Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 18623 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

PureMessage 3.1.3

Jeffrey_blancha

I am getting an error on one of my Exchange 2007 Hub Transport servers which has PureMessage 3.1.3 on it. The event id is:

Log Name:      Application
Source:        PureMessage
Date:          3/27/2014 9:54:48 AM
Event ID:      4
Task Category: None
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      XXXXXXXXXXXXXXXXX
Description:
Threat detection data is too old. Please update Sophos Anti-Virus.
Event Xml:
<Event xmlns="schemas.microsoft.com/.../event&quot;>
  <System>
    <Provider Name="PureMessage" />
    <EventID Qualifiers="40960">4</EventID>
    <Level>3</Level>
    <Task>0</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-03-27T13:54:48.000Z" />
    <EventRecordID>9475004</EventRecordID>
    <Channel>Application</Channel>
    <Computer>XXXXXXXXX</Computer>
    <Security />
  </System>
  <EventData>
  </EventData>
</Event>

 It happens over, and over, and over... You get the point. I am able to do an update succerssfully. I have rebooted the server.

:48562


This thread was automatically locked due to age.
  • 0

    Same here, we're getting 5 events a second. Please Sophos come with a solution for this !

    :49048
  • 0

    Hi,

    The 'Threat detection data is too old' error occurs when PureMessage detects that the detection data within the local Sophos Anti-Virus desktop scanning installation is out of date.

    Please re-post with the below details from within:

    Sophos Anti-Virus \ View Product Information \ Anti-virus and HIPS \ Software

    Detection engine

    Detection data

    Virus Data date

    Items detected

    'Items detected' should match the below value:

    PureMessage \ Help and information \  Total detectable threats

    Please also confirm whether this value matches in your reply.

    Regards,

    Reginald

    :49054
  • 0

    Hi Reginald,

    Here's my data&colon;

    Detection engine3.48.0
    Detection data4.96G
    Virus data date11-12-2013
    Items detected6157512
      

    Puremessage:

    Total detectable threats:6157512
    :49058
  • 0

    Hi,

    This seems to highlight the problem, the 4.96G data is from December last year - as we are now in April this is around 4 months old.

    There are typically 3 versions supported at any time:

    http://www.sophos.com/downloads/ide/

    4.96G is listed at the moment but will disappear shortly. Another factor is that there was no data release in March this year, so December's 4.96G is currently the oldest supported version but this would otherwise have been the January 4.97G data.

    Updating the local Sophos Anti-Virus version to 4.97G data or later should resolve this error.

    If you are not seeing this on other servers then this server is probably the only one on the 4.96G data.

    Regards,

    Reginald

    :49074
  • 0

    Thanks! That fixed the problem for us !

    :49076
Unfiltered HTML