Thread Info
  • Locked Locked
  • Replies 6 replies
  • Subscribers 3 subscribers
  • Views 10288 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

clustered Puremessage in Sophos Enterprise Console not updating spam-rules

grunz

Hi,

we currently have a cluster of two Exchange 2016 servers on which I'm trying to get Puremessage up and running.

We also have a server running Sophos Enterprise Console that manages SESC on our clients and servers. Before installing PureMessage, the Exchange servers already had SESC installed and were centrally managed by Sophos Enterprise Console. 
After the installation of Puremessage everything worked fine, except for the spam-rules not being updated. This happened although the updating policy that is centrally deployed from SEC contains "Sophos" (and the corresponding credentials) as the secondary update source. Searching the forums, I could finally get the updates for the spam-rules working when i followed the advice to uninstall autoupdate and all other sophos products except for PureMessage from the server, and then reinstall them using the standalone installer escw_107_sa_sfx.exe. (https://community.sophos.com/products/puremessage/f/sophos-puremessage/73452/new-frustrated-customer-updates-not-downloading-since-day-1-support-has-not-been-able-to-help-so-far) 
By doing so, I got a working PureMessage installation that was also able to receive updates for the first time, but now it was no longer managed by our Sophos Enterprise Console. Reinstalling the Sophos components through SEC put the system back into the managed state, but updating the spam-rules now fails again, altough the secondary update location is configured.  I followed the advices from the following KB articles, but that didn't help:
https://community.sophos.com/kb/en-us/40065

https://community.sophos.com/kb/en-us/29452

How can I get this combination working?  



This thread was automatically locked due to age.

  • Hello Patrick Tippner,

    the frustrated thread is a little bit old, there have been new versions of AutoUpdate in the meantime. And do you encounter the same problem, i.e. an exception, or something different. If the latter - could you show the ALUpdate log?

    Christian

  • in reply to QC

    The only visible error i can see is the tooltip saying "update failed" when pointing my mouse on the shield-icon in the systray. The log for the failing server looks like this:

     

