Sophos Enterprise Console "Reommended" change

Hello Christian,

All departments have their own management server, just getting the updates from "my one"

I see. So they use "your" server (and not Sophos) as Source.

Guess I should explain how it works: An Update Manager expects the update source to be a Warehouse - ultimately the Warehouse is on a Sophos server. The Warehouse contains not only the files to be downloaded (in an encoded and checksummed form) but also metadata - a catalogs and descriptions of the available "stuff" as well as the data required for the consistency checks. The Sophos Warehouse is special insofar as it presents its contents depending on the information supplied by the SUM (mainly the credentials which are used to select the products you have licensed). Metadata also maps general (like 10.0 Recommended) to specific versions and controls automatic version upgrade when a version is (about to be) retired.

A SUM downloads all metadata it "sees" but of the production files only those belonging to a subscription to its Warehouse. While a downstream SUM (updating from this Warehouse) sees all metadata (and consequently can present e.g. versions 9.5, 9.7, 10.0 and 10.2 in the subscription selection) it can only download the versions its upstream (parent) SUM has subscribed to.

If you change the subscription in "your" server to 10.2 the department servers will continue to use 10.0 and subsequently the download of the product will fail. Similarly a department server subscribing to 10.2 will encounter a failure (unless your main server has also subscribed to 10.2).

If I understood you correctly the best way is to add a subscription for 10.2 - the departments then can elect to upgrade to 10.2 when needed or stay at 10.0. Note that they only have to change their Recommended subscription unless they want some of their clients to stay on 10.0 for now.

HTH

Christian     

Hello Christian,

All departments have their own management server, just getting the updates from "my one"

I see. So they use "your" server (and not Sophos) as Source.

Guess I should explain how it works: An Update Manager expects the update source to be a Warehouse - ultimately the Warehouse is on a Sophos server. The Warehouse contains not only the files to be downloaded (in an encoded and checksummed form) but also metadata - a catalogs and descriptions of the available "stuff" as well as the data required for the consistency checks. The Sophos Warehouse is special insofar as it presents its contents depending on the information supplied by the SUM (mainly the credentials which are used to select the products you have licensed). Metadata also maps general (like 10.0 Recommended) to specific versions and controls automatic version upgrade when a version is (about to be) retired.

A SUM downloads all metadata it "sees" but of the production files only those belonging to a subscription to its Warehouse. While a downstream SUM (updating from this Warehouse) sees all metadata (and consequently can present e.g. versions 9.5, 9.7, 10.0 and 10.2 in the subscription selection) it can only download the versions its upstream (parent) SUM has subscribed to.

If you change the subscription in "your" server to 10.2 the department servers will continue to use 10.0 and subsequently the download of the product will fail. Similarly a department server subscribing to 10.2 will encounter a failure (unless your main server has also subscribed to 10.2).

If I understood you correctly the best way is to add a subscription for 10.2 - the departments then can elect to upgrade to 10.2 when needed or stay at 10.0. Note that they only have to change their Recommended subscription unless they want some of their clients to stay on 10.0 for now.

HTH

Christian