Auto Update Endpoint - am i doing it wrong?

You may find that you cannot yet download and use the latest version. This is because Sophos releases the software over a number of days, but publishes the release notes on the first day.

If you are using Sophos Central, enable Automatic Updates by going to Global Settings > Controlled Updates, and click on "Resume Automatic Updating" (if you only see "Control Updates Manually" this means you're on Auto). 

Once your Central account has been assigned the update, assuming you're doing automatic updates, the endpoints should pick up the update when it communicates to Sophos Central.

The endpoints should also have all services running, especially the Sophos AutoUpdate service.

Sorry Dianney, thanks for your help,  but you repeated what I Said.

you said "enable Automatic Updates by going to Global Settings > Controlled Updates, and click on "Resume Automatic Updating"

but before i said

"So i decided to going Back to the automatic Update: i activated them in the settings -> controlled update.

I've created different update policies, associated to a group i want to deploy."

the first part was exacly the same, when i wrote "i activated them" i mean than i resumed the automatic updated.

Other than that, all the update service is running on every machine, i checked.

By the way.... "Once your Central account has been assigned the update"... ok when I know this? how can i check that the Central receive the avaiability of the update?

it is not the first time that when it comes out a new update and i receive an email that inform me, the update is not still localized for my country. how can i discover this?

Thank you in advance.

Hi Andrea Manini 

We assign newer versions of our endpoints group-wise and assign more and more groups overtime for this update. There is no way to check if your Central account has received that new update other than when the endpoints pick up that update automatically. If you have configured the updates to be configured manually (System Settings> Controlled Updates> Control Updates Manually), then you will receive an email alert once a newer version of the endpoint is available. You can either choose to resume automatically update those test computers or they will resume automatic update after 90 days (once that older version expires).

On a side note, if you want your Central account to be included in the first group for the newest software releases, please let me know.

Unknown said:

Hi Andrea Manini 

We assign newer versions of our endpoints group-wise and assign more and more groups overtime for this update. There is no way to check if your Central account has received that new update other than when the endpoints pick up that update automatically. If you have configured the updates to be configured manually (System Settings> Controlled Updates> Control Updates Manually), then you will receive an email alert once a newer version of the endpoint is available. You can either choose to resume automatically update those test computers or they will resume automatic update after 90 days (once that older version expires).

On a side note, if you want your Central account to be included in the first group for the newest software releases, please let me know.

 

Hi Yashraj,

thanks for your reply.

just a thing that I don't understand: as i said in open post, i already received the email about the new update (18 June, core agent 2.4.0)

till 1st of july I had configured the central with manual update, and when I went to the endpoint setting, it shown me the button that let me install it on the test machines, as usual.

this monday instead of clicking the deploy mentioned before, i clicked on "resume automatic update", and i created the update policy scheduled for some PCs.

i created it on monday morning and scheduling it for the afternoon, but update didn't start. so i scheduled it for the next day, on tuesday, but the update didn't start.

What i mean is: if it is configured to "manual update" and I see the update avaiable, doen't mean that it will be avaiable for my central even for automatic update configuration? in my opinion... i take it for granted that it is, i didn't undersand why it could be otherwise.

Hi Andrea Manini

Andrea Manini said:

 

 In the paste I used the manual update, but due to the behavior i need to try another solution:

-After clicking "Update test computer to the newest version", i can't add other machines to test if i missed some. with this i can't test more than the machine previously selected.

- I can't divide the deploy in more groups, letting me control the distribution in a better way (we have some critical machine that we need to check constantly).

 

You can add the machines to test group while you click on an Update test computer to the newest version. Machines added to the group post clicking will receive the updated version. 

In case of a manual update, if endpoints are still not updating at the scheduled day and time set in the updating policy, then I would request you to raise a support case as it would require in-depth investigation after analyzing the relevant logs. 

Shweta said:

You can add the machines to test group while you click on an Update test computer to the newest version. Machines added to the group post clicking will receive the updated version. 

In case of a manual update, if endpoints are still not updating at the scheduled day and time set in the updating policy, then I would request you to raise a support case as it would require in-depth investigation after analyzing the relevant logs.