Yesterday Upgrade 5.45 IDE 119, Today 5.45 IDE 122, Today DOWNGRADE 5.44 IDE 258 - Version 10.7.2 VE3.96.2

Hello Andre Peterhans,

indeed the 5.45 detection data were rolled out yesterday afternoon and withdrawn less than two hours ago. While the software version didn't change a Major Install has been performed due to the Virus Data version change - and subsequently again on the downgrade.
Can't say why. The AV log (SAV.txt) shows a significant increase of the number of detectable objects (14139622 vs. 13979520) but then this isn't unusual, an even bigger jump was from 5.42 to 5.43.

recommended
Virus Data are a supplement and independent pf the software subscription.

Christian

Hello Christian

Thanks for your Explanation.

I just haven't seen this downgrade behavior before and it is a lot of Major Installation in a couple of hours. Each time there is an uninstall, a pop-up message from Windows (Antivirus protection is missing) and an installation again. Some of our users are insecure about this behavior.

I am curios about the next roll out.

Best Regards,

André

Hi Andre, sorry for the confusion the rollback is do to an issue identified on Chinese, Japanese and Korean language versions of the product. The details are on this advisory posted earlier this morning: https://community.sophos.com/kb/en-us/127677 

Hello André,

PeterM has explained what has happened. The advisory doesn't say whether the issue unconditionally affected all ja/ko/zh installations (in which case it shouldn't have happened at all)

As for the pop-up - might depend on the Windows version. Is it indeed the Windows pop-up or Sophos' On-access scanning disabled?
Anyway it shouldn't have been different from other Major Installs that occur once or twice per month. That it happened yesterday afternoon and again today might have caught their eyes though.

Christian

Hello all,

apparently it took almost two weeks to fix the issue, 5.45 (with 190+ IDEs) has finally been rolled out in the last days. Looks like this delayed the rollout of 10.7.6 with engine 3.70.2 in Preview for the on-premise SESC users.

Christian

Hello Christian

I have noticed the IDE roll out this week and I am waiting of the new preview release.

Best regards,

André

Hello André,

unless you're interested in Redstone 3 or Edge and Web Filtering on Redstone 2 the only exiting things in 10.7.6 would be the number of unspecified customer fixes. No mention of SEC 5.5.1 (or even higher) in this context.

Christian

Hello Christian

Is the better handling with Exploit Prevention exeption (not within the client registry) not in the new version implemented?

Anyway, I like to test the new version, because we had a lot of troubles a couple months ago.

André