This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[MEDIUM] Alert for Sophos Central: A computer is out of date

We have a server that we use for caching and every single day I receive an email which reads this.

Sophos Central Event Details for Company Name

What happened: The Sophos Central software on this computer has missed two updates.

Where it happened: caching01

User associated with device: n/a

How severe it is: Medium

What Sophos has done so far: n/a

What you need to do: Update the computer as follows. In the Sophos Central Admin console, go to the Computers page. Click on the computer name to open its details page and then click Update Now

 

I've reached out to the support and they cannot seem to figure out what is causing this issue. Is anyone else having this issue? 



This thread was automatically locked due to age.
  • Hi  

    Please share the C:\ProgramData\Sophos\AutoUpdate\logs\SophosUpdate.log from the client , which could provide better insight. 

    Check for the keywords "ERROR" or "FAIL" and paste that section of logs entries here.

    Regards,

    Gowtham Mani
    Community Support Engineer | Sophos Technical Support

    Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts
    If a post solves your question use the 'This helped me' link.

  • Hi  

    Please share the C:\ProgramData\Sophos\AutoUpdate\logs\SophosUpdate.log from the client , which could provide better insight. 

    Check for the keywords "ERROR" or "FAIL" and paste that section of logs entries here.

     

     

    HI Gowtham,

    The only Error I have in there is the one below. I do not have any fails. Under the server tab, Status is Error. Please see the attachments below. I removed the username and our server names from the logs below.

    2017-11-13T14:05:24.792Z [ 1016] WARN WindowsProxyDiscoveryWrapper::GetProxyForUrl Failed to get the automatic proxy configuration. The error code was 12180.
    2017-11-13T14:05:24.792Z [ 3416] INFO SourceSelector::evaluate Trying update location: dci.sophosupd.com/update with proxy: <direct; no proxy>
    2017-11-13T14:05:26.438Z [ 3416] INFO SourceSelector::analyze Selected update location: dci.sophosupd.com/update with proxy: <direct; no proxy>
    2017-11-13T14:05:26.438Z [ 3416] INFO SDDSDownloader::SyncInternal Username:
    2017-11-13T14:05:26.438Z [ 3416] INFO SDDSDownloader::SyncInternal Filename: 
    2017-11-13T14:05:26.438Z [ 3416] INFO CacheEvaluator::Evaluate Analyzing whether to update from Sophos CDN or update cache
    2017-11-13T14:05:26.438Z [ 3416] INFO CacheEvaluator::EvaluateCache Checking access to update cache: 
    2017-11-13T14:05:26.501Z [ 3416] INFO CacheEvaluator::EvaluateCache Could not reach cache: 
    2017-11-13T14:05:26.516Z [ 3416] INFO CacheEvaluator::Evaluate Analysis complete - Using Sophos CDN
    2017-11-13T14:05:26.516Z [ 3416] INFO SDDSDownloader::SyncInternal Updating over HTTPS
    2017-11-13T14:05:26.516Z [ 3416] INFO SDDSDownloader::SyncInternal Adding Sophos Location: dci.sophosupd.com/update
    2017-11-13T14:05:26.516Z [ 3416] INFO SDDSDownloader::SyncInternal Initial download: using bulk metadata
    2017-11-13T14:05:26.516Z [ 3416] INFO SDDSDownloader::SyncInternal Manual install: ignoring bandwidth limit 256 Kbps
    2017-11-13T14:05:26.516Z [ 3416] INFO SDDSDownloader::SyncInternal Delta compression enabled
    2017-11-13T14:05:26.548Z [ 3416] INFO SUL-Log [I40394] Downloading customer file from sophos:1:1
    2017-11-13T14:05:30.227Z [ 3416] INFO SUL-Log [I40395] Downloaded customer file; fetching catalogues from sophos:1:1...
    2017-11-13T14:05:35.389Z [ 3416] INFO SUL-Log [I40395] Successfully fetched catalogues from sophos:1:1

     

     

  • I have had a ticket open regarding this issue for over 2 months.

  • Hi Brent,

    The computer your having issues with, are you using it as a caching server by any chance?

    thanks

  • I have 0 caching servers.  I removed them all because of all the issues sophos has with updating.  The servers I am having issues with were not the caching servers.

  • My issue is that I get the email every other day for the same machines and later that day it shows update succeeded.  I have other servers doing the same thing.