Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 1 subscriber
  • Views 7847 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SEC 5.1 on air-gapped network - delivery failed for software subscription

eblonk

I installed SEC 5.1 on the server of an air-gapped network. It is the only server (and therefore the DC). It is a Windows Server 2008 R8. I have created an account that is a member of domain admins.

I followed the instruction for setting up updating in an air-gapped network. When updating the server itself, it fails. The first few tries (5 or so) it updated the time-stamp on the warehouse directory in the sophosupdate share but the contents of the share remain in the 500K area. I realise it will not copy the entire contents of the copied warhouse directory (230MB) but this seems a bit to small. The subscription is for Windows 2000 and up.

This night the threat detection data update failed as well.

To my knowledge the involved accounts have all necessary rights. When I deleted the Sophosupdate warehouse directory (as per http://www.sophos.com/en-us/support/knowledgebase/66176.aspx ) it did rebuild it (again with a very small size). It did not rebuild the Decoded-SDDM in the working directory. I'm inclined to think the source update location is available, despite the error message, as the warehouse is being rebuild, albeit incomplete.

Factoids:

- The application log of the server gives this message

Synchronize operation failed when synchronizing product release 'F26F7EC0-1302-4DA7-8B6B-A5383051D41A'. Details: Cannot create stream fa029446aec315089f873009cef7bda8x000.xml

It is followed up by 3 messages (all the same) which refer back to it. This happens each time I start an update.

- The bootstrap location refers to the non-existent \\server\sophosupdate\CIDs\S000

- The firewall is turned off, services are running

I can't see what might be wrong, i.e. why the software doesn't update and create the CIDs directory.

:25783


This thread was automatically locked due to age.
Parents
  • 0

    I have got the exact situation in my environments as well, 

    Air gap in 2008 r2 server where SEC 5.1 is installed and has got windows 7 and 2008 r2 clients.

    Non air gap Network / Provider is Windows 7 Professional workstation.

    I have installed SEC 5.1 in both the Win7 and Win2k8 r2 environments, created all the folders, user accounts and copied the warehouse directory and while protecting the computers from the groups with in SEC 5.1 Console on air gap network, it just ends up with errors and when checked with resolve alerts & errors option by right clicking on it, it willl display nothing on it.

    I have emailed all the diagnostic logs using the sdu utility and emailed all the configurations screenshots and i am still waiting for the solution from Sophos about this. All they suggested me is to reinstall SEC 5.1 which i am assuming it will be the same problem, but i will give it a go. 

    Meanwhile, please let me know if you have found any solution to this situation.

    Thanks

    :36879
Reply
  • 0

    I have got the exact situation in my environments as well, 

    Air gap in 2008 r2 server where SEC 5.1 is installed and has got windows 7 and 2008 r2 clients.

    Non air gap Network / Provider is Windows 7 Professional workstation.

    I have installed SEC 5.1 in both the Win7 and Win2k8 r2 environments, created all the folders, user accounts and copied the warehouse directory and while protecting the computers from the groups with in SEC 5.1 Console on air gap network, it just ends up with errors and when checked with resolve alerts & errors option by right clicking on it, it willl display nothing on it.

    I have emailed all the diagnostic logs using the sdu utility and emailed all the configurations screenshots and i am still waiting for the solution from Sophos about this. All they suggested me is to reinstall SEC 5.1 which i am assuming it will be the same problem, but i will give it a go. 

    Meanwhile, please let me know if you have found any solution to this situation.

    Thanks

    :36879
Children
No Data