Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 10 replies
  • Subscribers 1 subscriber
  • Views 3481 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

NAC Compliance Check Error after Update

Gorek

Hello,

yesterday all my Clients got updated to Sophos Endpoint Security and Control 10.0.10, without any problems. But since this morning 500 clients report an error with compliance check.

Has anyone else the same issues?

Best regards,

Robby Gorek

:35973


This thread was automatically locked due to age.
  • 0

    UPDATE:

    All Clients with Compliance Agent are showing an Check error.

    :35979
  • 0

    Hello

    I have a similar problem. 

    After many tests, I deleted in my NAC policy "period of grace Signature" and check error disappeared ... but now .. it appears again gradually.....

    I don't understand the logic ...

    :35991
  • 0

    We are seeing the same thing this morning.  After clients updated to 10.0.10, any that had the Compliance Agent installed started showing as having errors in SEC.  The only error found was that the NAC Details tab was showing as "Assessment Failure"

    Update from my Support ticket :



    This is a known issue and development has been investigating it. I don't have
    an update at this time but I'll keep your case open to ensure that it gets
    resolved. In the interim, we would recommend that you modify the NAC
    policy so that you are using ‘‘‘‘Report Only’’’’ or ‘‘‘‘Remediate’’’’ rather than ‘‘‘‘Enforce’’’’
    to prevent machines from being quarantined.

    :35999
  • 0

    A have the same problem - endpoint showing Assessment failure in Sophos Enterprise Console and NAC Agent in tray showing 

    "The agent was unable to assess the policy. If this problem persists, contact your administrator to report the problem. (Reason Unknown)"

    Below is a log from NAC Agent:

    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 874|Evidence: Info Msg: Log Created at: 12/05/2012 08:40:29
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 802|Evidence: Info Msg: Product Version Info Msg: 3.9.40.0
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: Username VALUE: <not set> SOURCE: <none>
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: Password VALUE: <not set> SOURCE: <none>
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Logging enabled VALUE: true SOURCE: Ini File
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Logging VALUE: 1 SOURCE: Ini File
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Ini File VALUE: C:\ProgramData\Sophos\Sophos Compliance Agent\Data\agent.ini SOURCE: Internal
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Save Username VALUE: false SOURCE: Ini File
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Save Password VALUE: false SOURCE: Ini File
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Working Directory VALUE: C:\Program Files\Sophos\Sophos Compliance Agent SOURCE: Internal
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Log Directory VALUE: C:\ProgramData\Sophos\Sophos Compliance Agent\Logs SOURCE: Internal
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Data Directory VALUE: C:\ProgramData\Sophos\Sophos Compliance Agent\Data SOURCE: Internal
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: Registration Type VALUE: <not set> SOURCE: <none>
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Log Lifetime VALUE: 24 SOURCE: Ini File
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Notify Action VALUE: 1 SOURCE: Ini File
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Show Registration Icon VALUE: true SOURCE: Ini File
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Show Results Icon VALUE: true SOURCE: Ini File
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Show Override Icon VALUE: false SOURCE: Ini File
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: Show Noncompliant Icon VALUE: <not set> SOURCE: <none>
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: Show Compliant Icon VALUE: <not set> SOURCE: <none>
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: Show Partial Icon VALUE: <not set> SOURCE: <none>
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: Show Default Icon VALUE: <not set> SOURCE: <none>
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: Show Report Mode Icon VALUE: <not set> SOURCE: <none>
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: Show Remediate Mode Icon VALUE: <not set> SOURCE: <none>
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: Show Timer Icon VALUE: <not set> SOURCE: <none>
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Show Progress VALUE: false SOURCE: Ini File
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Notify VALUE: 1 SOURCE: Ini File
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Show Exit VALUE: false SOURCE: Ini File
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Basic Auto Register VALUE: true SOURCE: Ini File
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Show Errors in Results VALUE: true SOURCE: Ini File
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Show Extended Error Information VALUE: true SOURCE: Ini File
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Show logging VALUE: true SOURCE: Ini File
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: ProxyUsername VALUE: <not set> SOURCE: <none>
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: ProxyPassword VALUE: <not set> SOURCE: <none>
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Save Proxy Username VALUE: true SOURCE: Ini File
    12/05/12 08:40:29|TID: 6068|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Save Proxy Password VALUE: true SOURCE: Ini File
    12/05/12 08:40:35|TID: 6068|ID: 2147500037|File: InterpretMessages.cpp|Line: 85|Evidence: TID: 6068 Info Msg: Policy Interpret has returned an error Stack Dump:
    12/05/12 08:40:39|TID: 6068|ID: 2147500037|File: InterpretMessages.cpp|Line: 85|Evidence: TID: 6068 Info Msg: Policy Interpret has returned an error Stack Dump:

