• move clients to new sophos enterprise console

    Our old Sophos Enterprise Console crashed (got infected by a ransomware/cryptolocker variation) . We installed SEC on a new device (which has the same IP as the old one), but we can't manage to migrate computers from the existing old SEC to the new…
  • Sophos Virus Definitions

    Is there a way to see all virus definitions currently in your database? For example I have been asked if I can show we are covered for a certain virus (HPmal/EccKrpt-A) that has hit another LA.
  • We've been replacing machines by removing them from the domain, deleting them out of AD, out of the SEC. We use the same names for the new systems i.e. old computer name = computer1 (after removal) new computer name = computer1. The AV pushes to the ...

    We've been replacing machines by removing them from the domain, deleting them out of AD, out of the SEC. We use the same names for the new systems i.e. old computer name = computer1 (after removal) new computer name = computer1. The AV pushes to the machine…
  • RE: Does SEC database contains information on alert's detection type? i.e to distinguish between on-access and scheduled scan's alerts

    You can look at the username of the reported event, to some extent - as scheduled scans will never have an actual user reported, it will always be NT AUTHORITY\SYSTEM as the user with a scheduled scan; since this is the use the Sophos EP engine runs as…
  • Daily detection notifications on AppData\Local\Temp files - Can't remove...

    Hi I keep getting regular Adware detection notifications from 2 of our workstations. Both were clean Windows 7 installations. The initial detections occurred during the initial sync of Google Drive. Everyday I perform clean ups on the affected workstations…
  • Sophos AV Mac OS X Kernel Panic

    Seit geraumer Zeit kommt es auf einigen Macs vor, dass diese Abstürzen, im Log steht dann folgende Meldung: Anonymous UUID: 8E800642-2E2A-B8CC-DA13-2CB7A27E6E3A Thu Feb 25 14:21:41 2016 *** Panic Report *** panic(cpu 6 caller 0xffffff8002d404bb…
  • Unable to protect a new server 2012 R2 machine

    I am trying to protect a new server that I have created which is server 2012 R2. It is discovered but when I click to protect it I get the error "The applied software subscription does not contain software this computer can use". How do I overcome this…
  • DataBackUpRestore Failed

    Hello, I was migrating to new Server (Windows 2003 x32 to Windows 2008 x64) I have installed all components console. Now, i want to backup all ManagementServer on new server. I run DatabackupRestore.exe -Action=backup. Processed 1 pages for database…
  • Enterprise console, migrating server

    Hello, I got the problem when migrating server, all steps is already done but at the end of installation procces. Window prompt shown like this: I'm really sure, when first installation. I've chosen do not manage encryption. Any advise to solve…
  • Enterprise Console not updating computers successfully on the network

    Multiple computers on my network under the "policy compliance" part either state Awaiting policy transfer or are greyed out and do not even seem like they are receiving the update. For some reason though at each computers it successful says under the…
  • Failed to install SAVXP : The MSI has failed (Sophos Anti Virus not installed)

    Hello, One of our server have an issue, Sophos Anti Virus component on this server not installed after automatic update. On this server, installed PureMessage for Exchange. So, PureMessage update failed too. On SEC, i tried to push update but still…
  • All DC's reporting same error (ID 769 SAVOnAccess)

    Hi all, We have 4 DC's in our environment and they are all reporting Event ID 769 every 2 mins or so: "The on-access driver could not check device control for volume \Device\CdRom0" All are VM's if that helps. See snip. Thanks
  • can not open sophos enterprise console error.

    Hi Sophos, We have installed sophos enterprise console and after installation it shows "can't open sophos enterprise console" error.Could you please suggestion us to resolve this issue. Thanks & regards, Abdul Adil.
  • log file and computer search

    Hi, Where can I find the log file which records what's happening when I try to detect a new computer? I'm using Entreprise Console 5.2.2 with Windows 2012 server. Thanks for your help.
  • Enterprise Console not loading any updates

    Hello @ all, I have a problem with a new clean installation at one of our customers. The installation completed successfully, but the Enterprise Console can not download any updates. There is always an error with Code 80040410 followed by 80040401 and…
  • Sophos Enterprise Console Hanging and wont open

    Hello, I am having an issue with opening the Enterprise console, it just seems to hang. I get the opening box that says "connecting to the server... This might take a few seconds." This just stays static on the screen, I have killed all the Sophos Processes…
  • Linux Postgres Database excluded directories still being scanned

    We have a linux database, running postgres, that has excluded directories configured but these 'excluded' directories are still being scanned. This is causing major performance issues, hence the reason the directory was excluded, has anyone else experienced…
  • Can I, and if I can how can I, modify the time before end points appears as not connected in the enterprise console

    Right now I see red crosses of every endpoint whice is shutdown yesterday and today not used. This behavior decreases the attention value of the red crosses. After all every day one of more endpoints are not in use. As a result, the computers with…
  • Can not open enterprise Console after upgrade 5.2.0 to 5.3.1

    Hello, I've upgrade the console, but got errors like this: Management service is not starting and error. Anybody to help me? because i have contact Sophos Support, and just recommend me to send SDU log.
  • Enterprise Console can't open

    Hello, I faced the problem when i opened the console, show the pop up 'An unexpected error' and i copy the error. Here is the error: createAccessToken: LogonUser failed ----- [outer exception] ----- -- error: 0x8000FFFF (Catastrophic failure) -- facility…
  • Documentation on required permissions for Update Manager distribution shares???

    It's racking my brain and I haven't covered much ground with Sophos support in solving the issue but several of my distribution shares are generating various errors when having new updates written to them. I've already referenced: Sophos Update Manager…
  • I need to migrate a number of Macintosh Endpoints to a new console. What's the best way to do this? I've already taken care of my Windows clients.

    See above. I'd like to be able to automate this if possible.
  • Enterise Console, an unexpected error has occurred

    Hi all, When i was opening enterprise console, i got error. this copy error: Sophos.Management.GeneralException: Unexpected error. ---> System.OutOfMemoryException: Exception of type 'System.OutOfMemoryException' was thrown. at System.String.CtorCharArrayStartLength…
  • SEC, parentSUM update but error on logviewer

    Hello, I need advice for the problem, our SEC was getting errors since 25/10/2015 and continue till now. I have done to delete content working, warehouse and CID. Reconfiguring our parentSUM and parentSUM is updated, but have error Software Delivery…
  • Bitcoin Miner Detected

    I'm trying to remove mstdc.exe from the machine, but it won't allow me to delete and the auto-cleanup from the Enterprise Console doesn't work. Has anyone else come across this? Thanks in advance.