    Trace(2018-Mar-07 13:00:20): =========================
    Trace(2018-Mar-07 13:00:20): ALUpdate is starting.
    Trace(2018-Mar-07 13:00:20): AutoUpdate version: 5.10
    Trace(2018-Mar-07 13:00:20): Build : 210356
    Trace(2018-Mar-07 13:00:20): Command line : -ManualUpdate -NoGUI -RootPath "C:\Program Files (x86)\Sophos\AutoUpdate"
    Trace(2018-Mar-07 13:00:20): =========================
    Trace(2018-Mar-07 13:00:20): Process security set successfully
    Trace(2018-Mar-07 13:00:20): Product iProductData.{390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92} has been added.
    Trace(2018-Mar-07 13:00:20): Product iProductData.{390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92} is available from Sophos.
    Trace(2018-Mar-07 13:00:20): Product iProductData.{390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92} is not the Spam Rules package.
    Trace(2018-Mar-07 13:00:20): Product iProductData.{D752FAB9-5883-4b36-8740-61565B6BAD29} has not been added.
    Trace(2018-Mar-07 13:00:20): Product iProductData.{E17FE03B-0501-4aaa-BC69-0129D965F311} has been added.
    Trace(2018-Mar-07 13:00:20): Product iProductData.{E17FE03B-0501-4aaa-BC69-0129D965F311} is available from Sophos.
    Trace(2018-Mar-07 13:00:20): Product iProductData.{E17FE03B-0501-4aaa-BC69-0129D965F311} is not the Spam Rules package.
    Trace(2018-Mar-07 13:00:20): Product subscription is disabled: iProductData.{7998C326-2CA5-4830-B7D2-B792D2460975} action value is:0
    Trace(2018-Mar-07 13:00:20): Product iProductData.{7998C326-2CA5-4830-B7D2-B792D2460975} has not been added.
    Trace(2018-Mar-07 13:00:20): Product iProductData.{3B758ED7-87C1-4e89-BDE1-F49DFF1249F6} has not been added.
    Trace(2018-Mar-07 13:00:20): Product iProductData.{B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} has been added.
    Trace(2018-Mar-07 13:00:20): Product iProductData.{B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} is available from Sophos.
    Trace(2018-Mar-07 13:00:20): Product iProductData.{B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} is the Spam Rules package.
    Trace(2018-Mar-07 13:00:20): Computer is a not possible cluster
    Trace(2018-Mar-07 13:00:20): PureMessageDetector::AreSpamRulesRequired - Could not open registry on Software\Sophos\MMEx\Config\Global
    Trace(2018-Mar-07 13:00:20): ConfigurationImpl, considering PMSR 2.6: PureMessage not installed, PMSR package will not be updated without a subscription
    Trace(2018-Mar-07 13:00:20): Considering subscribed products.
    Trace(2018-Mar-07 13:00:20): Considering product {1129226C-32AB-4B72-85E1-A9CC8DFBC859}
    Trace(2018-Mar-07 13:00:20): Product {1129226C-32AB-4B72-85E1-A9CC8DFBC859} is not already subscribed.
    Trace(2018-Mar-07 13:00:20): Product {1129226C-32AB-4B72-85E1-A9CC8DFBC859} was added to the list.
    Trace(2018-Mar-07 13:00:20): Considering product {9BF40A4E-23AE-48be-9974-5A1F261DBEE8}
    Trace(2018-Mar-07 13:00:20): Product {9BF40A4E-23AE-48be-9974-5A1F261DBEE8} is not already subscribed.
    Trace(2018-Mar-07 13:00:20): Product {9BF40A4E-23AE-48be-9974-5A1F261DBEE8} was added to the list.
    Trace(2018-Mar-07 13:00:20): Considering product {B5E7E2A7-3B64-437D-801F-21CC9D67CC6D}
    Trace(2018-Mar-07 13:00:20): Product {B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} is not already subscribed.
    Trace(2018-Mar-07 13:00:20): Product {B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} is PureMessageSpamRules.
    Trace(2018-Mar-07 13:00:20): Product {B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} was added to the list.
    Trace(2018-Mar-07 13:00:20): Considering product {E17FE03B-0501-4aaa-BC69-0129D965F311}
    Trace(2018-Mar-07 13:00:20): Considering product {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E}
    Trace(2018-Mar-07 13:00:20): Product {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E} is not already subscribed.
    Trace(2018-Mar-07 13:00:20): Product {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E} was added to the list.
    Trace(2018-Mar-07 13:00:20): Product {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E} is removable.
    Trace(2018-Mar-07 13:00:20): Product {8087796B-2289-4897-98A5-58FF23DAAFD0} was added to the list.
    Trace(2018-Mar-07 13:00:20): Product {8087796B-2289-4897-98A5-58FF23DAAFD0} is optional.
    Trace(2018-Mar-07 13:00:20): Product {8087796B-2289-4897-98A5-58FF23DAAFD0} is removable.
    Trace(2018-Mar-07 13:00:20): Product {1129226C-32AB-4B72-85E1-A9CC8DFBC859} is removable.
    Trace(2018-Mar-07 13:00:20): Could not read registry entry containing Sophos address - using hardcoded value.
    Trace(2018-Mar-07 13:00:20): Customer ID has changed
    Trace(2018-Mar-07 13:00:20): GenerateCustomerID: complete
    Trace(2018-Mar-07 13:00:20): Computer is a not possible cluster
    Trace(2018-Mar-07 13:00:20): PureMessageDetector::AreSpamRulesRequired - Could not open registry on Software\Sophos\MMEx\Config\Global
    Trace(2018-Mar-07 13:00:20): IPCBase::IPCBase: Connected to shared memory A32951C539924a12B3C8F2FDA5A268E4
    Trace(2018-Mar-07 13:00:20): IPCSender::ProcessSend started
    Trace(2018-Mar-07 13:00:20): IPCSender::ProcessSend: No messages in queue, starting to wait
    Trace(2018-Mar-07 13:00:20): RMSMessageHandler: ALUpdateStart
    Trace(2018-Mar-07 13:00:20): IPCSender::Write: Writing message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSStartUpdate" />
    Trace(2018-Mar-07 13:00:20): IPCSender::ProcessSend: Send message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSStartUpdate" />
    Trace(2018-Mar-07 13:00:20): IPCSender::ProcessSend: No messages in queue, starting to wait
    Trace(2018-Mar-07 13:00:20): ALUpdate(AutoUpdate.Started):
    Trace(2018-Mar-07 13:00:20): UpdateCoordinator::UpdateNow: Entering
    Trace(2018-Mar-07 13:00:20): PopulateCache: Entering
    Trace(2018-Mar-07 13:00:20): UpdateCoordinator::UpdateNow: current platform is WIN_81_SVR_X64
    Trace(2018-Mar-07 13:00:20): ProductFactory::Create: SimpleProduct: {390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92}
    Trace(2018-Mar-07 13:00:20): ProductFactory::Create: SimpleProduct: {E17FE03B-0501-4aaa-BC69-0129D965F311}
    Trace(2018-Mar-07 13:00:20): ProductFactory::Create: SimpleProduct: {1129226C-32AB-4B72-85E1-A9CC8DFBC859}
    Trace(2018-Mar-07 13:00:20): ProductFactory::Create: SAU Product
    Trace(2018-Mar-07 13:00:20): ProductFactory::Create: PMSR Product
    Trace(2018-Mar-07 13:00:20): ProductFactory::Create: SimpleProduct: {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E}
    Trace(2018-Mar-07 13:00:20): ProductFactory::Create: SimpleProduct: {8087796B-2289-4897-98A5-58FF23DAAFD0}
    Trace(2018-Mar-07 13:00:20): IntelligentUpdateSourceLocatorImpl::AugmentUpdateSources() entered.
    Trace(2018-Mar-07 13:00:20): Network location has not changed.
    Trace(2018-Mar-07 13:00:20): RelativeCidUpdateSourceLocator::AugmentUpdateSources: Entering
    Trace(2018-Mar-07 13:00:20): Processing CID update location: \\LS-DC1-VM-AV-01.learnship.net\SophosUpdate\CIDs\S000\SAVSCFXP:-1
    Trace(2018-Mar-07 13:00:20): Processing CID update location: \\LS-DC1-VM-AV-01.learnship.net\SophosUpdate\CIDs\S000\SAVSCFXP\
    Trace(2018-Mar-07 13:00:20): Skipping SDDS2 update location: Sophos
    Trace(2018-Mar-07 13:00:20): RelativeCidUpdateSourceLocator::AugmentUpdateSources: Finished. Number of new locations added: 0
    Trace(2018-Mar-07 13:00:20): UpdateCoordinator::UpdateNow: About to Sync list of products
    Trace(2018-Mar-07 13:00:20): UpdateLocationFacade::SyncProduct: Last Update Mechanism = Unknown
    Trace(2018-Mar-07 13:00:20): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Started:
    Trace(2018-Mar-07 13:00:20): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, creating update location
    Trace(2018-Mar-07 13:00:20): Calling package_source_init
    Trace(2018-Mar-07 13:00:20): TrySyncProduct, Calling BeginSync
    Trace(2018-Mar-07 13:00:20): Logging on network access user
    Trace(2018-Mar-07 13:00:20): Attempting to make a connection to remote machine \\LS-DC1-VM-AV-01.learnship.net\SophosUpdate\CIDs\S000\SAVSCFXP
    Trace(2018-Mar-07 13:00:20): Connection to remote machine \\LS-DC1-VM-AV-01.learnship.net\SophosUpdate\CIDs\S000\SAVSCFXP successful
    Trace(2018-Mar-07 13:00:20): Custom certificate already present.
    Trace(2018-Mar-07 13:00:20): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\escdp.dat
    Trace(2018-Mar-07 13:00:20): Remote connection over UNC.
    Trace(2018-Mar-07 13:00:20): Read file master.upd (Remote).
    Trace(2018-Mar-07 13:00:20): Synchronised file root.upd (Local).
    Trace(2018-Mar-07 13:00:20): Synchronised file escdp.dat (Local).
    Trace(2018-Mar-07 13:00:20): No file expired_credential.dat.
    Trace(2018-Mar-07 13:00:20): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\ProductID.dat
    Trace(2018-Mar-07 13:00:20): Synchronised file ProductID.dat (Local).
    Trace(2018-Mar-07 13:00:20): Customer ID has changed
    Trace(2018-Mar-07 13:00:20): ParseCustomerIDFile: completed: 0
    Trace(2018-Mar-07 13:00:20): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Calling SyncProduct with {390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92}
    Trace(2018-Mar-07 13:00:20): CIDUpdateLocation::SyncProduct - Updating Product: RMSNT
    Trace(2018-Mar-07 13:00:20): CIDUpdate(SyncProduct.Start): RMSNT, \\LS-DC1-VM-AV-01.learnship.net\SophosUpdate\CIDs\S000\SAVSCFXP
    Trace(2018-Mar-07 13:00:20): Checksum found in master.upd matches cached cidsync.upd : 5935f9d4. Skipping download
    Trace(2018-Mar-07 13:00:20): CIDUpdate(DiscoveredSuccess):
    Trace(2018-Mar-07 13:00:21): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, SyncProduct returned - 1
    Trace(2018-Mar-07 13:00:21): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Ended - 1
    Trace(2018-Mar-07 13:00:21): UpdateLocationFacade::SyncProduct: Last Update Mechanism = CID
    Trace(2018-Mar-07 13:00:21): CIDUpdateLocation::SyncProduct - Updating Product: SAVXP
    Trace(2018-Mar-07 13:00:21): CIDUpdate(SyncProduct.Start): SAVXP, \\LS-DC1-VM-AV-01.learnship.net\SophosUpdate\CIDs\S000\SAVSCFXP
    Trace(2018-Mar-07 13:00:21): Checksum found in master.upd matches cached cidsync.upd : 625aaa90. Skipping download
    Trace(2018-Mar-07 13:00:21): CIDUpdate(DiscoveredSuccess):
    Trace(2018-Mar-07 13:00:21): UpdateLocationFacade::SyncProduct: Last Update Mechanism = CID
    Trace(2018-Mar-07 13:00:21): CIDUpdateLocation::SyncProduct - Updating Product: Sophos Endpoint Defense
    Trace(2018-Mar-07 13:00:21): CIDUpdate(SyncProduct.Start): Sophos Endpoint Defense, \\LS-DC1-VM-AV-01.learnship.net\SophosUpdate\CIDs\S000\SAVSCFXP
    Trace(2018-Mar-07 13:00:21): Checksum found in master.upd matches cached cidsync.upd : ec1b32a5. Skipping download
    Trace(2018-Mar-07 13:00:21): CIDUpdate(DiscoveredSuccess):
    Trace(2018-Mar-07 13:00:22): UpdateLocationFacade::SyncProduct: Last Update Mechanism = CID
    Trace(2018-Mar-07 13:00:22): CIDUpdateLocation::SyncProduct - Updating Product: Sophos AutoUpdate
    Trace(2018-Mar-07 13:00:22): CIDUpdate(SyncProduct.Start): Sophos AutoUpdate, \\LS-DC1-VM-AV-01.learnship.net\SophosUpdate\CIDs\S000\SAVSCFXP
    Trace(2018-Mar-07 13:00:22): Checksum found in master.upd matches cached cidsync.upd : 506fcab8. Skipping download
    Trace(2018-Mar-07 13:00:22): CIDUpdate(DiscoveredSuccess):
    Trace(2018-Mar-07 13:00:23): CIDUpdateLocation::Prepare... entered
