Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 2 subscribers
  • Views 8434 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ERROR 0 Patches have not been successfully updated in the last three days

Peter Dudas

Hi,

 

I have the same error like many of us - SEC 5.5.0 creates eventlogs on the server: ERROR 0 Patches have not been successfully updated in the last three days

Searched through the forum, solution not described - although they confirmed the problems are gone.

https://community.sophos.com/products/endpoint-security-control/f/sophos-enterprise-console/97316/patches-have-not-been-successfully-updated-in-the-last-three-days

Thank you!



This thread was automatically locked due to age.
  • 0

    Hello Peter Dudas,

    please check the PatchFeedProcessor.log in C:\ProgramData\Sophos\Patch\Logs\. The solution to the errors reported in the referred thread was on the backend (i.e. from where the feed was downloaded), no action from us customers required. Yours might be a different problem.  

    Christian

  • 0 in reply to QC

    Hello!

     

    Is this related with Patch? Then we stopped using it as it provided so many wrong information about missing patches.

    Especially on older systems (2008R2 servers, even newly installed and fully patched server shown up as 15 missing patches) and due to this we changed to ManageEngine Patch Manager Plus.

    Patch assessments disabled in all policies. What else should we do to disable the 'Patch' part of the SEC?

    I found one computer which still reported - maybe that;s the reason.

    Now it is inactive as the rest - let's see tomorrow.

     

    Peter Dudas

  • 0 in reply to Peter Dudas

    By the way: is there a possibility to remotely uninstall the patch agents?

    Tamper protection enabled.

     

    Thank you!

  • 0 in reply to Peter Dudas

    Hello Peter Dudas,

    Is this related with Patch?
    It is. In the console you'd see the corresponding error if you open Events → Patch assessment events ... below the Search button. The Patch Data Feed is not maintained by SUM but by the PatchDataLoader which is run every hour by a Scheduled Task. Guess if you disable or delete this task you'll no longer get these events.
    Note that Patch is kinda add-on that has never been fully integrated.

    Patch assessments disabled
    whether you can use Patch is determined by your license.     As your license is determined by your credentials after SEC has been install the Patch components are there, SEC might disable the DataLoader when it sees basic license but definitely the actual use (whether not installed or not enabled) of Patch Assessment has no effect on the server parts.

    Christian

  • 0 in reply to QC

    Thank you!

     

    Patch disabled, removed from all computers - hope this is the end of the story.

Unfiltered HTML