Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 17 replies
  • Subscribers 1 subscriber
  • Views 14381 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Policy not applied / computer deployed but cannot connect

Pierre

Dear readers and helpers,

We have a double issue with our Sophos Enterprise console 5.

1. I see only 5 computer connected instead of around 120.

2. Computers do not receive policies for Anti-virus and HIPS but receive for Firewall policies.

Where should i start investigating?

Thanks in advance,

:20839


This thread was automatically locked due to age.
Parents
  • 0

    Hello Pierre,

    this is somewhat strange (at least it looks so to me):  Around 15:45 some policies are enqueued for the client but (unless you deleted many lines) never seem to get delivered (the corresponding lines would be like: Supplying message (id=01140DCA ) to Router$ .mitmngd01:9078 . The rest is just the server talking to itself. 

    From the snippets it looks like the client's RMS is able to log on but then the communication stalls. What of the other clients BTW? Are still just a few connected (and actually communicating - you can check this by the Last message time in SEC/Computr details)? I'm still thinking about which change could cause such an issue. Can you see any TCP connections to port 8194 (from client to server and v.v.)?

    Christian

    :20913
Reply
  • 0

    Hello Pierre,

    this is somewhat strange (at least it looks so to me):  Around 15:45 some policies are enqueued for the client but (unless you deleted many lines) never seem to get delivered (the corresponding lines would be like: Supplying message (id=01140DCA ) to Router$ .mitmngd01:9078 . The rest is just the server talking to itself. 

    From the snippets it looks like the client's RMS is able to log on but then the communication stalls. What of the other clients BTW? Are still just a few connected (and actually communicating - you can check this by the Last message time in SEC/Computr details)? I'm still thinking about which change could cause such an issue. Can you see any TCP connections to port 8194 (from client to server and v.v.)?

    Christian

    :20913
Children
No Data