    Trace(2018-Mar-07 13:00:23): CheckManifest: Processing manifest: C:\ProgramData\Sophos\AutoUpdate\cache\sau\manifest.dat
    Trace(2018-Mar-07 13:00:23): CheckManifest: Processing manifest: C:\ProgramData\Sophos\AutoUpdate\cache\sau\telemsup\telemetry.manifest.dat
    Trace(2018-Mar-07 13:00:23): CheckManifest completed successfully
    Trace(2018-Mar-07 13:00:24): CustomFileMap::CustomFileMap. CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
    Trace(2018-Mar-07 13:00:24): CustomFileMap::Read: Subfolder = sau productID = {9BF40A4E-23AE-48be-9974-5A1F261DBEE8}
    Trace(2018-Mar-07 13:00:24): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\sau.custom
    Trace(2018-Mar-07 13:00:24): CustomFileMap::Read: File exists and appears valid.
    Trace(2018-Mar-07 13:00:24): UpdateLocationFacade::SyncProduct: Last Update Mechanism = CID
    Trace(2018-Mar-07 13:00:24): CIDUpdateLocation::SyncProduct - Updating Product: Sophos System Protection
    Trace(2018-Mar-07 13:00:24): CIDUpdate(SyncProduct.Start): Sophos System Protection, \\LS-DC1-VM-AV-01.learnship.net\SophosUpdate\CIDs\S000\SAVSCFXP
    Trace(2018-Mar-07 13:00:24): Checksum found in master.upd matches cached cidsync.upd : 59d2646f. Skipping download
    Trace(2018-Mar-07 13:00:24): CIDUpdate(DiscoveredSuccess):
    Trace(2018-Mar-07 13:00:24): UpdateLocationFacade::SyncProduct: Last Update Mechanism = CID
    Trace(2018-Mar-07 13:00:24): CIDUpdateLocation::SyncProduct - Updating Product: Sophos Network Threat Protection
    Trace(2018-Mar-07 13:00:24): CIDUpdate(SyncProduct.Start): Sophos Network Threat Protection, \\LS-DC1-VM-AV-01.learnship.net\SophosUpdate\CIDs\S000\SAVSCFXP
    Trace(2018-Mar-07 13:00:24): Optional product not found in master.upd. Skipping download
    Trace(2018-Mar-07 13:00:24): CIDUpdate(DiscoveredSuccess):
    Trace(2018-Mar-07 13:00:25): CIDUpdateLocation::Prepare... entered
    Trace(2018-Mar-07 13:00:25): CheckManifest: Processing manifest: C:\ProgramData\Sophos\AutoUpdate\cache\sau\manifest.dat
    Trace(2018-Mar-07 13:00:26): CheckManifest: Processing manifest: C:\ProgramData\Sophos\AutoUpdate\cache\sau\telemsup\telemetry.manifest.dat
    Trace(2018-Mar-07 13:00:26): CheckManifest completed successfully
    Trace(2018-Mar-07 13:00:26): CustomFileMap::CustomFileMap. CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
    Trace(2018-Mar-07 13:00:26): CustomFileMap::Read: Subfolder = sau productID = {9BF40A4E-23AE-48be-9974-5A1F261DBEE8}
    Trace(2018-Mar-07 13:00:26): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\sau.custom
    Trace(2018-Mar-07 13:00:26): CustomFileMap::Read: File exists and appears valid.
    Trace(2018-Mar-07 13:00:26): CIDUpdateLocation::Prepare... entered
    Trace(2018-Mar-07 13:00:26): CheckManifest: Processing manifest: C:\ProgramData\Sophos\AutoUpdate\cache\sau\manifest.dat
    Trace(2018-Mar-07 13:00:26): CheckManifest: Processing manifest: C:\ProgramData\Sophos\AutoUpdate\cache\sau\telemsup\telemetry.manifest.dat
    Trace(2018-Mar-07 13:00:26): CheckManifest completed successfully
    Trace(2018-Mar-07 13:00:26): CustomFileMap::CustomFileMap. CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
    Trace(2018-Mar-07 13:00:26): CustomFileMap::Read: Subfolder = sau productID = {9BF40A4E-23AE-48be-9974-5A1F261DBEE8}
    Trace(2018-Mar-07 13:00:26): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\sau.custom
    Trace(2018-Mar-07 13:00:26): CustomFileMap::Read: File exists and appears valid.
    Trace(2018-Mar-07 13:00:26): UpdateLocationFacade::SyncProduct: Last Update Mechanism = Unknown
    Trace(2018-Mar-07 13:00:26): TrySyncProduct<class SDDS2::SULUpdateLocation>, Started:
    Trace(2018-Mar-07 13:00:26): TrySyncProduct<class SDDS2::SULUpdateLocation>, creating update location
    Trace(2018-Mar-07 13:00:26): Could not read registry entry containing Sophos address - using hardcoded value.
    Trace(2018-Mar-07 13:00:26): SULUpdateLocation created!
    Trace(2018-Mar-07 13:00:26): TrySyncProduct, Calling BeginSync
    Trace(2018-Mar-07 13:00:26): SULUpdateLocation: BeginSync
    Trace(2018-Mar-07 13:00:26): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
    Trace(2018-Mar-07 13:00:26): SDDS2Update(SyncProduct.Start): Sophos Endpoint Security and Control, sophos
    Trace(2018-Mar-07 13:00:26): Calling SULDownloader Setup...
    Trace(2018-Mar-07 13:00:26): warehousePath: "C:\ProgramData\Sophos\AutoUpdate\data\warehouse"
    Trace(2018-Mar-07 13:00:26): decodePath: "C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode"
    Trace(2018-Mar-07 13:00:26): certPath: "C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir"
    Trace(2018-Mar-07 13:00:26): server = sophos
    Trace(2018-Mar-07 13:00:26): Adding Sophos Update Location: dci.sophosupd.com/update
    Trace(2018-Mar-07 13:00:26): Adding Sophos Update Location: dci.sophosupd.net/update
    Trace(2018-Mar-07 13:00:26): No manually configured proxy.
    Trace(2018-Mar-07 13:00:26): SULDownloader setup successful.
    Trace(2018-Mar-07 13:00:26): SubscriptionProvider: 7ba49542-049c-4154-aad9-cf19a9ec7be5/10.7.6.2.3702.1/
    Trace(2018-Mar-07 13:00:28): Enumerating available product versions...
    Trace(2018-Mar-07 13:00:28): Failed to authenticate
    Trace(2018-Mar-07 13:00:28): SubscriptionProvider: 7ba49542-049c-4154-aad9-cf19a9ec7be5/10.7.6.2.3702.1/
    Trace(2018-Mar-07 13:00:30): Failed to authenticate
    Trace(2018-Mar-07 13:00:30): Failed: SDDS2 CheckResubscription failed
    Trace(2018-Mar-07 13:00:30): TrySyncProduct<class SDDS2::SULUpdateLocation>, Ended - 0
    Trace(2018-Mar-07 13:00:30): ALUpdate(DownloadEnded):
    Trace(2018-Mar-07 13:00:30): UpdateCoordinator::UpdateNow: About to Action list of products
    Trace(2018-Mar-07 13:00:30): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
    Trace(2018-Mar-07 13:00:30): Null update
    Trace(2018-Mar-07 13:00:30): ALUpdate(Action.Skipped): RMSNT
    Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate...
    Trace(2018-Mar-07 13:00:30): CustomFileMap::CustomFileMap. CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
    Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: Subfolder = rms productID = {390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92}
    Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\rms.custom
    Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: File exists and appears valid.
    Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate complete.
    Trace(2018-Mar-07 13:00:30): Updating plugin cache for RMSNT
    Trace(2018-Mar-07 13:00:30): Successfully updated plugin cache for RMSNT
    Trace(2018-Mar-07 13:00:30): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
    Trace(2018-Mar-07 13:00:30): Null update
    Trace(2018-Mar-07 13:00:30): ALUpdate(Action.Skipped): SAVXP
    Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate...
    Trace(2018-Mar-07 13:00:30): CustomFileMap::CustomFileMap. CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
    Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: Subfolder = savxp productID = {E17FE03B-0501-4aaa-BC69-0129D965F311}
    Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\savxp.custom
    Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: File exists and appears valid.
    Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate complete.
    Trace(2018-Mar-07 13:00:30): Updating plugin cache for SAVXP
    Trace(2018-Mar-07 13:00:30): Successfully updated plugin cache for SAVXP
    Trace(2018-Mar-07 13:00:30): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
    Trace(2018-Mar-07 13:00:30): Null update
    Trace(2018-Mar-07 13:00:30): ALUpdate(Action.Skipped): Sophos Endpoint Defense
    Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate...
    Trace(2018-Mar-07 13:00:30): CustomFileMap::CustomFileMap. CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
    Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: Subfolder = sed64 productID = {1129226C-32AB-4B72-85E1-A9CC8DFBC859}
    Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\sed64.custom
    Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: File exists and appears valid.
    Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate complete.
    Trace(2018-Mar-07 13:00:30): Updating plugin cache for Sophos Endpoint Defense
    Trace(2018-Mar-07 13:00:30): Successfully updated plugin cache for Sophos Endpoint Defense
    Trace(2018-Mar-07 13:00:30): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
    Trace(2018-Mar-07 13:00:30): Null update
    Trace(2018-Mar-07 13:00:30): ALUpdate(Action.Skipped): Sophos AutoUpdate
    Trace(2018-Mar-07 13:00:30): Updating subscription information from product ID data.
    Trace(2018-Mar-07 13:00:30): Rigid name: 7ba49542-049c-4154-aad9-cf19a9ec7be5
    Trace(2018-Mar-07 13:00:30): Version: 10.7.6.2.3702.1
    Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate...
    Trace(2018-Mar-07 13:00:30): CustomFileMap::CustomFileMap. CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
    Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: Subfolder = sau productID = {9BF40A4E-23AE-48be-9974-5A1F261DBEE8}
    Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\sau.custom
    Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: File exists and appears valid.
    Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate complete.
    Trace(2018-Mar-07 13:00:30): Updating plugin cache for Sophos AutoUpdate
    Trace(2018-Mar-07 13:00:30): Successfully updated plugin cache for Sophos AutoUpdate
    Trace(2018-Mar-07 13:00:30): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
    Trace(2018-Mar-07 13:00:30): Null update
    Trace(2018-Mar-07 13:00:30): ALUpdate(Action.Skipped): Sophos System Protection
    Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate...
    Trace(2018-Mar-07 13:00:30): CustomFileMap::CustomFileMap. CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
    Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: Subfolder = ssp productID = {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E}
    Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\ssp.custom
    Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: File exists and appears valid.
    Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate complete.
    Trace(2018-Mar-07 13:00:30): Updating plugin cache for Sophos System Protection
    Trace(2018-Mar-07 13:00:30): Successfully updated plugin cache for Sophos System Protection
    Trace(2018-Mar-07 13:00:30): SimpleProduct::DoAction isLater==true skipAction==false isUninstall)==truem_lastUpdateSucceeded==false numfilestocahce 1 Actiontype SetupNot preinstalled product
    Trace(2018-Mar-07 13:00:30): Null update
    Trace(2018-Mar-07 13:00:30): ALUpdate(Action.Skipped): Sophos Network Threat Protection
    Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate...
    Trace(2018-Mar-07 13:00:31): RMSMessageHandler: ALUpdateEnd
    Trace(2018-Mar-07 13:00:31): Sending message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate" />
    Trace(2018-Mar-07 13:00:31): IPCSender::Write: Writing message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate" />
    Trace(2018-Mar-07 13:00:31): IPCSender::ProcessSend: Send message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate" />
    Trace(2018-Mar-07 13:00:31): IPCSender::ProcessSend: No messages in queue, starting to wait
    Trace(2018-Mar-07 13:00:32): IPCSender::ProcessSend exiting
    Trace(2018-Mar-07 13:00:32): ALUpdate finished

