clustered Puremessage in Sophos Enterprise Console not updating spam-rules

Hello Patrick Tippner,

the frustrated thread is a little bit old, there have been new versions of AutoUpdate in the meantime. And do you encounter the same problem, i.e. an exception, or something different. If the latter - could you show the ALUpdate log?

Christian

The only visible error i can see is the tooltip saying "update failed" when pointing my mouse on the shield-icon in the systray. The log for the failing server looks like this:

Trace(2018-Mar-07 13:00:20): =========================
Trace(2018-Mar-07 13:00:20): ALUpdate is starting.
Trace(2018-Mar-07 13:00:20): AutoUpdate version: 5.10
Trace(2018-Mar-07 13:00:20): Build : 210356
Trace(2018-Mar-07 13:00:20): Command line : -ManualUpdate -NoGUI -RootPath "C:\Program Files (x86)\Sophos\AutoUpdate"
Trace(2018-Mar-07 13:00:20): =========================
Trace(2018-Mar-07 13:00:20): Process security set successfully
Trace(2018-Mar-07 13:00:20): Product iProductData.{390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92} has been added.
Trace(2018-Mar-07 13:00:20): Product iProductData.{390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92} is available from Sophos.
Trace(2018-Mar-07 13:00:20): Product iProductData.{390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92} is not the Spam Rules package.
Trace(2018-Mar-07 13:00:20): Product iProductData.{D752FAB9-5883-4b36-8740-61565B6BAD29} has not been added.
Trace(2018-Mar-07 13:00:20): Product iProductData.{E17FE03B-0501-4aaa-BC69-0129D965F311} has been added.
Trace(2018-Mar-07 13:00:20): Product iProductData.{E17FE03B-0501-4aaa-BC69-0129D965F311} is available from Sophos.
Trace(2018-Mar-07 13:00:20): Product iProductData.{E17FE03B-0501-4aaa-BC69-0129D965F311} is not the Spam Rules package.
Trace(2018-Mar-07 13:00:20): Product subscription is disabled: iProductData.{7998C326-2CA5-4830-B7D2-B792D2460975} action value is:0
Trace(2018-Mar-07 13:00:20): Product iProductData.{7998C326-2CA5-4830-B7D2-B792D2460975} has not been added.
Trace(2018-Mar-07 13:00:20): Product iProductData.{3B758ED7-87C1-4e89-BDE1-F49DFF1249F6} has not been added.
Trace(2018-Mar-07 13:00:20): Product iProductData.{B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} has been added.
Trace(2018-Mar-07 13:00:20): Product iProductData.{B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} is available from Sophos.
Trace(2018-Mar-07 13:00:20): Product iProductData.{B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} is the Spam Rules package.
Trace(2018-Mar-07 13:00:20): Computer is a not possible cluster
Trace(2018-Mar-07 13:00:20): PureMessageDetector::AreSpamRulesRequired - Could not open registry on Software\Sophos\MMEx\Config\Global
Trace(2018-Mar-07 13:00:20): ConfigurationImpl, considering PMSR 2.6: PureMessage not installed, PMSR package will not be updated without a subscription
Trace(2018-Mar-07 13:00:20): Considering subscribed products.
Trace(2018-Mar-07 13:00:20): Considering product {1129226C-32AB-4B72-85E1-A9CC8DFBC859}
Trace(2018-Mar-07 13:00:20): Product {1129226C-32AB-4B72-85E1-A9CC8DFBC859} is not already subscribed.
Trace(2018-Mar-07 13:00:20): Product {1129226C-32AB-4B72-85E1-A9CC8DFBC859} was added to the list.
Trace(2018-Mar-07 13:00:20): Considering product {9BF40A4E-23AE-48be-9974-5A1F261DBEE8}
Trace(2018-Mar-07 13:00:20): Product {9BF40A4E-23AE-48be-9974-5A1F261DBEE8} is not already subscribed.
Trace(2018-Mar-07 13:00:20): Product {9BF40A4E-23AE-48be-9974-5A1F261DBEE8} was added to the list.
Trace(2018-Mar-07 13:00:20): Considering product {B5E7E2A7-3B64-437D-801F-21CC9D67CC6D}
Trace(2018-Mar-07 13:00:20): Product {B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} is not already subscribed.
Trace(2018-Mar-07 13:00:20): Product {B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} is PureMessageSpamRules.
Trace(2018-Mar-07 13:00:20): Product {B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} was added to the list.
Trace(2018-Mar-07 13:00:20): Considering product {E17FE03B-0501-4aaa-BC69-0129D965F311}
Trace(2018-Mar-07 13:00:20): Considering product {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E}
Trace(2018-Mar-07 13:00:20): Product {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E} is not already subscribed.
Trace(2018-Mar-07 13:00:20): Product {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E} was added to the list.
Trace(2018-Mar-07 13:00:20): Product {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E} is removable.
Trace(2018-Mar-07 13:00:20): Product {8087796B-2289-4897-98A5-58FF23DAAFD0} was added to the list.
Trace(2018-Mar-07 13:00:20): Product {8087796B-2289-4897-98A5-58FF23DAAFD0} is optional.
Trace(2018-Mar-07 13:00:20): Product {8087796B-2289-4897-98A5-58FF23DAAFD0} is removable.
Trace(2018-Mar-07 13:00:20): Product {1129226C-32AB-4B72-85E1-A9CC8DFBC859} is removable.
Trace(2018-Mar-07 13:00:20): Could not read registry entry containing Sophos address - using hardcoded value.
Trace(2018-Mar-07 13:00:20): Customer ID has changed
Trace(2018-Mar-07 13:00:20): GenerateCustomerID: complete
Trace(2018-Mar-07 13:00:20): Computer is a not possible cluster
Trace(2018-Mar-07 13:00:20): PureMessageDetector::AreSpamRulesRequired - Could not open registry on Software\Sophos\MMEx\Config\Global
Trace(2018-Mar-07 13:00:20): IPCBase::IPCBase: Connected to shared memory A32951C539924a12B3C8F2FDA5A268E4
Trace(2018-Mar-07 13:00:20): IPCSender::ProcessSend started
Trace(2018-Mar-07 13:00:20): IPCSender::ProcessSend: No messages in queue, starting to wait
Trace(2018-Mar-07 13:00:20): RMSMessageHandler: ALUpdateStart
Trace(2018-Mar-07 13:00:20): IPCSender::Write: Writing message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSStartUpdate" />
Trace(2018-Mar-07 13:00:20): IPCSender::ProcessSend: Send message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSStartUpdate" />
Trace(2018-Mar-07 13:00:20): IPCSender::ProcessSend: No messages in queue, starting to wait
Trace(2018-Mar-07 13:00:20): ALUpdate(AutoUpdate.Started):
Trace(2018-Mar-07 13:00:20): UpdateCoordinator::UpdateNow: Entering
Trace(2018-Mar-07 13:00:20): PopulateCache: Entering
Trace(2018-Mar-07 13:00:20): UpdateCoordinator::UpdateNow: current platform is WIN_81_SVR_X64
Trace(2018-Mar-07 13:00:20): ProductFactory::Create: SimpleProduct: {390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92}
Trace(2018-Mar-07 13:00:20): ProductFactory::Create: SimpleProduct: {E17FE03B-0501-4aaa-BC69-0129D965F311}
Trace(2018-Mar-07 13:00:20): ProductFactory::Create: SimpleProduct: {1129226C-32AB-4B72-85E1-A9CC8DFBC859}
Trace(2018-Mar-07 13:00:20): ProductFactory::Create: SAU Product
Trace(2018-Mar-07 13:00:20): ProductFactory::Create: PMSR Product
Trace(2018-Mar-07 13:00:20): ProductFactory::Create: SimpleProduct: {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E}
Trace(2018-Mar-07 13:00:20): ProductFactory::Create: SimpleProduct: {8087796B-2289-4897-98A5-58FF23DAAFD0}
Trace(2018-Mar-07 13:00:20): IntelligentUpdateSourceLocatorImpl::AugmentUpdateSources() entered.
Trace(2018-Mar-07 13:00:20): Network location has not changed.
Trace(2018-Mar-07 13:00:20): RelativeCidUpdateSourceLocator::AugmentUpdateSources: Entering
Trace(2018-Mar-07 13:00:20): Processing CID update location: \\LS-DC1-VM-AV-01.learnship.net\SophosUpdate\CIDs\S000\SAVSCFXP:-1
Trace(2018-Mar-07 13:00:20): Processing CID update location: \\LS-DC1-VM-AV-01.learnship.net\SophosUpdate\CIDs\S000\SAVSCFXP\
