Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 15 replies
  • Subscribers 1 subscriber
  • Views 7958 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Autoupdate failed and insufficient rights to do anything with Sophos

kiril982

Hi Sophos team,

I had to register as I have annoying problem with Sophos. The most I got from my IT admin (who is in Denmark while I am on a stay in China) is to uninstall it and instal something else. While that's the last option. I will give a last try to ask you.

I neither have the rights to manipulate with Sophos properly (it says "insufficient right"), nor the autoupdate funtion works. This is all from today when I tried to delete a virus or whatever was it from usb, and I noticed the first one. Once I tried to fix using your (increadibly confusing and overloaded) forums, the auto-update stoped working as well. Its a bit annoying and I got a bit frustrated.

1. I have tried to fix the "sufficient rights" issue by following your posted procedure i.e. updating the SID numbers using the SophosLocalGroups.txt file but it didn't work. I also downloaded some file, and than copied it in the indicated lcoation and run it (which was suppose to automatically updade the SIDS) but it was waste of time in both reading and doing it.

2. I have tried to fix the auto-update issue, i even don't remember what I did, but i stoped the Sophos virus protection and did what was written in your post and activated it again. It didn't work.

Is there any solution except spending hours and trying to understand what SID and DSN settings are or?

Thanks a lot,

Kiril

p.s. for the record, when I start up my pc, the notification appears with "Sophos Endpoing Secirity and Control updater has faild to download", and in the update log the following appears (the other updates seem to work properly- as it says in the log):

Time: 23-07-2012 23:37:14
Message: Could not connect to the server. Check that this computer is connected to the network and that Sophos AutoUpdate is configured to update from the correct location with the correct credentials and proxy details (if required)
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:13
Message: Downloading product Sophos AutoUpdate from server \\SOFUS\SophosUpdate\CIDs\S000\SAVSCFXP\
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:11
Message: Could not add a connection to server \\SOFUS\SophosUpdate; user djf\sophos; Windows error 53
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:09
Message: Could not connect to the server. Check that this computer is connected to the network and that Sophos AutoUpdate is configured to update from the correct location with the correct credentials and proxy details (if required)
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:08
Message: Downloading product SAVXP from server \\SOFUS\SophosUpdate\CIDs\S000\SAVSCFXP\
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:06
Message: Could not add a connection to server \\SOFUS\SophosUpdate; user djf\sophos; Windows error 53
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:04
Message: Could not connect to the server. Check that this computer is connected to the network and that Sophos AutoUpdate is configured to update from the correct location with the correct credentials and proxy details (if required)
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:03
Message: Downloading product RMSNT from server \\SOFUS\SophosUpdate\CIDs\S000\SAVSCFXP\
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:37:01
Message: Could not add a connection to server \\SOFUS\SophosUpdate; user djf\sophos; Windows error 53
Module: CIDUpdate
Process ID: 4808
Thread ID: 4412

Time: 23-07-2012 23:36:38
Message: *************** Sophos AutoUpdate started ***************
Module: ALUpdate
Process ID: 4808
Thread ID: 4412

:27249


This thread was automatically locked due to age.
Parents
  • 0

    Hi Christian,

    When I "View Sophos Network Communications Report", these two issues are noted:

    State of name resolution (DNS)Problem description :Overview :Possible cause :Action to repair :More information can be found in the Sophos knowledgebase :

    There is a problem communicating with the server.
    Failed to determine the IP address of the computer from its name. Communication cannot start until this problem is resolved.
    DNS is misconfigured or the information is missing or incorrect.
    Verify that the client can resolve the name of the server. Alternatively, use a static IP address on the server (this is the configuration recommended by Sophos).
    Access the Sophos knowledgebase

    Then, the next problem is:

    State of outgoing communications to serverProblem description :Overview :Possible cause :Action to repair :More information can be found in the Sophos knowledgebase :

    Communication failure.
    Failed to communicate with the server.
    "Sophos Message Router" service may be stopped on the server, or the server may be disconnected from the network, or a firewall may be blocking communications from the client to the server.
    Verify that the Sophos Message Router ports (by default 8192 and 8194) on the server are accessible by the computer with the problem. Also check networking and services on the server.

    The parent addresses are:

    Parent addresses :

    172.18.3.16,sofus.djf.agrsci.dk,sofus

    When I ping FQDN, it does not find the host FQDN.

    Is this "the end"? Should I follow the "Enterprise Console: DNS error" procedure for IP address?

    Regarding the usb, it's mine and was used on one Chinese pc, and when I used it in my pc, Sophos detected virus on the usb (can't see the log as I am not authorised- all my quarantine manager is frozen, even if I click view sophos website or security information, window pops out saying it can't find Google Chrome :(. But I remember it was *.exe file and Sophos reported many infected items inside it i.e. it reported only the exe file but in the "details" option were listed many names. I copied my usb content on my pc, formated the usb, scanned the copied folder (it was clean), and cut it back to my usb.

    Thanks,

    Kiril

    :27277
Reply
  • 0

    Hi Christian,

    When I "View Sophos Network Communications Report", these two issues are noted:

    State of name resolution (DNS)Problem description :Overview :Possible cause :Action to repair :More information can be found in the Sophos knowledgebase :

    There is a problem communicating with the server.
    Failed to determine the IP address of the computer from its name. Communication cannot start until this problem is resolved.
    DNS is misconfigured or the information is missing or incorrect.
    Verify that the client can resolve the name of the server. Alternatively, use a static IP address on the server (this is the configuration recommended by Sophos).
    Access the Sophos knowledgebase

    Then, the next problem is:

    State of outgoing communications to serverProblem description :Overview :Possible cause :Action to repair :More information can be found in the Sophos knowledgebase :

    Communication failure.
    Failed to communicate with the server.
    "Sophos Message Router" service may be stopped on the server, or the server may be disconnected from the network, or a firewall may be blocking communications from the client to the server.
    Verify that the Sophos Message Router ports (by default 8192 and 8194) on the server are accessible by the computer with the problem. Also check networking and services on the server.

    The parent addresses are:

    Parent addresses :

    172.18.3.16,sofus.djf.agrsci.dk,sofus

    When I ping FQDN, it does not find the host FQDN.

    Is this "the end"? Should I follow the "Enterprise Console: DNS error" procedure for IP address?

    Regarding the usb, it's mine and was used on one Chinese pc, and when I used it in my pc, Sophos detected virus on the usb (can't see the log as I am not authorised- all my quarantine manager is frozen, even if I click view sophos website or security information, window pops out saying it can't find Google Chrome :(. But I remember it was *.exe file and Sophos reported many infected items inside it i.e. it reported only the exe file but in the "details" option were listed many names. I copied my usb content on my pc, formated the usb, scanned the copied folder (it was clean), and cut it back to my usb.

    Thanks,

    Kiril

    :27277
Children
No Data