     



    The second server is still running the standalone installation of SESC which is currently not managed by SEC. On that server, updating spam-rules succeeds:

     



    Trace(2018-Mar-07 13:03:37): =========================
    Trace(2018-Mar-07 13:03:37): ALUpdate is starting.
    Trace(2018-Mar-07 13:03:37): AutoUpdate version: 5.10
    Trace(2018-Mar-07 13:03:37): Build : 210356
    Trace(2018-Mar-07 13:03:37): Command line : -ManualUpdate -NoGUI -RootPath "C:\Program Files (x86)\Sophos\AutoUpdate"
    Trace(2018-Mar-07 13:03:37): =========================
    Trace(2018-Mar-07 13:03:37): Process security set successfully
    Trace(2018-Mar-07 13:03:37): Product subscription is disabled: iProductData.{390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92} action value is:0
    Trace(2018-Mar-07 13:03:37): Product iProductData.{390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92} has not been added.
    Trace(2018-Mar-07 13:03:37): Product subscription is disabled: iProductData.{D752FAB9-5883-4b36-8740-61565B6BAD29} action value is:0
    Trace(2018-Mar-07 13:03:37): Product iProductData.{D752FAB9-5883-4b36-8740-61565B6BAD29} has not been added.
    Trace(2018-Mar-07 13:03:37): Product iProductData.{E17FE03B-0501-4aaa-BC69-0129D965F311} has been added.
    Trace(2018-Mar-07 13:03:37): Product iProductData.{E17FE03B-0501-4aaa-BC69-0129D965F311} is available from Sophos.
    Trace(2018-Mar-07 13:03:37): Product iProductData.{E17FE03B-0501-4aaa-BC69-0129D965F311} is not the Spam Rules package.
    Trace(2018-Mar-07 13:03:37): Product subscription is disabled: iProductData.{7998C326-2CA5-4830-B7D2-B792D2460975} action value is:0
    Trace(2018-Mar-07 13:03:37): Product iProductData.{7998C326-2CA5-4830-B7D2-B792D2460975} has not been added.
    Trace(2018-Mar-07 13:03:37): Product iProductData.{3B758ED7-87C1-4e89-BDE1-F49DFF1249F6} has not been added.
    Trace(2018-Mar-07 13:03:37): Product iProductData.{B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} has been added.
    Trace(2018-Mar-07 13:03:37): Product iProductData.{B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} is available from Sophos.
    Trace(2018-Mar-07 13:03:37): Product iProductData.{B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} is the Spam Rules package.
    Trace(2018-Mar-07 13:03:37): Computer is a not possible cluster
    Trace(2018-Mar-07 13:03:37): PureMessageDetector::AreSpamRulesRequired - Could not open registry on Software\Sophos\MMEx\Config\Global
    Trace(2018-Mar-07 13:03:37): ConfigurationImpl, considering PMSR 2.6: PureMessage not installed, PMSR package will not be updated without a subscription
    Trace(2018-Mar-07 13:03:37): Considering subscribed products.
    Trace(2018-Mar-07 13:03:37): Considering product {9BF40A4E-23AE-48be-9974-5A1F261DBEE8}
    Trace(2018-Mar-07 13:03:37): Product {9BF40A4E-23AE-48be-9974-5A1F261DBEE8} is not already subscribed.
    Trace(2018-Mar-07 13:03:37): Product {9BF40A4E-23AE-48be-9974-5A1F261DBEE8} was added to the list.
    Trace(2018-Mar-07 13:03:37): Considering product {B5E7E2A7-3B64-437D-801F-21CC9D67CC6D}
    Trace(2018-Mar-07 13:03:37): Product {B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} is not already subscribed.
    Trace(2018-Mar-07 13:03:37): Product {B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} is PureMessageSpamRules.
    Trace(2018-Mar-07 13:03:37): Product {B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} was added to the list.
    Trace(2018-Mar-07 13:03:37): Considering product {E17FE03B-0501-4aaa-BC69-0129D965F311}
    Trace(2018-Mar-07 13:03:37): Considering product {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E}
    Trace(2018-Mar-07 13:03:37): Product {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E} is not already subscribed.
    Trace(2018-Mar-07 13:03:37): Product {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E} was added to the list.
    Trace(2018-Mar-07 13:03:37): Product {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E} is removable.
    Trace(2018-Mar-07 13:03:37): Product {8087796B-2289-4897-98A5-58FF23DAAFD0} was added to the list.
    Trace(2018-Mar-07 13:03:37): Product {8087796B-2289-4897-98A5-58FF23DAAFD0} is optional.
    Trace(2018-Mar-07 13:03:37): Product {8087796B-2289-4897-98A5-58FF23DAAFD0} is removable.
    Trace(2018-Mar-07 13:03:37): Product {1129226C-32AB-4B72-85E1-A9CC8DFBC859} was added to the list.
    Trace(2018-Mar-07 13:03:37): Product {1129226C-32AB-4B72-85E1-A9CC8DFBC859} is optional.
    Trace(2018-Mar-07 13:03:37): Product {1129226C-32AB-4B72-85E1-A9CC8DFBC859} is removable.
    Trace(2018-Mar-07 13:03:37): Could not read registry entry containing Sophos address - using hardcoded value.
    Trace(2018-Mar-07 13:03:37): GenerateCustomerID: complete
    Trace(2018-Mar-07 13:03:37): Computer is a not possible cluster
    Trace(2018-Mar-07 13:03:37): PureMessageDetector::AreSpamRulesRequired - Could not open registry on Software\Sophos\MMEx\Config\Global
    Trace(2018-Mar-07 13:03:37): Could not read registry entry containing Sophos address - using hardcoded value.
    Trace(2018-Mar-07 13:03:37): GenerateCustomerID: complete
    Trace(2018-Mar-07 13:03:37): Computer is a not possible cluster
    Trace(2018-Mar-07 13:03:37): PureMessageDetector::AreSpamRulesRequired - Could not open registry on Software\Sophos\MMEx\Config\Global
    Trace(2018-Mar-07 13:03:37): IPCBase::IPCBase: Initialising shared memory A32951C539924a12B3C8F2FDA5A268E4
    Trace(2018-Mar-07 13:03:37): IPCSender::ProcessSend started
    Trace(2018-Mar-07 13:03:37): IPCSender::ProcessSend: No messages in queue, starting to wait
    Trace(2018-Mar-07 13:03:37): RMSMessageHandler: ALUpdateStart
    Trace(2018-Mar-07 13:03:37): IPCSender::Write: Writing message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSStartUpdate" />
    Trace(2018-Mar-07 13:03:37): IPCSender::ProcessSend: Send message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSStartUpdate" />
    Trace(2018-Mar-07 13:03:37): IPCSender::ProcessSend: No messages in queue, starting to wait
    Trace(2018-Mar-07 13:03:37): ALUpdate(AutoUpdate.Started):
    Trace(2018-Mar-07 13:03:37): UpdateCoordinator::UpdateNow: Entering
    Trace(2018-Mar-07 13:03:37): PopulateCache: Entering
    Trace(2018-Mar-07 13:03:37): UpdateCoordinator::UpdateNow: current platform is WIN_81_SVR_X64
    Trace(2018-Mar-07 13:03:37): ProductFactory::Create: SimpleProduct: {E17FE03B-0501-4aaa-BC69-0129D965F311}
    Trace(2018-Mar-07 13:03:37): ProductFactory::Create: SAU Product
    Trace(2018-Mar-07 13:03:37): ProductFactory::Create: PMSR Product
    Trace(2018-Mar-07 13:03:37): ProductFactory::Create: SimpleProduct: {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E}
    Trace(2018-Mar-07 13:03:37): ProductFactory::Create: SimpleProduct: {8087796B-2289-4897-98A5-58FF23DAAFD0}
    Trace(2018-Mar-07 13:03:37): ProductFactory::Create: SimpleProduct: {1129226C-32AB-4B72-85E1-A9CC8DFBC859}
    Trace(2018-Mar-07 13:03:37): RelativeCidUpdateSourceLocator::AugmentUpdateSources: Entering
    Trace(2018-Mar-07 13:03:37): Skipping SDDS2 update location: Sophos
    Trace(2018-Mar-07 13:03:37): Skipping SDDS2 update location: Sophos
    Trace(2018-Mar-07 13:03:37): RelativeCidUpdateSourceLocator::AugmentUpdateSources: Finished. Number of new locations added: 0
    Trace(2018-Mar-07 13:03:37): UpdateCoordinator::UpdateNow: About to Sync list of products
    Trace(2018-Mar-07 13:03:37): UpdateLocationFacade::SyncProduct: Last Update Mechanism = SDDS2
