Learn about the Benefits of Multi-Factor Authentication (MFA) . Turn your MFA on now!
Information: Three minute survey on Exploring more ways to contact Sophos Technical Supportt. If you can spare the time, we would love your feedback!
We'd love to hear about it! Click here to go to the product suggestion community
I have at least 20% of the computers on my network now reporting "Some Sophos services are not running/missing"
This was not the case 2 weeks ago, and invariably it is "Sophos System Protection Service is not started".
This involves a visit to that computer, pushing the user out of the way, running "Services" as administrator, which then involves typing the admin password under a user's nose.
I am sure this is not how Sophos Central is meant to work. It is highly inconvenient, and at worst liable for a security breach.
How do I start these services remotely ?
I could log in through Remote Desktop, but this would Log Out the User
In reply to Howiedog:
Their next product line should be called: Sophos - Titanic.
In reply to Trojan Horse:
We are seeing this across our estate also, with a variety of services not running or missing. Does anyone have any fix beyond using Computer Management remotely to restart the services? I find it hard to believe that Sophos has not addressed this fully and not provided some kind of patch / hot fix. Thanks in advance!
For the bashing Sophos has received, mine included, I need to give kudos too. In the past few months, I have seen a lot of these issues fixed, as they have made improvements and changes to the product.
This morning, I received an email alert that one of my client's servers has services missing or stopped. I logged into Central and verified that there were 2 services not running. By the time I had started a ticket in my PSA, I saw that the status of all services went green. Then the alert went away and the device was in good status again. I never had a chance to finish my ticket, much less connect to the server to work on the issue.
I suspect that the Sophos agent updated and as it restarted the services the alert was flagged. Sophos needs to increase the time-out settings by maybe another minute, but overall I was impressed that the software did was it was supposed to do. It updated, restarted the services, and went on its way.
In reply to JamesGolden:
Its definitely been better... however, there Encryption service not running problem is going on 2 months now. Should have been fixed by now.
In reply to LRB:
can you elaborate? I've only ever had a problem with 2 machines--one was a bitlocker problem and the other because I forgot to enable the encryption policy.
We are seeing a number of services go missing (a couple of which may or may not re-appear a few days later), yet the client appears to be up to date. The main offenders appear to be:
Missing: Sophos Device Encryption Service
Missing: Sophos Device Control Service
Missing: Sophos Web Control Service
Missing: Sophos Web Intelligence Service
Missing: Sophos Anti-Virus Status Reporter
This specific issue: https://community.sophos.com/kb/en-us/132320
They note its being fixed - the problem I have is the general lack of communication and how long it takes to fix.
In reply to Mike Jones1:
This was very helpful. Ran the C:\ProgramData\Sophos\AutoUpdate\Cache\decoded\sau\Sophos AutoUpdate
The problem was resolved!!!
Royce Robinson | Texas A&M Univ. Wildlife Fisheries
In reply to Royce Robinson:
Was the issue occurring on multiple endpoints? Like 100s?
In reply to G33k:
It was only on ONE computer. Even after uninstall / reinstall, the problem remained until I used your suggestion. Working well now.
Ok! We have 1000s of endpoints on which we are facing the issue. I'll try and check if that works at my end too!!
I have just had an issue, my own system, where I got an email stating that a HIGH ALERT, that services were missing or not running, but there is nothing in Central about this error... wow.
email sent @ 11:52, checked Central @ 12:45, still no Alerts (on anything).
In reply to Argo:
I've been reporting this for a few months. What Sophos support told me to do was to set the services to START DELAYED
which service(s)? all or just some?