Trace(2018-Mar-07 13:00:20): Skipping SDDS2 update location: Sophos
Trace(2018-Mar-07 13:00:20): RelativeCidUpdateSourceLocator::AugmentUpdateSources: Finished. Number of new locations added: 0
Trace(2018-Mar-07 13:00:20): UpdateCoordinator::UpdateNow: About to Sync list of products
Trace(2018-Mar-07 13:00:20): UpdateLocationFacade::SyncProduct: Last Update Mechanism = Unknown
Trace(2018-Mar-07 13:00:20): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Started:
Trace(2018-Mar-07 13:00:20): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, creating update location
Trace(2018-Mar-07 13:00:20): Calling package_source_init
Trace(2018-Mar-07 13:00:20): TrySyncProduct, Calling BeginSync
Trace(2018-Mar-07 13:00:20): Logging on network access user
Trace(2018-Mar-07 13:00:20): Attempting to make a connection to remote machine \\LS-DC1-VM-AV-01.learnship.net\SophosUpdate\CIDs\S000\SAVSCFXP
Trace(2018-Mar-07 13:00:20): Connection to remote machine \\LS-DC1-VM-AV-01.learnship.net\SophosUpdate\CIDs\S000\SAVSCFXP successful
Trace(2018-Mar-07 13:00:20): Custom certificate already present.
Trace(2018-Mar-07 13:00:20): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\escdp.dat
Trace(2018-Mar-07 13:00:20): Remote connection over UNC.
Trace(2018-Mar-07 13:00:20): Read file master.upd (Remote).
Trace(2018-Mar-07 13:00:20): Synchronised file root.upd (Local).
Trace(2018-Mar-07 13:00:20): Synchronised file escdp.dat (Local).
Trace(2018-Mar-07 13:00:20): No file expired_credential.dat.
Trace(2018-Mar-07 13:00:20): CalculateChecksum. Processing file C:\ProgramData\Sophos\AutoUpdate\cache\ProductID.dat
Trace(2018-Mar-07 13:00:20): Synchronised file ProductID.dat (Local).
Trace(2018-Mar-07 13:00:20): Customer ID has changed
Trace(2018-Mar-07 13:00:20): ParseCustomerIDFile: completed: 0
Trace(2018-Mar-07 13:00:20): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Calling SyncProduct with {390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92}
Trace(2018-Mar-07 13:00:20): CIDUpdateLocation::SyncProduct - Updating Product: RMSNT
Trace(2018-Mar-07 13:00:20): CIDUpdate(SyncProduct.Start): RMSNT, \\LS-DC1-VM-AV-01.learnship.net\SophosUpdate\CIDs\S000\SAVSCFXP
Trace(2018-Mar-07 13:00:20): Checksum found in master.upd matches cached cidsync.upd : 5935f9d4. Skipping download
Trace(2018-Mar-07 13:00:20): CIDUpdate(DiscoveredSuccess):
Trace(2018-Mar-07 13:00:21): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, SyncProduct returned - 1
Trace(2018-Mar-07 13:00:21): TrySyncProduct<class AutoUpdate::CIDUpdateLocation>, Ended - 1
Trace(2018-Mar-07 13:00:21): UpdateLocationFacade::SyncProduct: Last Update Mechanism = CID
Trace(2018-Mar-07 13:00:21): CIDUpdateLocation::SyncProduct - Updating Product: SAVXP
Trace(2018-Mar-07 13:00:21): CIDUpdate(SyncProduct.Start): SAVXP, \\LS-DC1-VM-AV-01.learnship.net\SophosUpdate\CIDs\S000\SAVSCFXP
Trace(2018-Mar-07 13:00:21): Checksum found in master.upd matches cached cidsync.upd : 625aaa90. Skipping download
Trace(2018-Mar-07 13:00:21): CIDUpdate(DiscoveredSuccess):
Trace(2018-Mar-07 13:00:21): UpdateLocationFacade::SyncProduct: Last Update Mechanism = CID
Trace(2018-Mar-07 13:00:21): CIDUpdateLocation::SyncProduct - Updating Product: Sophos Endpoint Defense
Trace(2018-Mar-07 13:00:21): CIDUpdate(SyncProduct.Start): Sophos Endpoint Defense, \\LS-DC1-VM-AV-01.learnship.net\SophosUpdate\CIDs\S000\SAVSCFXP
Trace(2018-Mar-07 13:00:21): Checksum found in master.upd matches cached cidsync.upd : ec1b32a5. Skipping download
Trace(2018-Mar-07 13:00:21): CIDUpdate(DiscoveredSuccess):
Trace(2018-Mar-07 13:00:22): UpdateLocationFacade::SyncProduct: Last Update Mechanism = CID
Trace(2018-Mar-07 13:00:22): CIDUpdateLocation::SyncProduct - Updating Product: Sophos AutoUpdate
Trace(2018-Mar-07 13:00:22): CIDUpdate(SyncProduct.Start): Sophos AutoUpdate, \\LS-DC1-VM-AV-01.learnship.net\SophosUpdate\CIDs\S000\SAVSCFXP
Trace(2018-Mar-07 13:00:22): Checksum found in master.upd matches cached cidsync.upd : 506fcab8. Skipping download
Trace(2018-Mar-07 13:00:22): CIDUpdate(DiscoveredSuccess):
Trace(2018-Mar-07 13:00:23): CIDUpdateLocation::Prepare... entered
Trace(2018-Mar-07 13:00:23): CheckManifest: Processing manifest: C:\ProgramData\Sophos\AutoUpdate\cache\sau\manifest.dat
Trace(2018-Mar-07 13:00:23): CheckManifest: Processing manifest: C:\ProgramData\Sophos\AutoUpdate\cache\sau\telemsup\telemetry.manifest.dat
Trace(2018-Mar-07 13:00:23): CheckManifest completed successfully
Trace(2018-Mar-07 13:00:24): CustomFileMap::CustomFileMap. CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
Trace(2018-Mar-07 13:00:24): CustomFileMap::Read: Subfolder = sau productID = {9BF40A4E-23AE-48be-9974-5A1F261DBEE8}
Trace(2018-Mar-07 13:00:24): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\sau.custom
Trace(2018-Mar-07 13:00:24): CustomFileMap::Read: File exists and appears valid.
Trace(2018-Mar-07 13:00:24): UpdateLocationFacade::SyncProduct: Last Update Mechanism = CID
Trace(2018-Mar-07 13:00:24): CIDUpdateLocation::SyncProduct - Updating Product: Sophos System Protection
Trace(2018-Mar-07 13:00:24): CIDUpdate(SyncProduct.Start): Sophos System Protection, \\LS-DC1-VM-AV-01.learnship.net\SophosUpdate\CIDs\S000\SAVSCFXP
Trace(2018-Mar-07 13:00:24): Checksum found in master.upd matches cached cidsync.upd : 59d2646f. Skipping download
Trace(2018-Mar-07 13:00:24): CIDUpdate(DiscoveredSuccess):
Trace(2018-Mar-07 13:00:24): UpdateLocationFacade::SyncProduct: Last Update Mechanism = CID
Trace(2018-Mar-07 13:00:24): CIDUpdateLocation::SyncProduct - Updating Product: Sophos Network Threat Protection
Trace(2018-Mar-07 13:00:24): CIDUpdate(SyncProduct.Start): Sophos Network Threat Protection, \\LS-DC1-VM-AV-01.learnship.net\SophosUpdate\CIDs\S000\SAVSCFXP
Trace(2018-Mar-07 13:00:24): Optional product not found in master.upd. Skipping download
Trace(2018-Mar-07 13:00:24): CIDUpdate(DiscoveredSuccess):
Trace(2018-Mar-07 13:00:25): CIDUpdateLocation::Prepare... entered
Trace(2018-Mar-07 13:00:25): CheckManifest: Processing manifest: C:\ProgramData\Sophos\AutoUpdate\cache\sau\manifest.dat
Trace(2018-Mar-07 13:00:26): CheckManifest: Processing manifest: C:\ProgramData\Sophos\AutoUpdate\cache\sau\telemsup\telemetry.manifest.dat
Trace(2018-Mar-07 13:00:26): CheckManifest completed successfully
Trace(2018-Mar-07 13:00:26): CustomFileMap::CustomFileMap. CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
Trace(2018-Mar-07 13:00:26): CustomFileMap::Read: Subfolder = sau productID = {9BF40A4E-23AE-48be-9974-5A1F261DBEE8}
Trace(2018-Mar-07 13:00:26): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\sau.custom
Trace(2018-Mar-07 13:00:26): CustomFileMap::Read: File exists and appears valid.
Trace(2018-Mar-07 13:00:26): CIDUpdateLocation::Prepare... entered
Trace(2018-Mar-07 13:00:26): CheckManifest: Processing manifest: C:\ProgramData\Sophos\AutoUpdate\cache\sau\manifest.dat
Trace(2018-Mar-07 13:00:26): CheckManifest: Processing manifest: C:\ProgramData\Sophos\AutoUpdate\cache\sau\telemsup\telemetry.manifest.dat
Trace(2018-Mar-07 13:00:26): CheckManifest completed successfully
Trace(2018-Mar-07 13:00:26): CustomFileMap::CustomFileMap. CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
Trace(2018-Mar-07 13:00:26): CustomFileMap::Read: Subfolder = sau productID = {9BF40A4E-23AE-48be-9974-5A1F261DBEE8}
Trace(2018-Mar-07 13:00:26): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\sau.custom
Trace(2018-Mar-07 13:00:26): CustomFileMap::Read: File exists and appears valid.