    Trace(2018-Mar-07 13:03:37): TrySyncProduct<class SDDS2::SULUpdateLocation>, Started:
    Trace(2018-Mar-07 13:03:37): TrySyncProduct<class SDDS2::SULUpdateLocation>, creating update location
    Trace(2018-Mar-07 13:03:37): Could not read registry entry containing Sophos address - using hardcoded value.
    Trace(2018-Mar-07 13:03:37): SULUpdateLocation created!
    Trace(2018-Mar-07 13:03:37): TrySyncProduct, Calling BeginSync
    Trace(2018-Mar-07 13:03:37): SULUpdateLocation: BeginSync
    Trace(2018-Mar-07 13:03:37): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
    Trace(2018-Mar-07 13:03:37): SDDS2Update(SyncProduct.Start): Sophos Endpoint Security and Control, sophos
    Trace(2018-Mar-07 13:03:37): Calling SULDownloader Setup...
    Trace(2018-Mar-07 13:03:37): warehousePath: "C:\ProgramData\Sophos\AutoUpdate\data\warehouse"
    Trace(2018-Mar-07 13:03:37): decodePath: "C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode"
    Trace(2018-Mar-07 13:03:37): certPath: "C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir"
    Trace(2018-Mar-07 13:03:37): server = sophos
    Trace(2018-Mar-07 13:03:37): Adding Sophos Update Location: dci.sophosupd.com/update
    Trace(2018-Mar-07 13:03:37): Adding Sophos Update Location: dci.sophosupd.net/update
    Trace(2018-Mar-07 13:03:37): No manually configured proxy.
    Trace(2018-Mar-07 13:03:37): SULDownloader setup successful.
    Trace(2018-Mar-07 13:03:37): SubscriptionProvider: StandaloneWindows/RECOMMENDED/10
    Trace(2018-Mar-07 13:03:38): No resubscription attribute found.
    Trace(2018-Mar-07 13:03:38): SubscriptionProvider: StandaloneWindows/RECOMMENDED/10
    Trace(2018-Mar-07 13:03:38): SULUpdateLocation: SubscribePEXProducts
    Trace(2018-Mar-07 13:03:38): Enumerating available PEX products...
    Trace(2018-Mar-07 13:03:38): SULUpdateLocation: CheckIfHMPAIsAvailable
    Trace(2018-Mar-07 13:03:38): Adding product filter 'savxp'.
    Trace(2018-Mar-07 13:03:38): Adding product filter 'sau'.
    Trace(2018-Mar-07 13:03:38): Adding product filter 'pmsr'.
    Trace(2018-Mar-07 13:03:38): Adding product filter 'ssp'.
    Trace(2018-Mar-07 13:03:38): Adding product filter 'ntp64'.
    Trace(2018-Mar-07 13:03:38): Adding product filter 'sed64'.
    Trace(2018-Mar-07 13:03:38): Calling SULDownloader addFilter...
    Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\savxp
    Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\sau
    Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\pmsr
    Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\ssp
    Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64
    Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\sed64
    Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\savxp
    Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\sau
    Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\pmsr
    Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\ssp
    Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64
    Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\sed64
    Trace(2018-Mar-07 13:03:38): Calling SULDownloader synchronise...
    Trace(2018-Mar-07 13:03:40): [I96736] sdds.eps_WIN2018-2.2: adding primary package StandaloneWindows RECOMMENDED baseVersion=10
    Trace(2018-Mar-07 13:03:40): [I96736] sdds.eps_WIN2018-2.2: adding primary package B5E7E2A7-3B64-437D-801F-21CC9D67CC6D RECOMMENDED baseVersion=1
    Trace(2018-Mar-07 13:03:40): [I95020] sdds.eps_WIN2018-2.2: looking for packages included from product StandaloneWindows RECOMMENDED path=
    Trace(2018-Mar-07 13:03:40): [I45378] sdds.eps_WIN2018-2.2: found included product 4DB41E90-DC56-41DC-B91E-9B8E537489A8 3.0.4.125 path=scf baseVersion= [included from product StandaloneWindows RECOMMENDED path=]
    Trace(2018-Mar-07 13:03:40): [I45378] sdds.eps_WIN2018-2.2: found included product F8FFD42E-47AC-4CFF-9E27-EC84ED62128E 1.3.1.2 path=ssp baseVersion= [included from product StandaloneWindows RECOMMENDED path=]
    Trace(2018-Mar-07 13:03:40): [I45378] sdds.eps_WIN2018-2.2: found included product E17FE03B-0501-4aaa-BC69-0129D965F311 10.7.6.128.3702.8502 path=savxp baseVersion= [included from product StandaloneWindows RECOMMENDED path=]
    Trace(2018-Mar-07 13:03:40): [I45378] sdds.eps_WIN2018-2.2: found included product 9BF40A4E-23AE-48be-9974-5A1F261DBEE8 5.10.139.139 path=sau baseVersion= [included from product StandaloneWindows RECOMMENDED path=]
    Trace(2018-Mar-07 13:03:40): [I22529] sdds.eps_WIN2018-2.2: looking for supplements included from product StandaloneWindows RECOMMENDED path=
    Trace(2018-Mar-07 13:03:40): [I49502] sdds.SAVCNTRL.xml: found supplement SAVCONTROLLINE STANDALONE path=savxp baseVersion= [included from product StandaloneWindows RECOMMENDED path=]
    Trace(2018-Mar-07 13:03:40): [I95020] sdds.eps_WIN2018-2.2: looking for packages included from product B5E7E2A7-3B64-437D-801F-21CC9D67CC6D RECOMMENDED path=
    Trace(2018-Mar-07 13:03:40): [I22529] sdds.eps_WIN2018-2.2: looking for supplements included from product B5E7E2A7-3B64-437D-801F-21CC9D67CC6D RECOMMENDED path=
    Trace(2018-Mar-07 13:03:40): [I49502] sdds.pmsr_cci.xml: found supplement PMSR_CCI LATEST path= baseVersion= [included from product B5E7E2A7-3B64-437D-801F-21CC9D67CC6D RECOMMENDED path=]
    Trace(2018-Mar-07 13:03:40): [I95020] sdds.eps_WIN2018-2.2: looking for packages included from product 4DB41E90-DC56-41DC-B91E-9B8E537489A8 3.0.4.125 path=scf
    Trace(2018-Mar-07 13:03:40): [I22529] sdds.eps_WIN2018-2.2: looking for supplements included from product 4DB41E90-DC56-41DC-B91E-9B8E537489A8 3.0.4.125 path=scf
    Trace(2018-Mar-07 13:03:40): [I95020] sdds.eps_WIN2018-2.2: looking for packages included from product F8FFD42E-47AC-4CFF-9E27-EC84ED62128E 1.3.1.2 path=ssp
    Trace(2018-Mar-07 13:03:40): [I22529] sdds.eps_WIN2018-2.2: looking for supplements included from product F8FFD42E-47AC-4CFF-9E27-EC84ED62128E 1.3.1.2 path=ssp
    Trace(2018-Mar-07 13:03:40): [I95020] sdds.eps_WIN2018-2.2: looking for packages included from product E17FE03B-0501-4aaa-BC69-0129D965F311 10.7.6.128.3702.8502 path=savxp
    Trace(2018-Mar-07 13:03:40): [I22529] sdds.eps_WIN2018-2.2: looking for supplements included from product E17FE03B-0501-4aaa-BC69-0129D965F311 10.7.6.128.3702.8502 path=savxp
    Trace(2018-Mar-07 13:03:40): [I49502] sdds.APPFEED_d1.xml: found supplement USERAPPFEED LATEST path=savxp baseVersion= [included from product E17FE03B-0501-4aaa-BC69-0129D965F311 10.7.6.128.3702.8502 path=savxp]
    Trace(2018-Mar-07 13:03:40): [I49502] sdds.sdu.xml: found supplement SDU RECOMMENDED path=savxp/diagnose baseVersion= [included from product E17FE03B-0501-4aaa-BC69-0129D965F311 10.7.6.128.3702.8502 path=savxp]
    Trace(2018-Mar-07 13:03:40): [I49502] sdds.sxl_supp.xml: found supplement SXLSUP LATEST path=savxp baseVersion=2 [included from product E17FE03B-0501-4aaa-BC69-0129D965F311 10.7.6.128.3702.8502 path=savxp]
    Trace(2018-Mar-07 13:03:40): [I49502] sdds.VDB_supp.xml: found supplement VDL LATEST path=savxp baseVersion= [included from product E17FE03B-0501-4aaa-BC69-0129D965F311 10.7.6.128.3702.8502 path=savxp]
    Trace(2018-Mar-07 13:03:40): [I49502] sdds.hips.xml: found supplement HIPS LATEST path=savxp baseVersion= [included from product E17FE03B-0501-4aaa-BC69-0129D965F311 10.7.6.128.3702.8502 path=savxp]
    Trace(2018-Mar-07 13:03:40): [I95020] sdds.eps_WIN2018-2.2: looking for packages included from product 9BF40A4E-23AE-48be-9974-5A1F261DBEE8 5.10.139.139 path=sau
