticed different was that there seemed to have been an update to the Update Manager on that same day, and it hasn't worked since.

Any ideas on what I should do next? Since support isn't too helpful....



This thread was automatically locked due to age.
  • Hi Jak,

    Thanks for your email,

    I tried to fill my Server IP in registry and Enterprise Console had run back.

    So follow this topic and your instruction had resolved my problem.

    Best Regards,

    Hoan Nguyen

  • On the management server can you restart the Sophos Message Router and Sophos Agent service - leave it about 2 minutes then attach the last log of the Router and Agent.

    \programdata\sophos\remote management system\3\router\logs\

    \programdata\sophos\remote management system\3\agent\logs\

    Probably best to zip the two files up and then drag the zip onto the text editor when you reply.

    Regards,

    Jak

  • Hi Support team,

    I have the same issue and following this topic but i'm not sure about your IP address mention in the instruction here: 192.168.15.1 

    Is that the IP address of Sophos Enterprise Console server ?

     

    My Enterprise Console had been stuck in downloading binaries

    And also can't access by the credentials. Of course my license still active.

    I had tried with the KB below

    https://community.sophos.com/kb/en-us/111428

    My connections to Sophos Update Website still works but the virus definition still not be updated.

    So please help to advise/suggest for my case.

    Thanks you !

  • I'm having this same problem.  I followed these instructions and this registry change fixed it.

  • They might've been, I'm not certain as I never looked at those logs before. But now that I know how, if any other similar issue comes up, I'll know where to start.

    Thanks again!

     

    Denis

  • Glad it's sorted.

    I assume those 169 addresses have always been there and hence the IOR string always had the 5 profiles?

    Also, in the event log of the server, or the SUM, etc.. at the same as the time was frozen.  Did the RMS package get installed, there should be an event from MSI?  If so, what version was it?

  • Hi Jak,

    After doing what you suggested, now my Update Manager finally reported and it's saying its up to date.

    I checked the Sophos-Management-Services.log, and it seems to be back as it was before, the same pattern i mean. :-)

    That seemed to have solved the issue... but how did that issue start i'm wondering...

    Thanks for all the Help!!!!

  • Sorry, those paths should be under:
    hklm\software\wow6432node\sophos\....
    ...as they are all 32-bit applications.

    You're seeing the 64-bit components under the 'other' Sophos key.

    Regards,

    Jak

  • Hi Jak,

     

    Thanks for the help... after looking at your suggestions, I looked on my Sophos server, and I don't have this in the registry

     Edit "HKEY_LOCAL_MACHINE\SOFTWARE\sophos\Messaging System\Router"

    I only have ManagementServer, Patch and ServerSecurity under Sophos.

  • Of the 5 IPs on the server, there are 3 169 addresses in the router and 2 other IPs. Of those 2 IPs, is the server managing computers via both those interfaces or could all the clients you're managing just use one?

    If the IP is static you could explicitly define it by editing:

    "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SophosMessageRouter" changing the value for 'ImagePath' from (for example):

    "C:\Program Files\Sophos\Remote Management System\RouterNT.exe" -service -name Router -ORBListenEndpoints iiop://:8193/ssl_port=8194

    to

    "C:\Program Files\Sophos\Remote Management System\RouterNT.exe" -service -name Router -ORBListenEndpoints iiop://192.168.15.1:8193/ssl_port=8194

    The IP address should be the one that the clients can connect to.

    Then Edit "HKEY_LOCAL_MACHINE\SOFTWARE\sophos\Messaging System\Router", changing the value for ''ServiceArgs" from (for example):

    "-ORBListenEndpoints iiop://:8193/ssl_port=8194"

    to

    "-ORBListenEndpoints iiop://192.168.15.1:8193/ssl_port=8194"
    Again the IP address should be the one that the clients can connect to and the same as above.

    If you restart the Sophos Message Router service then and check the IOR it will be shorter and only have reference to the one IP.  This way, after clients read this IOR string they will come straight back to the right IP and port 8194.

    Once done.  I would be interested to see some logs of the messaging system.

    Restart the Sophos Router and Agent service on a client, wait 1 minute (to guarantee a status message has been generated). Can we see the new Agent and Router log file that has been created?