Trace(2018-Mar-07 13:00:26): UpdateLocationFacade::SyncProduct: Last Update Mechanism = Unknown
Trace(2018-Mar-07 13:00:26): TrySyncProduct<class SDDS2::SULUpdateLocation>, Started:
Trace(2018-Mar-07 13:00:26): TrySyncProduct<class SDDS2::SULUpdateLocation>, creating update location
Trace(2018-Mar-07 13:00:26): Could not read registry entry containing Sophos address - using hardcoded value.
Trace(2018-Mar-07 13:00:26): SULUpdateLocation created!
Trace(2018-Mar-07 13:00:26): TrySyncProduct, Calling BeginSync
Trace(2018-Mar-07 13:00:26): SULUpdateLocation: BeginSync
Trace(2018-Mar-07 13:00:26): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
Trace(2018-Mar-07 13:00:26): SDDS2Update(SyncProduct.Start): Sophos Endpoint Security and Control, sophos
Trace(2018-Mar-07 13:00:26): Calling SULDownloader Setup...
Trace(2018-Mar-07 13:00:26): warehousePath: "C:\ProgramData\Sophos\AutoUpdate\data\warehouse"
Trace(2018-Mar-07 13:00:26): decodePath: "C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode"
Trace(2018-Mar-07 13:00:26): certPath: "C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir"
Trace(2018-Mar-07 13:00:26): server = sophos
Trace(2018-Mar-07 13:00:26): Adding Sophos Update Location: dci.sophosupd.com/update
Trace(2018-Mar-07 13:00:26): Adding Sophos Update Location: dci.sophosupd.net/update
Trace(2018-Mar-07 13:00:26): No manually configured proxy.
Trace(2018-Mar-07 13:00:26): SULDownloader setup successful.
Trace(2018-Mar-07 13:00:26): SubscriptionProvider: 7ba49542-049c-4154-aad9-cf19a9ec7be5/10.7.6.2.3702.1/
Trace(2018-Mar-07 13:00:28): Enumerating available product versions...
Trace(2018-Mar-07 13:00:28): Failed to authenticate
Trace(2018-Mar-07 13:00:28): SubscriptionProvider: 7ba49542-049c-4154-aad9-cf19a9ec7be5/10.7.6.2.3702.1/
Trace(2018-Mar-07 13:00:30): Failed to authenticate
Trace(2018-Mar-07 13:00:30): Failed: SDDS2 CheckResubscription failed
Trace(2018-Mar-07 13:00:30): TrySyncProduct<class SDDS2::SULUpdateLocation>, Ended - 0
Trace(2018-Mar-07 13:00:30): ALUpdate(DownloadEnded):
Trace(2018-Mar-07 13:00:30): UpdateCoordinator::UpdateNow: About to Action list of products
Trace(2018-Mar-07 13:00:30): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
Trace(2018-Mar-07 13:00:30): Null update
Trace(2018-Mar-07 13:00:30): ALUpdate(Action.Skipped): RMSNT
Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate...
Trace(2018-Mar-07 13:00:30): CustomFileMap::CustomFileMap. CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: Subfolder = rms productID = {390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92}
Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\rms.custom
Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: File exists and appears valid.
Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate complete.
Trace(2018-Mar-07 13:00:30): Updating plugin cache for RMSNT
Trace(2018-Mar-07 13:00:30): Successfully updated plugin cache for RMSNT
Trace(2018-Mar-07 13:00:30): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
Trace(2018-Mar-07 13:00:30): Null update
Trace(2018-Mar-07 13:00:30): ALUpdate(Action.Skipped): SAVXP
Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate...
Trace(2018-Mar-07 13:00:30): CustomFileMap::CustomFileMap. CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: Subfolder = savxp productID = {E17FE03B-0501-4aaa-BC69-0129D965F311}
Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\savxp.custom
Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: File exists and appears valid.
Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate complete.
Trace(2018-Mar-07 13:00:30): Updating plugin cache for SAVXP
Trace(2018-Mar-07 13:00:30): Successfully updated plugin cache for SAVXP
Trace(2018-Mar-07 13:00:30): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
Trace(2018-Mar-07 13:00:30): Null update
Trace(2018-Mar-07 13:00:30): ALUpdate(Action.Skipped): Sophos Endpoint Defense
Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate...
Trace(2018-Mar-07 13:00:30): CustomFileMap::CustomFileMap. CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: Subfolder = sed64 productID = {1129226C-32AB-4B72-85E1-A9CC8DFBC859}
Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\sed64.custom
Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: File exists and appears valid.
Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate complete.
Trace(2018-Mar-07 13:00:30): Updating plugin cache for Sophos Endpoint Defense
Trace(2018-Mar-07 13:00:30): Successfully updated plugin cache for Sophos Endpoint Defense
Trace(2018-Mar-07 13:00:30): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
Trace(2018-Mar-07 13:00:30): Null update
Trace(2018-Mar-07 13:00:30): ALUpdate(Action.Skipped): Sophos AutoUpdate
Trace(2018-Mar-07 13:00:30): Updating subscription information from product ID data.
Trace(2018-Mar-07 13:00:30): Rigid name: 7ba49542-049c-4154-aad9-cf19a9ec7be5
Trace(2018-Mar-07 13:00:30): Version: 10.7.6.2.3702.1
Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate...
Trace(2018-Mar-07 13:00:30): CustomFileMap::CustomFileMap. CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: Subfolder = sau productID = {9BF40A4E-23AE-48be-9974-5A1F261DBEE8}
Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\sau.custom
Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: File exists and appears valid.
Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate complete.
Trace(2018-Mar-07 13:00:30): Updating plugin cache for Sophos AutoUpdate
Trace(2018-Mar-07 13:00:30): Successfully updated plugin cache for Sophos AutoUpdate
Trace(2018-Mar-07 13:00:30): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
Trace(2018-Mar-07 13:00:30): Null update
Trace(2018-Mar-07 13:00:30): ALUpdate(Action.Skipped): Sophos System Protection
Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate...
Trace(2018-Mar-07 13:00:30): CustomFileMap::CustomFileMap. CachePath = C:\ProgramData\Sophos\AutoUpdate\cache
Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: Subfolder = ssp productID = {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E}
Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: File path = C:\ProgramData\Sophos\AutoUpdate\cache\ssp.custom
Trace(2018-Mar-07 13:00:30): CustomFileMap::Read: File exists and appears valid.
Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate complete.
Trace(2018-Mar-07 13:00:30): Updating plugin cache for Sophos System Protection
Trace(2018-Mar-07 13:00:30): Successfully updated plugin cache for Sophos System Protection
Trace(2018-Mar-07 13:00:30): SimpleProduct::DoAction isLater==true skipAction==false isUninstall)==truem_lastUpdateSucceeded==false numfilestocahce 1 Actiontype SetupNot preinstalled product
Trace(2018-Mar-07 13:00:30): Null update
Trace(2018-Mar-07 13:00:30): ALUpdate(Action.Skipped): Sophos Network Threat Protection
Trace(2018-Mar-07 13:00:30): CIDUpdateLocation::OnNullUpdate...
Trace(2018-Mar-07 13:00:31): RMSMessageHandler: ALUpdateEnd
Trace(2018-Mar-07 13:00:31): Sending message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate" />
Trace(2018-Mar-07 13:00:31): IPCSender::Write: Writing message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate" />
Trace(2018-Mar-07 13:00:31): IPCSender::ProcessSend: Send message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate" />
Trace(2018-Mar-07 13:00:31): IPCSender::ProcessSend: No messages in queue, starting to wait
Trace(2018-Mar-07 13:00:32): IPCSender::ProcessSend exiting
Trace(2018-Mar-07 13:00:32): ALUpdate finished

