Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 17 replies
  • Subscribers 1 subscriber
  • Views 14381 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Policy not applied / computer deployed but cannot connect

Pierre

Dear readers and helpers,

We have a double issue with our Sophos Enterprise console 5.

1. I see only 5 computer connected instead of around 120.

2. Computers do not receive policies for Anti-virus and HIPS but receive for Firewall policies.

Where should i start investigating?

Thanks in advance,

:20839


This thread was automatically locked due to age.
Parents
  • 0

    Hello Pierre,

    I did not assume you deleted any.

    As the connections seem to work partially (and have worked in the past) I only briefly mentioned the Network Communications Report. Guess before calling Support (who might give you remote assistance, I can't tell) you should try the basic tests, i.e. telnetting from the client to the server on ports 8192 (this should respond with the IOR seen in the logs) and 8194 as well (if it works in principle you just get a connection without any data sent back which closes when you send some data). For completeness do the same in the other direction.

    One thing I forgot to mention - if the Last Message Time for the disconnected clients is recent (i.e. less than a day in the past) it won't help in determining when this "something" happened. But I think that the Up to date column in the Update Details tab should give a hint to the last time the majority of clients successfully reported back. Maybe this approximate time can help in finding the cause.

    If none of this gives any insight you should give Support a call. Please prepare some SDU logs (server and one or two clients). Sorry for wasting your time - I first thought this should be easier to sort out.     

    Christian

    :20931
Reply
  • 0

    Hello Pierre,

    I did not assume you deleted any.

    As the connections seem to work partially (and have worked in the past) I only briefly mentioned the Network Communications Report. Guess before calling Support (who might give you remote assistance, I can't tell) you should try the basic tests, i.e. telnetting from the client to the server on ports 8192 (this should respond with the IOR seen in the logs) and 8194 as well (if it works in principle you just get a connection without any data sent back which closes when you send some data). For completeness do the same in the other direction.

    One thing I forgot to mention - if the Last Message Time for the disconnected clients is recent (i.e. less than a day in the past) it won't help in determining when this "something" happened. But I think that the Up to date column in the Update Details tab should give a hint to the last time the majority of clients successfully reported back. Maybe this approximate time can help in finding the cause.

    If none of this gives any insight you should give Support a call. Please prepare some SDU logs (server and one or two clients). Sorry for wasting your time - I first thought this should be easier to sort out.     

    Christian

    :20931
Children
No Data