    Trace(2018-Mar-07 13:03:40): [I22529] sdds.eps_WIN2018-2.2: looking for supplements included from product 9BF40A4E-23AE-48be-9974-5A1F261DBEE8 5.10.139.139 path=sau
    Trace(2018-Mar-07 13:03:40): [I49502] sdds.TELEMSUPP.xml: found supplement TELEMSUP RECOMMENDED path=sau baseVersion= [included from product 9BF40A4E-23AE-48be-9974-5A1F261DBEE8 5.10.139.139 path=sau]
    Trace(2018-Mar-07 13:03:40): [I95020] sdds.SAVCNTRL.xml: looking for packages included from product SAVCONTROLLINE STANDALONE path=savxp
    Trace(2018-Mar-07 13:03:40): [I22529] sdds.SAVCNTRL.xml: looking for supplements included from product SAVCONTROLLINE STANDALONE path=savxp
    Trace(2018-Mar-07 13:03:40): [I95020] sdds.pmsr_cci.xml: looking for packages included from product PMSR_CCI LATEST path=
    Trace(2018-Mar-07 13:03:40): [I22529] sdds.pmsr_cci.xml: looking for supplements included from product PMSR_CCI LATEST path=
    Trace(2018-Mar-07 13:03:40): [I95020] sdds.APPFEED_d1.xml: looking for packages included from product USERAPPFEED LATEST path=savxp
    Trace(2018-Mar-07 13:03:40): [I22529] sdds.APPFEED_d1.xml: looking for supplements included from product USERAPPFEED LATEST path=savxp
    Trace(2018-Mar-07 13:03:40): [I95020] sdds.sdu.xml: looking for packages included from product SDU RECOMMENDED path=savxp/diagnose
    Trace(2018-Mar-07 13:03:40): [I22529] sdds.sdu.xml: looking for supplements included from product SDU RECOMMENDED path=savxp/diagnose
    Trace(2018-Mar-07 13:03:40): [I95020] sdds.sxl_supp.xml: looking for packages included from product SXLSUP LATEST path=savxp
    Trace(2018-Mar-07 13:03:40): [I22529] sdds.sxl_supp.xml: looking for supplements included from product SXLSUP LATEST path=savxp
    Trace(2018-Mar-07 13:03:40): [I95020] sdds.VDB_supp.xml: looking for packages included from product VDL LATEST path=savxp
    Trace(2018-Mar-07 13:03:40): [I22529] sdds.VDB_supp.xml: looking for supplements included from product VDL LATEST path=savxp
    Trace(2018-Mar-07 13:03:40): [I49502] sdds.data0910.xml: found supplement IDE549 LATEST path=savxp baseVersion= [included from product VDL LATEST path=savxp]
    Trace(2018-Mar-07 13:03:40): [I95020] sdds.hips.xml: looking for packages included from product HIPS LATEST path=savxp
    Trace(2018-Mar-07 13:03:40): [I22529] sdds.hips.xml: looking for supplements included from product HIPS LATEST path=savxp
    Trace(2018-Mar-07 13:03:40): [I95020] sdds.TELEMSUPP.xml: looking for packages included from product TELEMSUP RECOMMENDED path=sau
    Trace(2018-Mar-07 13:03:40): [I22529] sdds.TELEMSUPP.xml: looking for supplements included from product TELEMSUP RECOMMENDED path=sau
    Trace(2018-Mar-07 13:03:40): [I95020] sdds.data0910.xml: looking for packages included from product IDE549 LATEST path=savxp
    Trace(2018-Mar-07 13:03:40): [I22529] sdds.data0910.xml: looking for supplements included from product IDE549 LATEST path=savxp
    Trace(2018-Mar-07 13:03:40): [I49502] sdds.data0910.xml: found supplement IDE550 LATEST path=savxp baseVersion= [included from product IDE549 LATEST path=savxp]
    Trace(2018-Mar-07 13:03:40): [I95020] sdds.data0910.xml: looking for packages included from product IDE550 LATEST path=savxp
    Trace(2018-Mar-07 13:03:40): [I22529] sdds.data0910.xml: looking for supplements included from product IDE550 LATEST path=savxp
    Trace(2018-Mar-07 13:03:40): [I49502] sdds.data0910.xml: found supplement IDE551 LATEST path=savxp baseVersion= [included from product IDE550 LATEST path=savxp]
    Trace(2018-Mar-07 13:03:40): [I95020] sdds.data0910.xml: looking for packages included from product IDE551 LATEST path=savxp
    Trace(2018-Mar-07 13:03:40): [I22529] sdds.data0910.xml: looking for supplements included from product IDE551 LATEST path=savxp
    Trace(2018-Mar-07 13:03:40): [I19463] Syncing product StandaloneWindows RECOMMENDED path=
    Trace(2018-Mar-07 13:03:40): [I19463] Syncing product B5E7E2A7-3B64-437D-801F-21CC9D67CC6D RECOMMENDED path=
    Trace(2018-Mar-07 13:03:40): [I19463] Syncing product 4DB41E90-DC56-41DC-B91E-9B8E537489A8 3.0.4.125 path=scf
    Trace(2018-Mar-07 13:03:40): [I19463] Syncing product F8FFD42E-47AC-4CFF-9E27-EC84ED62128E 1.3.1.2 path=ssp
    Trace(2018-Mar-07 13:03:40): [I19463] Syncing product E17FE03B-0501-4aaa-BC69-0129D965F311 10.7.6.128.3702.8502 path=savxp
    Trace(2018-Mar-07 13:03:40): [I19463] Syncing product 9BF40A4E-23AE-48be-9974-5A1F261DBEE8 5.10.139.139 path=sau
    Trace(2018-Mar-07 13:03:40): [I19463] Syncing product SAVCONTROLLINE STANDALONE path=savxp
    Trace(2018-Mar-07 13:03:40): [I19463] Syncing product PMSR_CCI LATEST path=
    Trace(2018-Mar-07 13:03:40): [I19463] Syncing product USERAPPFEED LATEST path=savxp
    Trace(2018-Mar-07 13:03:40): [I19463] Syncing product SDU RECOMMENDED path=savxp/diagnose
    Trace(2018-Mar-07 13:03:40): [I19463] Syncing product SXLSUP LATEST path=savxp
    Trace(2018-Mar-07 13:03:40): [I19463] Syncing product VDL LATEST path=savxp
    Trace(2018-Mar-07 13:03:40): [I19463] Syncing product HIPS LATEST path=savxp
    Trace(2018-Mar-07 13:03:40): [I19463] Syncing product TELEMSUP RECOMMENDED path=sau
    Trace(2018-Mar-07 13:03:40): [I19463] Syncing product IDE549 LATEST path=savxp
    Trace(2018-Mar-07 13:03:40): [I19463] Syncing product IDE550 LATEST path=savxp
    Trace(2018-Mar-07 13:03:40): [I19463] Syncing product IDE551 LATEST path=savxp
    Trace(2018-Mar-07 13:03:41): SULDownloader synchronise successful.
    Trace(2018-Mar-07 13:03:41): Synchronisation state: 1
    Trace(2018-Mar-07 13:03:41): SULUpdateLocation: CopyRelayConfToDecode: Checking if custom mrinit.conf file is available from local RMS CID cache
    Trace(2018-Mar-07 13:03:41): TrySyncProduct<class SDDS2::SULUpdateLocation>, Calling SyncProduct with {E17FE03B-0501-4aaa-BC69-0129D965F311}
    Trace(2018-Mar-07 13:03:41): SULUpdateLocation: SyncProduct
    Trace(2018-Mar-07 13:03:41): Calling SULDownloader GetDistributedFileList...
    Trace(2018-Mar-07 13:03:42): SULUpdateLocation: CalculateFileSetChecksum
    Trace(2018-Mar-07 13:03:42): TrySyncProduct<class SDDS2::SULUpdateLocation>, SyncProduct returned - 1
    Trace(2018-Mar-07 13:03:42): TrySyncProduct<class SDDS2::SULUpdateLocation>, Ended - 1
    Trace(2018-Mar-07 13:03:42): UpdateLocationFacade::SyncProduct: Last Update Mechanism = SDDS2
    Trace(2018-Mar-07 13:03:42): SULUpdateLocation: SyncProduct
    Trace(2018-Mar-07 13:03:42): Calling SULDownloader GetDistributedFileList...
    Trace(2018-Mar-07 13:03:42): SULUpdateLocation: CalculateFileSetChecksum
    Trace(2018-Mar-07 13:03:42): SULUpdateLocation: Prepare
    Trace(2018-Mar-07 13:03:42): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
    Trace(2018-Mar-07 13:03:42): Path = "C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode\sau"
    Trace(2018-Mar-07 13:03:42): SULUpdateLocation::Prepare... manifest verification...
    Trace(2018-Mar-07 13:03:42): CheckManifest: Processing manifest: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode\sau\manifest.dat
    Trace(2018-Mar-07 13:03:42): CheckManifest: Processing manifest: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode\sau\telemsup\telemetry.manifest.dat
    Trace(2018-Mar-07 13:03:42): CheckManifest completed successfully
    Trace(2018-Mar-07 13:03:42): UpdateLocationFacade::SyncProduct: Last Update Mechanism = SDDS2
    Trace(2018-Mar-07 13:03:42): SULUpdateLocation: SyncProduct
    Trace(2018-Mar-07 13:03:42): Calling SULDownloader GetDistributedFileList...