The second server is still running the standalone installation of SESC which is currently not managed by SEC. On that server, updating spam-rules succeeds:

Trace(2018-Mar-07 13:03:37): =========================
Trace(2018-Mar-07 13:03:37): ALUpdate is starting.
Trace(2018-Mar-07 13:03:37): AutoUpdate version: 5.10
Trace(2018-Mar-07 13:03:37): Build : 210356
Trace(2018-Mar-07 13:03:37): Command line : -ManualUpdate -NoGUI -RootPath "C:\Program Files (x86)\Sophos\AutoUpdate"
Trace(2018-Mar-07 13:03:37): =========================
Trace(2018-Mar-07 13:03:37): Process security set successfully
Trace(2018-Mar-07 13:03:37): Product subscription is disabled: iProductData.{390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92} action value is:0
Trace(2018-Mar-07 13:03:37): Product iProductData.{390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92} has not been added.
Trace(2018-Mar-07 13:03:37): Product subscription is disabled: iProductData.{D752FAB9-5883-4b36-8740-61565B6BAD29} action value is:0
Trace(2018-Mar-07 13:03:37): Product iProductData.{D752FAB9-5883-4b36-8740-61565B6BAD29} has not been added.
Trace(2018-Mar-07 13:03:37): Product iProductData.{E17FE03B-0501-4aaa-BC69-0129D965F311} has been added.
Trace(2018-Mar-07 13:03:37): Product iProductData.{E17FE03B-0501-4aaa-BC69-0129D965F311} is available from Sophos.
Trace(2018-Mar-07 13:03:37): Product iProductData.{E17FE03B-0501-4aaa-BC69-0129D965F311} is not the Spam Rules package.
Trace(2018-Mar-07 13:03:37): Product subscription is disabled: iProductData.{7998C326-2CA5-4830-B7D2-B792D2460975} action value is:0
Trace(2018-Mar-07 13:03:37): Product iProductData.{7998C326-2CA5-4830-B7D2-B792D2460975} has not been added.
Trace(2018-Mar-07 13:03:37): Product iProductData.{3B758ED7-87C1-4e89-BDE1-F49DFF1249F6} has not been added.
Trace(2018-Mar-07 13:03:37): Product iProductData.{B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} has been added.
Trace(2018-Mar-07 13:03:37): Product iProductData.{B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} is available from Sophos.
Trace(2018-Mar-07 13:03:37): Product iProductData.{B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} is the Spam Rules package.
Trace(2018-Mar-07 13:03:37): Computer is a not possible cluster
Trace(2018-Mar-07 13:03:37): PureMessageDetector::AreSpamRulesRequired - Could not open registry on Software\Sophos\MMEx\Config\Global
Trace(2018-Mar-07 13:03:37): ConfigurationImpl, considering PMSR 2.6: PureMessage not installed, PMSR package will not be updated without a subscription
Trace(2018-Mar-07 13:03:37): Considering subscribed products.
Trace(2018-Mar-07 13:03:37): Considering product {9BF40A4E-23AE-48be-9974-5A1F261DBEE8}
Trace(2018-Mar-07 13:03:37): Product {9BF40A4E-23AE-48be-9974-5A1F261DBEE8} is not already subscribed.
Trace(2018-Mar-07 13:03:37): Product {9BF40A4E-23AE-48be-9974-5A1F261DBEE8} was added to the list.
Trace(2018-Mar-07 13:03:37): Considering product {B5E7E2A7-3B64-437D-801F-21CC9D67CC6D}
Trace(2018-Mar-07 13:03:37): Product {B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} is not already subscribed.
Trace(2018-Mar-07 13:03:37): Product {B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} is PureMessageSpamRules.
Trace(2018-Mar-07 13:03:37): Product {B5E7E2A7-3B64-437D-801F-21CC9D67CC6D} was added to the list.
Trace(2018-Mar-07 13:03:37): Considering product {E17FE03B-0501-4aaa-BC69-0129D965F311}
Trace(2018-Mar-07 13:03:37): Considering product {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E}
Trace(2018-Mar-07 13:03:37): Product {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E} is not already subscribed.
Trace(2018-Mar-07 13:03:37): Product {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E} was added to the list.
Trace(2018-Mar-07 13:03:37): Product {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E} is removable.
Trace(2018-Mar-07 13:03:37): Product {8087796B-2289-4897-98A5-58FF23DAAFD0} was added to the list.
Trace(2018-Mar-07 13:03:37): Product {8087796B-2289-4897-98A5-58FF23DAAFD0} is optional.
Trace(2018-Mar-07 13:03:37): Product {8087796B-2289-4897-98A5-58FF23DAAFD0} is removable.
Trace(2018-Mar-07 13:03:37): Product {1129226C-32AB-4B72-85E1-A9CC8DFBC859} was added to the list.
Trace(2018-Mar-07 13:03:37): Product {1129226C-32AB-4B72-85E1-A9CC8DFBC859} is optional.
Trace(2018-Mar-07 13:03:37): Product {1129226C-32AB-4B72-85E1-A9CC8DFBC859} is removable.
Trace(2018-Mar-07 13:03:37): Could not read registry entry containing Sophos address - using hardcoded value.
Trace(2018-Mar-07 13:03:37): GenerateCustomerID: complete
Trace(2018-Mar-07 13:03:37): Computer is a not possible cluster
Trace(2018-Mar-07 13:03:37): PureMessageDetector::AreSpamRulesRequired - Could not open registry on Software\Sophos\MMEx\Config\Global
Trace(2018-Mar-07 13:03:37): Could not read registry entry containing Sophos address - using hardcoded value.
Trace(2018-Mar-07 13:03:37): GenerateCustomerID: complete
Trace(2018-Mar-07 13:03:37): Computer is a not possible cluster
Trace(2018-Mar-07 13:03:37): PureMessageDetector::AreSpamRulesRequired - Could not open registry on Software\Sophos\MMEx\Config\Global
Trace(2018-Mar-07 13:03:37): IPCBase::IPCBase: Initialising shared memory A32951C539924a12B3C8F2FDA5A268E4
Trace(2018-Mar-07 13:03:37): IPCSender::ProcessSend started
Trace(2018-Mar-07 13:03:37): IPCSender::ProcessSend: No messages in queue, starting to wait
Trace(2018-Mar-07 13:03:37): RMSMessageHandler: ALUpdateStart
Trace(2018-Mar-07 13:03:37): IPCSender::Write: Writing message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSStartUpdate" />
Trace(2018-Mar-07 13:03:37): IPCSender::ProcessSend: Send message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSStartUpdate" />
Trace(2018-Mar-07 13:03:37): IPCSender::ProcessSend: No messages in queue, starting to wait
Trace(2018-Mar-07 13:03:37): ALUpdate(AutoUpdate.Started):
Trace(2018-Mar-07 13:03:37): UpdateCoordinator::UpdateNow: Entering
Trace(2018-Mar-07 13:03:37): PopulateCache: Entering
Trace(2018-Mar-07 13:03:37): UpdateCoordinator::UpdateNow: current platform is WIN_81_SVR_X64
Trace(2018-Mar-07 13:03:37): ProductFactory::Create: SimpleProduct: {E17FE03B-0501-4aaa-BC69-0129D965F311}
Trace(2018-Mar-07 13:03:37): ProductFactory::Create: SAU Product
Trace(2018-Mar-07 13:03:37): ProductFactory::Create: PMSR Product
Trace(2018-Mar-07 13:03:37): ProductFactory::Create: SimpleProduct: {F8FFD42E-47AC-4CFF-9E27-EC84ED62128E}
Trace(2018-Mar-07 13:03:37): ProductFactory::Create: SimpleProduct: {8087796B-2289-4897-98A5-58FF23DAAFD0}
Trace(2018-Mar-07 13:03:37): ProductFactory::Create: SimpleProduct: {1129226C-32AB-4B72-85E1-A9CC8DFBC859}
Trace(2018-Mar-07 13:03:37): RelativeCidUpdateSourceLocator::AugmentUpdateSources: Entering
Trace(2018-Mar-07 13:03:37): Skipping SDDS2 update location: Sophos
Trace(2018-Mar-07 13:03:37): Skipping SDDS2 update location: Sophos
Trace(2018-Mar-07 13:03:37): RelativeCidUpdateSourceLocator::AugmentUpdateSources: Finished. Number of new locations added: 0
Trace(2018-Mar-07 13:03:37): UpdateCoordinator::UpdateNow: About to Sync list of products
Trace(2018-Mar-07 13:03:37): UpdateLocationFacade::SyncProduct: Last Update Mechanism = SDDS2
Trace(2018-Mar-07 13:03:37): TrySyncProduct<class SDDS2::SULUpdateLocation>, Started:
Trace(2018-Mar-07 13:03:37): TrySyncProduct<class SDDS2::SULUpdateLocation>, creating update location
Trace(2018-Mar-07 13:03:37): Could not read registry entry containing Sophos address - using hardcoded value.
Trace(2018-Mar-07 13:03:37): SULUpdateLocation created!
Trace(2018-Mar-07 13:03:37): TrySyncProduct, Calling BeginSync
Trace(2018-Mar-07 13:03:37): SULUpdateLocation: BeginSync
Trace(2018-Mar-07 13:03:37): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
Trace(2018-Mar-07 13:03:37): SDDS2Update(SyncProduct.Start): Sophos Endpoint Security and Control, sophos
Trace(2018-Mar-07 13:03:37): Calling SULDownloader Setup...
Trace(2018-Mar-07 13:03:37): warehousePath: "C:\ProgramData\Sophos\AutoUpdate\data\warehouse"
Trace(2018-Mar-07 13:03:37): decodePath: "C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode"
Trace(2018-Mar-07 13:03:37): certPath: "C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir"
Trace(2018-Mar-07 13:03:37): server = sophos
Trace(2018-Mar-07 13:03:37): Adding Sophos Update Location: dci.sophosupd.com/update
Trace(2018-Mar-07 13:03:37): Adding Sophos Update Location: dci.sophosupd.net/update
Trace(2018-Mar-07 13:03:37): No manually configured proxy.
Trace(2018-Mar-07 13:03:37): SULDownloader setup successful.
Trace(2018-Mar-07 13:03:37): SubscriptionProvider: StandaloneWindows/RECOMMENDED/10
Trace(2018-Mar-07 13:03:38): No resubscription attribute found.
Trace(2018-Mar-07 13:03:38): SubscriptionProvider: StandaloneWindows/RECOMMENDED/10
Trace(2018-Mar-07 13:03:38): SULUpdateLocation: SubscribePEXProducts
Trace(2018-Mar-07 13:03:38): Enumerating available PEX products...
Trace(2018-Mar-07 13:03:38): SULUpdateLocation: CheckIfHMPAIsAvailable
Trace(2018-Mar-07 13:03:38): Adding product filter 'savxp'.
Trace(2018-Mar-07 13:03:38): Adding product filter 'sau'.
Trace(2018-Mar-07 13:03:38): Adding product filter 'pmsr'.
Trace(2018-Mar-07 13:03:38): Adding product filter 'ssp'.
Trace(2018-Mar-07 13:03:38): Adding product filter 'ntp64'.
Trace(2018-Mar-07 13:03:38): Adding product filter 'sed64'.
Trace(2018-Mar-07 13:03:38): Calling SULDownloader addFilter...
Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\savxp
Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\sau
Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\pmsr
Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\ssp
Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64
Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\sed64
Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\savxp
Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\sau
Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\pmsr
Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\ssp
Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\ntp64
Trace(2018-Mar-07 13:03:38): Adding cache: C:\ProgramData\Sophos\AutoUpdate\cache\sed64
Trace(2018-Mar-07 13:03:38): Calling SULDownloader synchronise...
Trace(2018-Mar-07 13:03:40): [I96736] sdds.eps_WIN2018-2.2: adding primary package StandaloneWindows RECOMMENDED baseVersion=10
Trace(2018-Mar-07 13:03:40): [I96736] sdds.eps_WIN2018-2.2: adding primary package B5E7E2A7-3B64-437D-801F-21CC9D67CC6D RECOMMENDED baseVersion=1
Trace(2018-Mar-07 13:03:40): [I95020] sdds.eps_WIN2018-2.2: looking for packages included from product StandaloneWindows RECOMMENDED path=
Trace(2018-Mar-07 13:03:40): [I45378] sdds.eps_WIN2018-2.2: found included product 4DB41E90-DC56-41DC-B91E-9B8E537489A8 3.0.4.125 path=scf baseVersion= [included from product StandaloneWindows RECOMMENDED path=]
Trace(2018-Mar-07 13:03:40): [I45378] sdds.eps_WIN2018-2.2: found included product F8FFD42E-47AC-4CFF-9E27-EC84ED62128E 1.3.1.2 path=ssp baseVersion= [included from product StandaloneWindows RECOMMENDED path=]
Trace(2018-Mar-07 13:03:40): [I45378] sdds.eps_WIN2018-2.2: found included product E17FE03B-0501-4aaa-BC69-0129D965F311 10.7.6.128.3702.8502 path=savxp baseVersion= [included from product StandaloneWindows RECOMMENDED path=]
Trace(2018-Mar-07 13:03:40): [I45378] sdds.eps_WIN2018-2.2: found included product 9BF40A4E-23AE-48be-9974-5A1F261DBEE8 5.10.139.139 path=sau baseVersion= [included from product StandaloneWindows RECOMMENDED path=]
Trace(2018-Mar-07 13:03:40): [I22529] sdds.eps_WIN2018-2.2: looking for supplements included from product StandaloneWindows RECOMMENDED path=
Trace(2018-Mar-07 13:03:40): [I49502] sdds.SAVCNTRL.xml: found supplement SAVCONTROLLINE STANDALONE path=savxp baseVersion= [included from product StandaloneWindows RECOMMENDED path=]
Trace(2018-Mar-07 13:03:40): [I95020] sdds.eps_WIN2018-2.2: looking for packages included from product B5E7E2A7-3B64-437D-801F-21CC9D67CC6D RECOMMENDED path=
Trace(2018-Mar-07 13:03:40): [I22529] sdds.eps_WIN2018-2.2: looking for supplements included from product B5E7E2A7-3B64-437D-801F-21CC9D67CC6D RECOMMENDED path=
Trace(2018-Mar-07 13:03:40): [I49502] sdds.pmsr_cci.xml: found supplement PMSR_CCI LATEST path= baseVersion= [included from product B5E7E2A7-3B64-437D-801F-21CC9D67CC6D RECOMMENDED path=]
Trace(2018-Mar-07 13:03:40): [I95020] sdds.eps_WIN2018-2.2: looking for packages included from product 4DB41E90-DC56-41DC-B91E-9B8E537489A8 3.0.4.125 path=scf
Trace(2018-Mar-07 13:03:40): [I22529] sdds.eps_WIN2018-2.2: looking for supplements included from product 4DB41E90-DC56-41DC-B91E-9B8E537489A8 3.0.4.125 path=scf
Trace(2018-Mar-07 13:03:40): [I95020] sdds.eps_WIN2018-2.2: looking for packages included from product F8FFD42E-47AC-4CFF-9E27-EC84ED62128E 1.3.1.2 path=ssp
Trace(2018-Mar-07 13:03:40): [I22529] sdds.eps_WIN2018-2.2: looking for supplements included from product F8FFD42E-47AC-4CFF-9E27-EC84ED62128E 1.3.1.2 path=ssp
Trace(2018-Mar-07 13:03:40): [I95020] sdds.eps_WIN2018-2.2: looking for packages included from product E17FE03B-0501-4aaa-BC69-0129D965F311 10.7.6.128.3702.8502 path=savxp
Trace(2018-Mar-07 13:03:40): [I22529] sdds.eps_WIN2018-2.2: looking for supplements included from product E17FE03B-0501-4aaa-BC69-0129D965F311 10.7.6.128.3702.8502 path=savxp
Trace(2018-Mar-07 13:03:40): [I49502] sdds.APPFEED_d1.xml: found supplement USERAPPFEED LATEST path=savxp baseVersion= [included from product E17FE03B-0501-4aaa-BC69-0129D965F311 10.7.6.128.3702.8502 path=savxp]
Trace(2018-Mar-07 13:03:40): [I49502] sdds.sdu.xml: found supplement SDU RECOMMENDED path=savxp/diagnose baseVersion= [included from product E17FE03B-0501-4aaa-BC69-0129D965F311 10.7.6.128.3702.8502 path=savxp]
Trace(2018-Mar-07 13:03:40): [I49502] sdds.sxl_supp.xml: found supplement SXLSUP LATEST path=savxp baseVersion=2 [included from product E17FE03B-0501-4aaa-BC69-0129D965F311 10.7.6.128.3702.8502 path=savxp]
Trace(2018-Mar-07 13:03:40): [I49502] sdds.VDB_supp.xml: found supplement VDL LATEST path=savxp baseVersion= [included from product E17FE03B-0501-4aaa-BC69-0129D965F311 10.7.6.128.3702.8502 path=savxp]
Trace(2018-Mar-07 13:03:40): [I49502] sdds.hips.xml: found supplement HIPS LATEST path=savxp baseVersion= [included from product E17FE03B-0501-4aaa-BC69-0129D965F311 10.7.6.128.3702.8502 path=savxp]
Trace(2018-Mar-07 13:03:40): [I95020] sdds.eps_WIN2018-2.2: looking for packages included from product 9BF40A4E-23AE-48be-9974-5A1F261DBEE8 5.10.139.139 path=sau
