Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 12 replies
  • Subscribers 1 subscriber
  • Views 8955 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Message Relay function

Azwan

Hi All,

As per subject above appreciate if someone can guide or explanation regarding message relay e.g message relay frequent udate or how it relay endpoint message once receive. 

Reason is customer informed that  console status didn't tally/reported back to console, example trying to performed device exemption on console once user plugin USB device and blocked however consolde didn't receive the message .

Restarting services below are also didn't have any effect when try to exempt device as mention above. Thanks

-----------------------------------------

Stop the "Agent" service
Stop the "Sophos Message Router" service

C:\ProgramData\Sophos\Remote Management System\3\Router\Envelopes
Delete all msg files present

C:\ProgramData\Sophos\Remote Management System\3\Router
Delete 'table_router.txt'

Start the "Agent" service
Start the "Sophos Message Router" service

---------------------------------------------------------

Console:

Windows Win2008

Sophos Enterprise Console v5

MSSQL 2008 R2

8192-8193,8194 open

Relay server:

Windows 2003

8192-8193,8194 open

:26995


This thread was automatically locked due to age.
Parents
  • 0

    Hello Azwan,

    if I didn't forget something then inferring from these results device control events should also be forwarded to the console. Note that a message can be delayed at any point and is kept for some time when it can't be passed on (which might also be on the management server which could have received it via RMS from the relay but not yet passed it on the EM) - but if you clear the envelopes folder the unsent messages are lost (it is store-and-forward not end-to-end) and you'd have to recreate the event to work on it.

    Christian

    :27017
Reply
  • 0

    Hello Azwan,

    if I didn't forget something then inferring from these results device control events should also be forwarded to the console. Note that a message can be delayed at any point and is kept for some time when it can't be passed on (which might also be on the management server which could have received it via RMS from the relay but not yet passed it on the EM) - but if you clear the envelopes folder the unsent messages are lost (it is store-and-forward not end-to-end) and you'd have to recreate the event to work on it.

    Christian

    :27017
Children
No Data