PureMessage Threat Detection Data out of date messages

Question

Hi there,

Running Sophos PureMessage for Exchange and every night past few weeks I get a mail alert telling me:

The following detection data is out of date on server MAIL01:

Threat detection data

Please ensure Sophos AutoUpdate is configured and working correctly on the server.

I'm unsure whether that is accurate or if it is a false alarm so to speak as the updates seem to be working.

Can someone also please clarify that by running the auto-update on the Endpoint it updates the PureMessage definitions also. I have this set to update via local server first and second the Sophos server. Runs every 10 mins. From the product info page on the endpoint just now:

[Updating]
-[ Software]
Sophos AutoUpdate 2.9.0.344
Last checked for updates 18/09/2014 09:25:34
Update status Success

From PureMessage:

Spam detection engine version:	2.7.2
Spam detection data version:	2014.9.18.81819

So I suppose my question is why am I getting the alerts and how can I check if everything seems to be working properly?

Appreciate the feedbackl!

Thanks

This thread was automatically locked due to age.

QC · Accepted Answer

Hello bg80, auto-update on the Endpoint it updates the PureMessage definitions also[?] yes, but the SpamRules are updated directly from Sophos (that's why you need to set it as Secondary) Threat detection data are for the Anti-Virus (as opposed to Anti-Spam) component. Please check the Anti-virus and HIPS/Software section on the product info page.  Sophos AutoUpdate 2.9.0.344 suggests that you use the Previous Extended subscription of the Endpoint component (which is 10.2.9, this is AFAIK the only version still using AutoUpdate 2.9.0) - why? Guess it is working and the issue might actually be with the supplied detection data but I won't venture an answer without the Software information :smileyhappy:. Christian :53389