Trace(2018-Mar-07 13:03:40): [I22529] sdds.eps_WIN2018-2.2: looking for supplements included from product 9BF40A4E-23AE-48be-9974-5A1F261DBEE8 5.10.139.139 path=sau
Trace(2018-Mar-07 13:03:40): [I49502] sdds.TELEMSUPP.xml: found supplement TELEMSUP RECOMMENDED path=sau baseVersion= [included from product 9BF40A4E-23AE-48be-9974-5A1F261DBEE8 5.10.139.139 path=sau]
Trace(2018-Mar-07 13:03:40): [I95020] sdds.SAVCNTRL.xml: looking for packages included from product SAVCONTROLLINE STANDALONE path=savxp
Trace(2018-Mar-07 13:03:40): [I22529] sdds.SAVCNTRL.xml: looking for supplements included from product SAVCONTROLLINE STANDALONE path=savxp
Trace(2018-Mar-07 13:03:40): [I95020] sdds.pmsr_cci.xml: looking for packages included from product PMSR_CCI LATEST path=
Trace(2018-Mar-07 13:03:40): [I22529] sdds.pmsr_cci.xml: looking for supplements included from product PMSR_CCI LATEST path=
Trace(2018-Mar-07 13:03:40): [I95020] sdds.APPFEED_d1.xml: looking for packages included from product USERAPPFEED LATEST path=savxp
Trace(2018-Mar-07 13:03:40): [I22529] sdds.APPFEED_d1.xml: looking for supplements included from product USERAPPFEED LATEST path=savxp
Trace(2018-Mar-07 13:03:40): [I95020] sdds.sdu.xml: looking for packages included from product SDU RECOMMENDED path=savxp/diagnose
Trace(2018-Mar-07 13:03:40): [I22529] sdds.sdu.xml: looking for supplements included from product SDU RECOMMENDED path=savxp/diagnose
Trace(2018-Mar-07 13:03:40): [I95020] sdds.sxl_supp.xml: looking for packages included from product SXLSUP LATEST path=savxp
Trace(2018-Mar-07 13:03:40): [I22529] sdds.sxl_supp.xml: looking for supplements included from product SXLSUP LATEST path=savxp
Trace(2018-Mar-07 13:03:40): [I95020] sdds.VDB_supp.xml: looking for packages included from product VDL LATEST path=savxp
Trace(2018-Mar-07 13:03:40): [I22529] sdds.VDB_supp.xml: looking for supplements included from product VDL LATEST path=savxp
Trace(2018-Mar-07 13:03:40): [I49502] sdds.data0910.xml: found supplement IDE549 LATEST path=savxp baseVersion= [included from product VDL LATEST path=savxp]
Trace(2018-Mar-07 13:03:40): [I95020] sdds.hips.xml: looking for packages included from product HIPS LATEST path=savxp
Trace(2018-Mar-07 13:03:40): [I22529] sdds.hips.xml: looking for supplements included from product HIPS LATEST path=savxp
Trace(2018-Mar-07 13:03:40): [I95020] sdds.TELEMSUPP.xml: looking for packages included from product TELEMSUP RECOMMENDED path=sau
Trace(2018-Mar-07 13:03:40): [I22529] sdds.TELEMSUPP.xml: looking for supplements included from product TELEMSUP RECOMMENDED path=sau
Trace(2018-Mar-07 13:03:40): [I95020] sdds.data0910.xml: looking for packages included from product IDE549 LATEST path=savxp
Trace(2018-Mar-07 13:03:40): [I22529] sdds.data0910.xml: looking for supplements included from product IDE549 LATEST path=savxp
Trace(2018-Mar-07 13:03:40): [I49502] sdds.data0910.xml: found supplement IDE550 LATEST path=savxp baseVersion= [included from product IDE549 LATEST path=savxp]
Trace(2018-Mar-07 13:03:40): [I95020] sdds.data0910.xml: looking for packages included from product IDE550 LATEST path=savxp
Trace(2018-Mar-07 13:03:40): [I22529] sdds.data0910.xml: looking for supplements included from product IDE550 LATEST path=savxp
Trace(2018-Mar-07 13:03:40): [I49502] sdds.data0910.xml: found supplement IDE551 LATEST path=savxp baseVersion= [included from product IDE550 LATEST path=savxp]
Trace(2018-Mar-07 13:03:40): [I95020] sdds.data0910.xml: looking for packages included from product IDE551 LATEST path=savxp
Trace(2018-Mar-07 13:03:40): [I22529] sdds.data0910.xml: looking for supplements included from product IDE551 LATEST path=savxp
Trace(2018-Mar-07 13:03:40): [I19463] Syncing product StandaloneWindows RECOMMENDED path=
Trace(2018-Mar-07 13:03:40): [I19463] Syncing product B5E7E2A7-3B64-437D-801F-21CC9D67CC6D RECOMMENDED path=
Trace(2018-Mar-07 13:03:40): [I19463] Syncing product 4DB41E90-DC56-41DC-B91E-9B8E537489A8 3.0.4.125 path=scf
Trace(2018-Mar-07 13:03:40): [I19463] Syncing product F8FFD42E-47AC-4CFF-9E27-EC84ED62128E 1.3.1.2 path=ssp
Trace(2018-Mar-07 13:03:40): [I19463] Syncing product E17FE03B-0501-4aaa-BC69-0129D965F311 10.7.6.128.3702.8502 path=savxp
Trace(2018-Mar-07 13:03:40): [I19463] Syncing product 9BF40A4E-23AE-48be-9974-5A1F261DBEE8 5.10.139.139 path=sau
Trace(2018-Mar-07 13:03:40): [I19463] Syncing product SAVCONTROLLINE STANDALONE path=savxp
Trace(2018-Mar-07 13:03:40): [I19463] Syncing product PMSR_CCI LATEST path=
Trace(2018-Mar-07 13:03:40): [I19463] Syncing product USERAPPFEED LATEST path=savxp
Trace(2018-Mar-07 13:03:40): [I19463] Syncing product SDU RECOMMENDED path=savxp/diagnose
Trace(2018-Mar-07 13:03:40): [I19463] Syncing product SXLSUP LATEST path=savxp
Trace(2018-Mar-07 13:03:40): [I19463] Syncing product VDL LATEST path=savxp
Trace(2018-Mar-07 13:03:40): [I19463] Syncing product HIPS LATEST path=savxp
Trace(2018-Mar-07 13:03:40): [I19463] Syncing product TELEMSUP RECOMMENDED path=sau
Trace(2018-Mar-07 13:03:40): [I19463] Syncing product IDE549 LATEST path=savxp
Trace(2018-Mar-07 13:03:40): [I19463] Syncing product IDE550 LATEST path=savxp
Trace(2018-Mar-07 13:03:40): [I19463] Syncing product IDE551 LATEST path=savxp
Trace(2018-Mar-07 13:03:41): SULDownloader synchronise successful.
Trace(2018-Mar-07 13:03:41): Synchronisation state: 1
Trace(2018-Mar-07 13:03:41): SULUpdateLocation: CopyRelayConfToDecode: Checking if custom mrinit.conf file is available from local RMS CID cache
Trace(2018-Mar-07 13:03:41): TrySyncProduct<class SDDS2::SULUpdateLocation>, Calling SyncProduct with {E17FE03B-0501-4aaa-BC69-0129D965F311}
Trace(2018-Mar-07 13:03:41): SULUpdateLocation: SyncProduct
Trace(2018-Mar-07 13:03:41): Calling SULDownloader GetDistributedFileList...
Trace(2018-Mar-07 13:03:42): SULUpdateLocation: CalculateFileSetChecksum
Trace(2018-Mar-07 13:03:42): TrySyncProduct<class SDDS2::SULUpdateLocation>, SyncProduct returned - 1
Trace(2018-Mar-07 13:03:42): TrySyncProduct<class SDDS2::SULUpdateLocation>, Ended - 1
Trace(2018-Mar-07 13:03:42): UpdateLocationFacade::SyncProduct: Last Update Mechanism = SDDS2
Trace(2018-Mar-07 13:03:42): SULUpdateLocation: SyncProduct
Trace(2018-Mar-07 13:03:42): Calling SULDownloader GetDistributedFileList...
Trace(2018-Mar-07 13:03:42): SULUpdateLocation: CalculateFileSetChecksum
Trace(2018-Mar-07 13:03:42): SULUpdateLocation: Prepare
Trace(2018-Mar-07 13:03:42): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
Trace(2018-Mar-07 13:03:42): Path = "C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode\sau"
Trace(2018-Mar-07 13:03:42): SULUpdateLocation::Prepare... manifest verification...
Trace(2018-Mar-07 13:03:42): CheckManifest: Processing manifest: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode\sau\manifest.dat
Trace(2018-Mar-07 13:03:42): CheckManifest: Processing manifest: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode\sau\telemsup\telemetry.manifest.dat
Trace(2018-Mar-07 13:03:42): CheckManifest completed successfully
Trace(2018-Mar-07 13:03:42): UpdateLocationFacade::SyncProduct: Last Update Mechanism = SDDS2
Trace(2018-Mar-07 13:03:42): SULUpdateLocation: SyncProduct
Trace(2018-Mar-07 13:03:42): Calling SULDownloader GetDistributedFileList...
Trace(2018-Mar-07 13:03:43): SULUpdateLocation: CalculateFileSetChecksum
Trace(2018-Mar-07 13:03:43): SULUpdateLocation: GetFileFromInstallSet (overload 2)
