Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 8454 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Enterprise console reporting machines not up to date....

JustinDevereaux

Sophos ESC 9.5, Enterprise Console 4.5, for some reason I have large numbers of machines reporting they are not up to date,  "Last updated on:"  and the time being 15 minutes or so earlier. Why is this?  Is there something misconfigured, or does Sophos tend to do weird things like this? Anyone know of a fix?

Cheers

JD

:4781


This thread was automatically locked due to age.
  • 0

    This is a simplified description:

    It's not the machines reporting (if we are talking about "Up to date - Not since ..."). Whenever a client updates (i.e. not checking but actually updating) it notifies SEC of the package it has installed. And when a newer package is available SEC sets this indicator if the client hasn't reported back after some time (and hasn't "logged off", i.e. disconnected) - and behaviour obviously differs a little for simple threat detection data (IDE) updates.

    It depends on the client's updating schedule how long it takes for a client to download the new package, install it and report back and the indicator to disappear (if it is set). If it doesn't go away at all it might indicate a problem on the client(s). Just wait for a while :smileyhappy:  (and check the Computer details for Last message received from computer).

    You might also see this indicator for machines which appear connected (and which you therefore expect to be up to date).

    Christian

    :4786
  • 0

    This has been a problem since SEC version 4.x and still plagues our enviroment in version 5.x. I came in twice this week and found that 43% of our managed computers are 'out-of-date'. Check the computer states it's up-to-date. However, viewing the computer details indicate the 'last message recieved' was over 24 hrs and the same for the 'up to date' detail.

    Any ideas on how to resolve this and have SEC report accurately.

    :23525
  • 0

    Have you tried restarting the message service on your Enterprise server?

    :23577
  • 0

    @keystroke13 - look in your "Envelopes" folder. There shouldn't be very much in it at all (one file per PC which isn't switched on, give or take a few dozen).

    If there are lots, follow this procedure:

    http://www.sophos.com/support/knowledgebase/article/63588.html

    :23707