Sophos Enterprise Console issues

Hello Jeremiah Sakala,

if the server itself is also disconnected then its likely a communications error.
Guess you have checked that the Sophos services are running. Please see Update Manager stuck at Downloading Binaries for a potential cause and the solution.

Christian

I checked the services are running, but from task manager, the SophosUpdateMgr.exe is showing as not using the CPU, its just a constant "00". but i can also see that the Let me try the link and will update Manager folder in Program Files(x86)\Sophos is showing last modified with today's date.

Let me try the link and I will update

Hi Christian, 

Sorry i wasn't working from office yesterday. Any ideas how to get rid of the unwanted profiles in the IOR? I cant remember what happened or any changes that were made onto the server for it to stop working, I was on short leave from work and when i returned i just found that it was not showing any connected endpoints. 

On Wednesday i tried to push installer on a PC on Network, it was able to install remotely, surprisingly. though still showing no connected endpoints. let me edit the mrinit.config and send. am working remotely today.

The mrinit details, i will just tell this, let me know if u need other details:

"NotifyRouterUpdate"="EM"

"ClitentIIOPPort"=dword:00002001

"ClientSSLPort"=dword:00002002

"ClientIORPort"=dword:00002000

"IORSenderPort"=dword:00002000

........

...........

........

"ServiceArgs"="

"MRParentAddress"="ServerIP, ServerMAC,<unknown>,ServerName"

"ParentRouterAddress"="ServerIP,ServerMAC,<unknown>,ServerName"

sorry, on the MRParentAddress & ParentRouerAddress, its the IPv6 of server not ServerMAC

Hello Jeremiah Sakala,

so there's just one ServerIP (is it the 192.x.x.x) and no FQDN?
If it is the 192.x.x.x please follow items A 3.-5. (ignore the rest) of the multiple IP addresses article. if that doesn't help do similarly for the Agent as outlined in with multiple IP addresses (item 2., the 2nd, 4th and 5th unnumbered point - please note that 127.0.0.1 in the 2nd point is likely a typo, it should be the ServerIP).

Christian

Hi Christian,

I followed the suggestions and removed all the files that were in C:\Program Data\Sophos\Update Manager\Working and saved them in another folder. I stopped all Sophos Services and restarted them, when i checked in Task Manager, the Sophos Update Manager seems to have started using the CPU. but will keep you posted on the outcome by Monday.

Hi Christian,

Just from checking the console, still shows not a single machine connected. would reinstalling the console maybe work?

Hello Jeremiah Sakala,

I don't think it's a SUM issue so this re-download should neither be necessary nor would it help in solving the issue.

Did you modify the mentioned registry keys related to the services?

Christian

Yes Christian, I strictly followed the instructions. 

Hello Jeremiah Sakala,

then there should be significant changes in the Router and Agent logs, particularly the IOR should contain only one profile (IIOP). Is this the case?

Christian

Am thinking I must have missed something somewhere, its still showing multiple IP Addresses in the Router Logs. Let me go through it once again just to verify the configurations and i will update you.

Am thinking I must have missed something somewhere, its still showing multiple IP Addresses in the Router Logs. Let me go through it once again just to verify the configurations and i will update you.

Hello Jeremiah Sakala,

the number of profiles in the IOR is the important part, dunno whether it'd report all addresses or only the explicitly configured one.

Christian

Initially it's supposed to resolve just one IP Address in the Router Log? 

Hello Jeremiah Sakala,

as said - I'm not sure whether at this point it enumerates all active interfaces or the IP(s) it is explicitly or implicitly configured to use. Don't have a system where I could test it.
There's a recent thread (in German) where disabling the additional (and unused) NIC seems to resolve a similar issue.

Christian

Hello Christian, Sorry for being quiet for so long, I was out of town on other duties. Today i after I tried everything we have discussed, i just thought of concentrating on the update manager, since I had done all settings you assisted me with, I reinstalled the SUM on the server without uninstalling anything and it worked. It was able to update the Update Manager and also the endpoints started showing up. You have been so helpful, much appreciated. i have even learned a lot about Sophos through this, i wonder if there's any part that we didn't cover, hahahaha. Once again, thank you Christian..