Trace(2018-Mar-07 13:03:43): SULUpdateLocation: GetFileFromInstallSet (overload 1)
Trace(2018-Mar-07 13:03:43): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
Trace(2018-Mar-07 13:03:43): Calling Channel Synchronise...
Trace(2018-Mar-07 13:03:43): ChannelUpdate synchronise started
Trace(2018-Mar-07 13:03:43): Uniquifying ppdFile Name, URL: pmw-dynamic.sophos.com/.../PureMessage-AntiSpam-Data.ppd
Trace(2018-Mar-07 13:03:43): ChannelUpdate: Downloaded pmw-dynamic.sophos.com/.../PureMessage-AntiSpam-Data.ppd, 696 bytes.
Trace(2018-Mar-07 13:03:43): Uniquifying manifest File Name, URL: pmw-dynamic.sophos.com/.../manifest.dat
Trace(2018-Mar-07 13:03:43): ChannelUpdate: Downloaded pmw-dynamic.sophos.com/.../manifest.dat, 7889 bytes.
Trace(2018-Mar-07 13:03:43): New Channels Version == Old Channels Version, ChannelUpdate synch succeeded
Trace(2018-Mar-07 13:03:43): Channel Synchronise returned...
Trace(2018-Mar-07 13:03:43): UpdateLocationFacade::SyncProduct: Last Update Mechanism = SDDS2
Trace(2018-Mar-07 13:03:43): SULUpdateLocation: SyncProduct
Trace(2018-Mar-07 13:03:43): Calling SULDownloader GetDistributedFileList...
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: CalculateFileSetChecksum
Trace(2018-Mar-07 13:03:44): UpdateLocationFacade::SyncProduct: Last Update Mechanism = SDDS2
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: SyncProduct
Trace(2018-Mar-07 13:03:44): Calling SULDownloader GetDistributedFileList...
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: CalculateFileSetChecksum
Trace(2018-Mar-07 13:03:44): UpdateLocationFacade::SyncProduct: Last Update Mechanism = SDDS2
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: SyncProduct
Trace(2018-Mar-07 13:03:44): Calling SULDownloader GetDistributedFileList...
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: CalculateFileSetChecksum
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: EndSync
Trace(2018-Mar-07 13:03:44): ALUpdate(DownloadEnded):
Trace(2018-Mar-07 13:03:44): UpdateCoordinator::UpdateNow: About to Action list of products
Trace(2018-Mar-07 13:03:44): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: GetCacheDir
Trace(2018-Mar-07 13:03:44): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
Trace(2018-Mar-07 13:03:44): Null update
Trace(2018-Mar-07 13:03:44): ALUpdate(Action.Skipped): SAVXP
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: OnNullUpdate
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: GetCacheDir
Trace(2018-Mar-07 13:03:44): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
Trace(2018-Mar-07 13:03:44): Updating plugin cache for SAVXP
Trace(2018-Mar-07 13:03:44): Successfully updated plugin cache for SAVXP
Trace(2018-Mar-07 13:03:44): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: GetCacheDir
Trace(2018-Mar-07 13:03:44): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
Trace(2018-Mar-07 13:03:44): Null update
Trace(2018-Mar-07 13:03:44): ALUpdate(Action.Skipped): Sophos AutoUpdate
Trace(2018-Mar-07 13:03:44): Updating subscription information from product ID data.
Trace(2018-Mar-07 13:03:44): Rigid name: StandaloneWindows
Trace(2018-Mar-07 13:03:44): Version: 10.7.6.2.3702.1
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: OnNullUpdate
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: GetCacheDir
Trace(2018-Mar-07 13:03:44): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
Trace(2018-Mar-07 13:03:44): Updating plugin cache for Sophos AutoUpdate
Trace(2018-Mar-07 13:03:44): Successfully updated plugin cache for Sophos AutoUpdate
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: GetCacheDir
Trace(2018-Mar-07 13:03:44): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
Trace(2018-Mar-07 13:03:44): Null update
Trace(2018-Mar-07 13:03:44): ALUpdate(Action.Skipped): Sophos PureMessage
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: OnNullUpdate
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: GetCacheDir
Trace(2018-Mar-07 13:03:44): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
Trace(2018-Mar-07 13:03:44): No manifest.dat found for Sophos PureMessage: not caching files
Trace(2018-Mar-07 13:03:44): SimpleProduct::DoAction isLater==false skipAction==false isUninstall==false m_lastUpdateSucceeded==true numfilestocahce 1 Actiontype SetupNot preinstalled product
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: GetCacheDir
Trace(2018-Mar-07 13:03:44): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
Trace(2018-Mar-07 13:03:44): Null update
Trace(2018-Mar-07 13:03:44): ALUpdate(Action.Skipped): Sophos System Protection
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: OnNullUpdate
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: GetCacheDir
Trace(2018-Mar-07 13:03:44): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
Trace(2018-Mar-07 13:03:44): Updating plugin cache for Sophos System Protection
Trace(2018-Mar-07 13:03:44): Successfully updated plugin cache for Sophos System Protection
Trace(2018-Mar-07 13:03:44): SimpleProduct::DoAction isLater==true skipAction==false isUninstall)==truem_lastUpdateSucceeded==false numfilestocahce 1 Actiontype SetupNot preinstalled product
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: GetCacheDir
Trace(2018-Mar-07 13:03:44): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
Trace(2018-Mar-07 13:03:44): Null update
Trace(2018-Mar-07 13:03:44): ALUpdate(Action.Skipped): Sophos Network Threat Protection
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: OnNullUpdate
Trace(2018-Mar-07 13:03:44): SimpleProduct::DoAction isLater==true skipAction==false isUninstall)==truem_lastUpdateSucceeded==false numfilestocahce 1 Actiontype SetupNot preinstalled product
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: GetCacheDir
Trace(2018-Mar-07 13:03:44): Path to decode files to: C:\ProgramData\Sophos\AutoUpdate\cache\sophos_autoupdate1.dir\decode
Trace(2018-Mar-07 13:03:44): Null update
Trace(2018-Mar-07 13:03:44): ALUpdate(Action.Skipped): Sophos Endpoint Defense
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: OnNullUpdate
Trace(2018-Mar-07 13:03:44): SULUpdateLocation: Serialise
Trace(2018-Mar-07 13:03:45): RMSMessageHandler: ALUpdateEnd
Trace(2018-Mar-07 13:03:45): Sending message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate" />
Trace(2018-Mar-07 13:03:45): IPCSender::Write: Writing message: <?xml version="1.0" encoding="utf-8" ?><Config type="RMSEndUpdate" />
Trace(2018-Mar-07 13:03:45): Telemetry::LoadTelemetrySupplement 344: Telemetry Interval set to 86400 seconds
Trace(2018-Mar-07 13:03:45): IPCSender::ProcessSend: Listener not ready starting to wait
Trace(2018-Mar-07 13:03:45): Telemetry::LoadDocument 218: C:\ProgramData\Sophos\AutoUpdate\\Config\TelemetryConfig.json loaded
Trace(2018-Mar-07 13:03:45): Telemetry::LoadTelemetrySupplement 385: Telemetry Interval updated to 86400 seconds
Trace(2018-Mar-07 13:03:45): Telemetry::CalculateLastTelemtryTime 134: Telemetry last ran at 2018-03-06 20:54:24, Offset 699, Offset Time 2018-03-06 21:06:03
Trace(2018-Mar-07 13:03:45): Telemetry::HasTelemetrySchedulePeriodElapsed 157: Telemetry schedule has not elapsed.
Trace(2018-Mar-07 13:03:46): IPCSender::ProcessSend exiting
Trace(2018-Mar-07 13:03:46): ALUpdate finished