    or 

    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 874|Evidence: Info Msg: Log Created at: 12/05/2012 08:12:39
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 802|Evidence: Info Msg: Product Version Info Msg: 3.9.40.0
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: Username VALUE: <not set> SOURCE: <none>
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: Password VALUE: <not set> SOURCE: <none>
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Logging enabled VALUE: true SOURCE: Ini File
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Logging VALUE: 1 SOURCE: Ini File
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Ini File VALUE: C:\ProgramData\Sophos\Sophos Compliance Agent\Data\agent.ini SOURCE: Internal
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Save Username VALUE: false SOURCE: Ini File
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Save Password VALUE: false SOURCE: Ini File
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Working Directory VALUE: C:\Program Files\Sophos\Sophos Compliance Agent SOURCE: Internal
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Log Directory VALUE: C:\ProgramData\Sophos\Sophos Compliance Agent\Logs SOURCE: Internal
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Data Directory VALUE: C:\ProgramData\Sophos\Sophos Compliance Agent\Data SOURCE: Internal
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: Registration Type VALUE: <not set> SOURCE: <none>
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Log Lifetime VALUE: 24 SOURCE: Ini File
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Notify Action VALUE: 1 SOURCE: Ini File
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Show Registration Icon VALUE: true SOURCE: Ini File
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Show Results Icon VALUE: true SOURCE: Ini File
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Show Override Icon VALUE: false SOURCE: Ini File
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: Show Noncompliant Icon VALUE: <not set> SOURCE: <none>
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: Show Compliant Icon VALUE: <not set> SOURCE: <none>
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: Show Partial Icon VALUE: <not set> SOURCE: <none>
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: Show Default Icon VALUE: <not set> SOURCE: <none>
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: Show Report Mode Icon VALUE: <not set> SOURCE: <none>
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: Show Remediate Mode Icon VALUE: <not set> SOURCE: <none>
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: Show Timer Icon VALUE: <not set> SOURCE: <none>
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Show Progress VALUE: false SOURCE: Ini File
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Notify VALUE: 1 SOURCE: Ini File
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Show Exit VALUE: false SOURCE: Ini File
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Basic Auto Register VALUE: true SOURCE: Ini File
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Show Errors in Results VALUE: true SOURCE: Ini File
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Show Extended Error Information VALUE: true SOURCE: Ini File
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Show logging VALUE: true SOURCE: Ini File
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: ProxyUsername VALUE: <not set> SOURCE: <none>
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 738|Evidence: Info Msg: Application Setting NAME: ProxyPassword VALUE: <not set> SOURCE: <none>
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Save Proxy Username VALUE: true SOURCE: Ini File
    12/05/12 08:12:39|TID: 4196|ID: 0|File: AgentApp.cpp|Line: 730|Evidence: Info Msg: Application Setting NAME: Save Proxy Password VALUE: true SOURCE: Ini File
    12/05/12 08:13:05|TID: 4196|ID: 2147500037|File: InterpretMessages.cpp|Line: 85|Evidence: TID: 4196 Info Msg: Policy Interpret has returned an error Stack Dump:
    12/05/12 08:18:19|TID: 7592|ID: 2147944122|File: ContinuousApi.cpp|Line: 490|Evidence: TID: 7592 Msg: A COM method call failed. Method: m_spContinuousApi->EnforceFullCompliance() m_bstrUsername: 10556891-FF02-4022-BF74-A0449451DFA7 Stack Dump:
    12/05/12 08:18:40|TID: 6360|ID: 2147944122|File: ContinuousApi.cpp|Line: 490|Evidence: TID: 6360 Msg: A COM method call failed. Method: m_spContinuousApi->EnforceFullCompliance() m_bstrUsername: 10556891-FF02-4022-BF74-A0449451DFA7 Stack Dump:
    12/05/12 08:24:00|TID: 7508|ID: 2147944122|File: ContinuousApi.cpp|Line: 490|Evidence: TID: 7508 Msg: A COM method call failed. Method: m_spContinuousApi->EnforceFullCompliance() m_bstrUsername: 10556891-FF02-4022-BF74-A0449451DFA7 Stack Dump:
    12/05/12 08:24:12|TID: 2976|ID: 2147944122|File: ContinuousApi.cpp|Line: 533|Evidence: TID: 2976 Msg: A COM method call failed. Method: m_spContinuousApi->EnforceCurrentPolicy m_bstrUsername: 10556891-FF02-4022-BF74-A0449451DFA7 Error Object Info: This object does not implement the ISupportError interface. Stack Dump:
    12/05/12 08:36:26|TID: 7504|ID: 2147944122|File: ContinuousApi.cpp|Line: 490|Evidence: TID: 7504 Msg: A COM method call failed. Method: m_spContinuousApi->EnforceFullCompliance() m_bstrUsername: 10556891-FF02-4022-BF74-A0449451DFA7 Stack Dump:

    :36011
  • 0

    Yesterday i've contacted the Sophos support. It's a known issue from many customers and they are working to resolve it.

    So we can just wait for an suggestion.

    :36013
  • 0

    Just a quick update to let you know that engineering are working on a fix for this issue and we will get it out to you as soon as we can, we currently hope this will be before the end of week.

    Darren Teagles.

    Senior Product manager.

    :36039
  • 0

    Yes, since last night the number of clients with errors is going down. Seems they fixed the issue. Just waiting for a final reply from the support.

    :36049
  • 0

    Hi all,

    the number went down from 556 to 326.

    Apparently something has been pushed.

    It is so unlucky ... whenever i plan to go into Enforce mode, some mishap happens.

    First it was False Positive and now this.

    Regards
    FK

    :36051
  • 0

    Apologies for the late reply on here, the update went out late yesterday and I have been out of the office and not able to post a reply until now..

    Hopefully all your endpoints are now behaving correctly.

    Darren.

    :36075