Thread Info
  • Locked Locked
  • Replies 3 replies
  • Subscribers 2 subscribers
  • Views 12017 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

After Sophos Endpoint Version Update Error "Failed To Install Sophos Hitman Pro Alert: A Reboot was Required [0x00000067]"

skyisbluescreen

We had a Sophos Version Upgrade Over This Weekend. Due to Which Around 5K systems Shows Up as Errors in SEC Dashboard

 

In System Tray For Users, It Shows Sophos is Not Updated

Clients Have Below Message On Console

 

Tried 

- https://community.sophos.com/kb/en-us/31540

- Remote Policy Updates via SEC

- Rebooted PC

 

 

Any One Else Having This Problem ???



This thread was automatically locked due to age.

  • Hello skyisbluescreen,

    Any One Else
    not me, doesn't help you though.

    Somewhat puzzling is that it says Failed to download on the endpoints. Could you check the endpoint ALUpdate log as well as the Computer details in SEC.
    Which HitmanPro.Alert version is installed on the endpoints - the one in the CID should be 3.6.9? Is there a log from the attempted HitmanPro.Alert install in \Windows\Temp? Does it perhaps tell why it thinks a reboot is required?

    Christian

  • in reply to QC

    Dear Christian,

     

    Thanks for Your Reply. Its Weird Whenever we receive a Version Upgrade We end Up with Similar Issues.

     

    AV :  10.7.2 VE 3.69.2 (Latest Version)

    HP:    3.6.9.610 (Latest Version)

     

     

    ALU and HITMAN>PRO Logs i explicitly do not see any thing which could help me in the Log.

    Is there anything Specific i should be looking for ?

  • in reply to skyisbluescreen

    Hello skyisbluescreen,

    while HMPA requires at least SAV 10.7.2 it's updates are, similar to the threat detection data updates, independent from the AV updates and subscriptions.

    As said, both the Update gescheitert and the Failed to install should have a corresponding message in one of the logs. Do you have both a Primary UNC and Secondary HTTP location defined?

    Christian

Unfiltered HTML