on the server that is currently unmanaged by SEC and where the spam-rules-updates work fine, the primary update path is set to "sophos"; on the second server managed by SEC it's using the policy centrally deployed through SEC; this policy contains a CID as the primary source, and "sophos" as the secondary.
i also had a look at the file iupd.cfg as i saw some hints saying it might be involved here, and found that it looks different on the two machines:


contents of iupd.cfg from the working machine:

;****************************************************************************
;
; iupd.cfg
;
; Please do not edit this text file.
;
;
;****************************************************************************

;RMS 2000/XP
[iProductData.{390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92}]
AllowLocalConfig = 1
Action = 0x400000

;RMS 98/Me
[iProductData.{D752FAB9-5883-4b36-8740-61565B6BAD29}]
AllowLocalConfig = 1
Action = 0x200100

;SAV 2k =
[iProductData.{E17FE03B-0501-4aaa-BC69-0129D965F311}]
AllowLocalConfig = 1
Action = 0x400007

;SAV NT4
[iProductData.{7998C326-2CA5-4830-B7D2-B792D2460975}]
AllowLocalConfig = 1
Action = 0x400000

;SAV 98/Me
[iProductData.{3B758ED7-87C1-4e89-BDE1-F49DFF1249F6}]
AllowLocalConfig = 1
Action = 0x200007

;PureMessage Spam Rules
[iProductData.{B5E7E2A7-3B64-437D-801F-21CC9D67CC6D}]
AllowLocalConfig = 1
Action = 0x410007
[global.IntelligentUpdating]
Enabled = 0
SubscriptionID =
PortNumber = 51235

and the one from the none working machine:

;****************************************************************************
;
; iupd.cfg
;
; Please do not edit this text file.
;
;
;****************************************************************************

;RMS 2000/XP
[iProductData.{390DCDC2-10A9-4ef3-B8D8-0CA7F0E7EB92}]
AllowLocalConfig = 1
Action = 0x400007

;RMS 98/Me
[iProductData.{D752FAB9-5883-4b36-8740-61565B6BAD29}]
AllowLocalConfig = 1
Action = 0x200107

;SAV 2k =
[iProductData.{E17FE03B-0501-4aaa-BC69-0129D965F311}]
AllowLocalConfig = 1
Action = 0x400007

;SAV NT4
[iProductData.{7998C326-2CA5-4830-B7D2-B792D2460975}]
AllowLocalConfig = 1
Action = 0x400000

;SAV 98/Me
[iProductData.{3B758ED7-87C1-4e89-BDE1-F49DFF1249F6}]
AllowLocalConfig = 1
Action = 0x200007

;PureMessage Spam Rules
[iProductData.{B5E7E2A7-3B64-437D-801F-21CC9D67CC6D}]
AllowLocalConfig = 1
Action = 0x410007
[global.IntelligentUpdating]
Enabled = 1
SubscriptionID = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX  (obfuscated)
PortNumber = 51235

If i can't find a solution for that issue, i'll quite probably have to go through uninstalling SESC from the machine again, followed by a reinstallation using the standalone-installer. 
what makes me worry, is the fact that we're also using the Active Directory synchronisation feature within SEC, and we rely on the related feature to automatically install Sophos software on all machines. I wonder if it will suddenly start to (re)install SESC on the "standalone" machine just because of its presence in Active Directory, which will undoubtedly break the spam-rules updating again...

Hello Patrick Tippner,

as for AD Sync with automatic protection: Unless you delete a computer from the console automatic protection will not be retried once it has been done - whether successfully or not.

Strange as it is but on the managed server the download from Sophos fails miserably, i.e. it doesn't get as far as trying the SPAM rules. Comparing the relevant parts of the logs:

Trace(2018-Mar-07 13:00:26): Adding Sophos Update Location: dci.sophosupd.com/update
Trace(2018-Mar-07 13:00:26): Adding Sophos Update Location: dci.sophosupd.net/update
Trace(2018-Mar-07 13:00:26): No manually configured proxy.
Trace(2018-Mar-07 13:00:26): SULDownloader setup successful.
Trace(2018-Mar-07 13:00:26): SubscriptionProvider: 7ba49542-049c-4154-aad9-cf19a9ec7be5/10.7.6.2.3702.1/
Trace(2018-Mar-07 13:00:28): Enumerating available product versions...
Trace(2018-Mar-07 13:00:28): Failed to authenticate


Trace(2018-Mar-07 13:03:37): Adding Sophos Update Location: dci.sophosupd.com/update
Trace(2018-Mar-07 13:03:37): Adding Sophos Update Location: dci.sophosupd.net/update
Trace(2018-Mar-07 13:03:37): No manually configured proxy.
Trace(2018-Mar-07 13:03:37): SULDownloader setup successful.
Trace(2018-Mar-07 13:03:37): SubscriptionProvider: StandaloneWindows/RECOMMENDED/10
Trace(2018-Mar-07 13:03:38): No resubscription attribute found.
Trace(2018-Mar-07 13:03:38): SubscriptionProvider: StandaloneWindows/RECOMMENDED/10
Trace(2018-Mar-07 13:03:38): SULUpdateLocation: SubscribePEXProducts

Now I assume you have used the same Sophos credentials for the SA install and for the Secondary location in your updating policy - but then it should work.

Christian

Hi Christian,

Thanks for the clarification regarding the automatic protection -  at least that is a glimmer of hope ;)

I've double and triple checked the credentials provided for the download - they are definitely correct! What else would you suggest to isolate possible causes for the issue seen here?

- Patrick

Hello Patrick,

double and triple checked
the only possible error I can think of is that for the SA you've entered the credentials "by hand" and for SEC you've used copy-paste.

To check if there's not some obscure issue please create a new policy, set the Primary to some syntactically correct but invalid HTTP URL, set the Secondary to Sophos using the assumed-to-be-correct credentials, select the RECOMMENDED (guess this is the one you're using with PM) subscription. Fastest way is to use your PC, create a test-group as subgroup of the one your PC is in, move the endpoint there, assign the test updating policy. Once the endpoint complies request an update a check the results.
Just did it with my PC (to make sure there isn't any glitch with the latest SEC/SESC).

Christian 

Hi Christian,

thank you very much! Your hint led me into the right direction. Assigning a newly created policy containing that invalid HTTP url to the servers, and triggering the update from SEC, finally made the servers download the updates for Puremessage properly! After that, I tried the same with the standard policy, and it failed again although the credentials were definitely the correct! Then I used the "reset policy" function from the context menu and re-entered all the data once again. That seems to have fixed the standard policy in some way, because now the servers can also run the update successfully when they have the standard policy applied.

Cheers,

Patrick

Hi Christian,

thank you very much! Your hint led me into the right direction. Assigning a newly created policy containing that invalid HTTP url to the servers, and triggering the update from SEC, finally made the servers download the updates for Puremessage properly! After that, I tried the same with the standard policy, and it failed again although the credentials were definitely the correct! Then I used the "reset policy" function from the context menu and re-entered all the data once again. That seems to have fixed the standard policy in some way, because now the servers can also run the update successfully when they have the standard policy applied.

Cheers,

Patrick