This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Remove errors from Database

Unfortunatly Sophos is messed up again and it is getting very agravating.

We have Sophos Enpoint Protection with Sophos Enterprise Console, 500+ computers.

1st Problem: About a month ago the Sophos Console keeps reporting that computers are not up to date, but when checking the computer itself, it IS up to date. You can resolve this issue by right-clicking on the computer and choosing update now. Its very annoying to have to do this multiple times a day.

2nd Problem: Sophos Dashboard ware reporting 34 "Computers with Errors", but when manually counting the computers there were only 7 actual computers with errors.

3rd Problem: A week ago we took the Sophos update server down for Maintenence. During this time most of the computers went to update and were unsuccessful at retrieving the updates from the primary location (Update server), now a week later with all computers up to date I am sitting here with a 94% error rate "Download of AutoUpdate Failed"

I need a response from Sophos on how to resolve these issues, if it was up to me I would just purge the entire database and start from scratch, unfortunatly we have clients that need us to maintain records for at least 90 days, so that would be an issue. Another solution would be to purge all errors from the database, unfortunatley the PurdgeDB tool seems useless for this task as I need the computers and all other information to remain, I strictly need to purge the errors from the database.

Thanks.

:35405


This thread was automatically locked due to age.
Parents
  • Hello Lee7,

    2nd Problem

    How did you "count manually"?

    The other two problems seem to be related - can't say what the cause could be but it looks like the clients fail to send the regular reports about them updating. Strange though that they apparently respond to an Update now request.

    What's the Last message time of the clients reporting Download of AutoUpdate Failed? Do they also correct their status after an Update now request (I'd check only on one or two first). Further possible checks if they are reporting in real-time are changing the AV policy and triggering a detection (using EICAR). If all this works as expected (and perhaps the update status is also corrected) then it's probably necessary to comb through the Router and Agent logs.

    Christian

    :35461
Reply
  • Hello Lee7,

    2nd Problem

    How did you "count manually"?

    The other two problems seem to be related - can't say what the cause could be but it looks like the clients fail to send the regular reports about them updating. Strange though that they apparently respond to an Update now request.

    What's the Last message time of the clients reporting Download of AutoUpdate Failed? Do they also correct their status after an Update now request (I'd check only on one or two first). Further possible checks if they are reporting in real-time are changing the AV policy and triggering a detection (using EICAR). If all this works as expected (and perhaps the update status is also corrected) then it's probably necessary to comb through the Router and Agent logs.

    Christian

    :35461
Children
No Data