    Trace(2018-Mar-07 13:03:43): SULUpdateLocation: CalculateFileSetChecksum
    Trace(2018-Mar-07 13:03:43): SULUpdateLocation: GetFileFromInstallSet (overload 2)
    Trace(2018-Mar-07 13:03:43): SULUpdateLocation: GetFileFromInstallSet (overload 1)
    Trace(2018-Mar-07 13:03:43): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
    Trace(2018-Mar-07 13:03:43): Calling Channel Synchronise...
    Trace(2018-Mar-07 13:03:43): ChannelUpdate synchronise started
    Trace(2018-Mar-07 13:03:43): Uniquifying ppdFile Name, URL: pmw-dynamic.sophos.com/.../PureMessage-AntiSpam-Data.ppd
    Trace(2018-Mar-07 13:03:43): ChannelUpdate: Downloaded pmw-dynamic.sophos.com/.../PureMessage-AntiSpam-Data.ppd, 696 bytes.
    Trace(2018-Mar-07 13:03:43): Uniquifying manifest File Name, URL: pmw-dynamic.sophos.com/.../manifest.dat
    Trace(2018-Mar-07 13:03:43): ChannelUpdate: Downloaded pmw-dynamic.sophos.com/.../manifest.dat, 7889 bytes.
    Trace(2018-Mar-07 13:03:43): New Channels Version == Old Channels Version, ChannelUpdate synch succeeded
    Trace(2018-Mar-07 13:03:43): Channel Synchronise returned...
    Trace(2018-Mar-07 13:03:43): UpdateLocationFacade::SyncProduct: Last Update Mechanism = SDDS2
    Trace(2018-Mar-07 13:03:43): SULUpdateLocation: SyncProduct
    Trace(2018-Mar-07 13:03:43): Calling SULDownloader GetDistributedFileList...
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: CalculateFileSetChecksum
    Trace(2018-Mar-07 13:03:44): UpdateLocationFacade::SyncProduct: Last Update Mechanism = SDDS2
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: SyncProduct
    Trace(2018-Mar-07 13:03:44): Calling SULDownloader GetDistributedFileList...
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: CalculateFileSetChecksum
    Trace(2018-Mar-07 13:03:44): UpdateLocationFacade::SyncProduct: Last Update Mechanism = SDDS2
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: SyncProduct
    Trace(2018-Mar-07 13:03:44): Calling SULDownloader GetDistributedFileList...
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: CalculateFileSetChecksum
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: EndSync
    Trace(2018-Mar-07 13:03:44): ALUpdate(DownloadEnded):
    Trace(2018-Mar-07 13:03:44): UpdateCoordinator::UpdateNow: About to Action list of products
    Trace(2018-Mar-07 13:03:44): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: GetCacheDir
    Trace(2018-Mar-07 13:03:44): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
    Trace(2018-Mar-07 13:03:44): Null update
    Trace(2018-Mar-07 13:03:44): ALUpdate(Action.Skipped): SAVXP
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: OnNullUpdate
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: GetCacheDir
    Trace(2018-Mar-07 13:03:44): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
    Trace(2018-Mar-07 13:03:44): Updating plugin cache for SAVXP
    Trace(2018-Mar-07 13:03:44): Successfully updated plugin cache for SAVXP
    Trace(2018-Mar-07 13:03:44): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: GetCacheDir
    Trace(2018-Mar-07 13:03:44): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
    Trace(2018-Mar-07 13:03:44): Null update
    Trace(2018-Mar-07 13:03:44): ALUpdate(Action.Skipped): Sophos AutoUpdate
    Trace(2018-Mar-07 13:03:44): Updating subscription information from product ID data.
    Trace(2018-Mar-07 13:03:44): Rigid name: StandaloneWindows
    Trace(2018-Mar-07 13:03:44): Version: 10.7.6.2.3702.1
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: OnNullUpdate
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: GetCacheDir
    Trace(2018-Mar-07 13:03:44): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
    Trace(2018-Mar-07 13:03:44): Updating plugin cache for Sophos AutoUpdate
    Trace(2018-Mar-07 13:03:44): Successfully updated plugin cache for Sophos AutoUpdate
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: GetCacheDir
    Trace(2018-Mar-07 13:03:44): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
    Trace(2018-Mar-07 13:03:44): Null update
    Trace(2018-Mar-07 13:03:44): ALUpdate(Action.Skipped): Sophos PureMessage
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: OnNullUpdate
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: GetCacheDir
    Trace(2018-Mar-07 13:03:44): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
    Trace(2018-Mar-07 13:03:44): No manifest.dat found for Sophos PureMessage: not caching files
    Trace(2018-Mar-07 13:03:44): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: GetCacheDir
    Trace(2018-Mar-07 13:03:44): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
    Trace(2018-Mar-07 13:03:44): Null update
    Trace(2018-Mar-07 13:03:44): ALUpdate(Action.Skipped): Sophos System Protection
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: OnNullUpdate
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: GetCacheDir
    Trace(2018-Mar-07 13:03:44): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
    Trace(2018-Mar-07 13:03:44): Updating plugin cache for Sophos System Protection
    Trace(2018-Mar-07 13:03:44): Successfully updated plugin cache for Sophos System Protection
    Trace(2018-Mar-07 13:03:44): SimpleProduct::DoAction isLater==true skipAction==false isUninstall)==truem_lastUpdateSucceeded==false numfilestocahce 1 Actiontype SetupNot preinstalled product
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: GetCacheDir
    Trace(2018-Mar-07 13:03:44): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
    Trace(2018-Mar-07 13:03:44): Null update
    Trace(2018-Mar-07 13:03:44): ALUpdate(Action.Skipped): Sophos Network Threat Protection
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: OnNullUpdate
    Trace(2018-Mar-07 13:03:44): SimpleProduct::DoAction isLater==true skipAction==false isUninstall)==truem_lastUpdateSucceeded==false numfilestocahce 1 Actiontype SetupNot preinstalled product
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: GetCacheDir
    Trace(2018-Mar-07 13:03:44): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
    Trace(2018-Mar-07 13:03:44): Null update
    Trace(2018-Mar-07 13:03:44): ALUpdate(Action.Skipped): Sophos Endpoint Defense
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: OnNullUpdate
    Trace(2018-Mar-07 13:03:44): SULUpdateLocation: Serialise
    Trace(2018-Mar-07 13:03:45): RMSMessageHandler: ALUpdateEnd
    Trace(2018-Mar-07 13:03:45): Sending message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate" />
    Trace(2018-Mar-07 13:03:45): IPCSender::Write: Writing message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate" />
    Trace(2018-Mar-07 13:03:45): Telemetry::LoadTelemetrySupplement 344: Telemetry Interval set to 86400 seconds
    Trace(2018-Mar-07 13:03:45): IPCSender::ProcessSend: Listener not ready starting to wait
    Trace(2018-Mar-07 13:03:45): Telemetry::LoadDocument 218: C:\ProgramData\Sophos\AutoUpdate\\Config\TelemetryConfig.json loaded
    Trace(2018-Mar-07 13:03:45): Telemetry::LoadTelemetrySupplement 385: Telemetry Interval updated to 86400 seconds
    Trace(2018-Mar-07 13:03:45): Telemetry::CalculateLastTelemtryTime 134: Telemetry last ran at 2018-03-06 20:54:24, Offset 699, Offset Time 2018-03-06 21:06:03
    Trace(2018-Mar-07 13:03:45): Telemetry::HasTelemetrySchedulePeriodElapsed 157: Telemetry schedule has not elapsed.
    Trace(2018-Mar-07 13:03:46): IPCSender::ProcessSend exiting
    Trace(2018-Mar-07 13:03:46): ALUpdate finished

