This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Enterprise Console 4.5.1.0 Issue

Hi folks,

Scenario:

Enterprise Console Server - Windows Server 2008 R2 Enterprise (64 Bit) on MS Hyper-V

Client PC - Windows 7 Enterprise joined to work domain, Windows Firewall turned off.

I'm trying to deploy Sophos Anti-Virus (Version 9.5) from Enterprise Console 4.5.1.0. Initially the installation appears to succeed. A warning message appears stating that the PC requires a restart. On restarting the PC Enterprise Console sees it as disconnected and still requiring a restart.

I have also noticed that the Event Viewer on the client PC states that the Sophos Message Router and Sophos Agent Services have terminated several times (Event ID 7031). The Sophos Agent Server can be started manually but stops almost immediately. When attempting to manually start the Message Router service an "error 1607" message appears saying the service terminated unexpectedly.

Any ideas as to what is happening here or a possible solution would be much appreciated.

Best regards,

John P

:5502


This thread was automatically locked due to age.
  • Hi Spoddy,

    I were the same problem with a client.

    The machine were with Forefront Client installed, after remove, the problem was solved.

    Try it and if you have success, please, let me know.

    Best regards,

    Mocelim

    :12031
  • We too were affected by this problem.  We use the Microsoft Firewall Client 4.0 (Build 4.0 3442.654) on both Windows XP SP3 and Windows 7 Enterprise x64 SP1.  We found that with the ISA Client running, we could not switch on Web Protection.

    We have now upgraded to Sophos V9.7, but are still seeing some issues.

    For the Windows XP computers,  I see the error “a0580006 Web protection error (incompatible program: Microsoft Firewall Client)” listed in the Enterprise Console for computers with Sophos 9.7 installed plus Web Protection enabled.  Despite this error message, it does actually seem that Sophos and Web Protection are operating properly. 

    In the Enterprise Console log, I see:

    20/06/2011 11:07:47 a0580006 Web protection error (incompatible program: Microsoft Firewall Client)

    However, visiting the http://sophostest.com/malware/index.html site, I see the Sophos pop-up blocking the site, and in the Enterprise Console log, I can see:

    Latest blocked websites
    Date/time User Threat name Blocked site Referring siteReference ID
    20/06/2011 11:40:39 Mal/HTMLGen-A sophostest.com/malware/index.htmlsophostest.com 577

    For Windows 7 computers, I see a different behaviour.  With Sophos 9.7 deployed running Web Protection plus running the Microsoft Firewall Client for ISA, I see that the Sophos Agent and Sophos Message Router services failing:

    Log Name: System
    Source: Service Control Manager
    Date: 17/06/2011 09:58:35
    Event ID: 7031
    Task Category: None
    Level: Error
    Keywords: Classic
    User: N/A
    Computer:
    Description:
    The Sophos Message Router service terminated unexpectedly. It has done this 45 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

    Log Name: System
    Source: Service Control Manager
    Date: 17/06/2011 09:59:04
    Event ID: 7031
    Task Category: None
    Level: Error
    Keywords: Classic
    User: N/A
    Computer:

    Description:
    The Sophos Agent service terminated unexpectedly. It has done this 42 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.

    Switching off the Web Protection, or uninstalling the Microsoft Firewall Client for ISA resolves this issue on the Windows 7 computers.

    Is anyone else seeing this same issue with Windows 7?

    Regards,

    Steve

    :14155
  • Having the same issue since yesterday.

    Apparently Sophos updated itself last night and now states:

    Web Protection error (incompatible program: Microsoft Firewall Client)

    Sophos version 9.5

    Any way to fix it?

    Edit: Sophos version 10.0, seems to happen during the update from 9.5 to 10.

    :27451