     

     

    on the server that is currently unmanaged by SEC and where the spam-rules-updates work fine, the primary update path is set to "sophos"; on the second server managed by SEC it's using the policy centrally deployed through SEC; this policy contains a CID as the primary source, and "sophos" as the secondary.
    i also had a look at the file iupd.cfg as i saw some hints saying it might be involved here, and found that it looks different on the two machines:


    contents of iupd.cfg from the working machine:

     

    ;****************************************************************************
    ;
    ; iupd.cfg
    ;
    ; Please do not edit this text file.
    ;
    ;
    ;****************************************************************************

    ;RMS 2000/XP
    [iProductData.{390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92}]
    AllowLocalConfig = 1
    Action = 0x400000

    ;RMS 98/Me
    [iProductData.{D752FAB9-5883-4b36-8740-61565B6BAD29}]
    AllowLocalConfig = 1
    Action = 0x200100

    ;SAV 2k =
    [iProductData.{E17FE03B-0501-4aaa-BC69-0129D965F311}]
    AllowLocalConfig = 1
    Action = 0x400007

    ;SAV NT4
    [iProductData.{7998C326-2CA5-4830-B7D2-B792D2460975}]
    AllowLocalConfig = 1
    Action = 0x400000

    ;SAV 98/Me
    [iProductData.{3B758ED7-87C1-4e89-BDE1-F49DFF1249F6}]
    AllowLocalConfig = 1
    Action = 0x200007

    ;PureMessage Spam Rules
    [iProductData.{B5E7E2A7-3B64-437D-801F-21CC9D67CC6D}]
    AllowLocalConfig = 1
    Action = 0x410007
    [global.IntelligentUpdating]
    Enabled = 0
    SubscriptionID =
    PortNumber = 51235


    and the one from the none working machine:

    ;****************************************************************************
    ;
    ; iupd.cfg
    ;
    ; Please do not edit this text file.
    ;
    ;
    ;****************************************************************************

    ;RMS 2000/XP
    [iProductData.{390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92}]
    AllowLocalConfig = 1
    Action = 0x400007

    ;RMS 98/Me
    [iProductData.{D752FAB9-5883-4b36-8740-61565B6BAD29}]
    AllowLocalConfig = 1
    Action = 0x200107

    ;SAV 2k =
    [iProductData.{E17FE03B-0501-4aaa-BC69-0129D965F311}]
    AllowLocalConfig = 1
    Action = 0x400007

    ;SAV NT4
    [iProductData.{7998C326-2CA5-4830-B7D2-B792D2460975}]
    AllowLocalConfig = 1
    Action = 0x400000

    ;SAV 98/Me
    [iProductData.{3B758ED7-87C1-4e89-BDE1-F49DFF1249F6}]
    AllowLocalConfig = 1
    Action = 0x200007

    ;PureMessage Spam Rules
    [iProductData.{B5E7E2A7-3B64-437D-801F-21CC9D67CC6D}]
    AllowLocalConfig = 1
    Action = 0x410007
    [global.IntelligentUpdating]
    Enabled = 1
    SubscriptionID = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX  (obfuscated)
    PortNumber = 51235

     

    If i can't find a solution for that issue, i'll quite probably have to go through uninstalling SESC from the machine again, followed by a reinstallation using the standalone-installer. 
    what makes me worry, is the fact that we're also using the Active Directory synchronisation feature within SEC, and we rely on the related feature to automatically install Sophos software on all machines. I wonder if it will suddenly start to (re)install SESC on the "standalone" machine just because of its presence in Active Directory, which will undoubtedly break the spam-rules updating again...

  • in reply to grunz

    Hello Patrick Tippner,

    as for AD Sync with automatic protection: Unless you delete a computer from the console automatic protection will not be retried once it has been done - whether successfully or not.

    Strange as it is but on the managed server the download from Sophos fails miserably, i.e. it doesn't get as far as trying the SPAM rules. Comparing the relevant parts of the logs:

    Trace(2018-Mar-07 13:00:26): Adding Sophos Update Location: dci.sophosupd.com/update
    Trace(2018-Mar-07 13:00:26): Adding Sophos Update Location: dci.sophosupd.net/update
    Trace(2018-Mar-07 13:00:26): No manually configured proxy.
    Trace(2018-Mar-07 13:00:26): SULDownloader setup successful.
    Trace(2018-Mar-07 13:00:26): SubscriptionProvider: 7ba49542-049c-4154-aad9-cf19a9ec7be5/10.7.6.2.3702.1/
    Trace(2018-Mar-07 13:00:28): Enumerating available product versions...
    Trace(2018-Mar-07 13:00:28): Failed to authenticate


    Trace(2018-Mar-07 13:03:37): Adding Sophos Update Location: dci.sophosupd.com/update
    Trace(2018-Mar-07 13:03:37): Adding Sophos Update Location: dci.sophosupd.net/update
    Trace(2018-Mar-07 13:03:37): No manually configured proxy.
    Trace(2018-Mar-07 13:03:37): SULDownloader setup successful.
    Trace(2018-Mar-07 13:03:37): SubscriptionProvider: StandaloneWindows/RECOMMENDED/10
    Trace(2018-Mar-07 13:03:38): No resubscription attribute found.
    Trace(2018-Mar-07 13:03:38): SubscriptionProvider: StandaloneWindows/RECOMMENDED/10
    Trace(2018-Mar-07 13:03:38): SULUpdateLocation: SubscribePEXProducts

    Now I assume you have used the same Sophos credentials for the SA install and for the Secondary location in your updating policy - but then it should work.

    Christian

  • in reply to QC

    Hi Christian,

    Thanks for the clarification regarding the automatic protection -  at least that is a glimmer of hope ;)

    I've double and triple checked the credentials provided for the download - they are definitely correct! What else would you suggest to isolate possible causes for the issue seen here?

    - Patrick

  • in reply to grunz

    Hello Patrick,

    double and triple checked
    the only possible error I can think of is that for the SA you've entered the credentials "by hand" and for SEC you've used copy-paste.

    To check if there's not some obscure issue please create a new policy, set the Primary to some syntactically correct but invalid HTTP URL, set the Secondary to Sophos using the assumed-to-be-correct credentials, select the RECOMMENDED (guess this is the one you're using with PM) subscription. Fastest way is to use your PC, create a test-group as subgroup of the one your PC is in, move the endpoint there, assign the test updating policy. Once the endpoint complies request an update a check the results.
    Just did it with my PC (to make sure there isn't any glitch with the latest SEC/SESC).

    Christian 

  • in reply to QC

    Hi Christian,

    thank you very much! Your hint led me into the right direction. Assigning a newly created policy containing that invalid HTTP url to the servers, and triggering the update from SEC, finally made the servers download the updates for Puremessage properly! After that, I tried the same with the standard policy, and it failed again although the credentials were definitely the correct! Then I used the "reset policy" function from the context menu and re-entered all the data once again. That seems to have fixed the standard policy in some way, because now the servers can also run the update successfully when they have the standard policy applied.

    Cheers,

    Patrick

Unfiltered HTML