This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Moving to a new Sophos server

I have a weird issue – a server caught in limbo. I have created a VB script using the tool that a Sophos tech told me about that will point my Sophos client servers from one Sophos master server (Sophos-old) to another Sophos master server (Sophos-new).

I have tested this script on 4 servers and it has run fine on those 4. They now point to Sophos-new for their policies and updates. On the 5th server, the resulting log file from the script looks fine (just like the other 4 servers). But it’’’’s not completely responding to either Sophos console.

From Sophos-old, the status says: Differs from policy.

On Sophos-new, it says: Awaiting policy update.

From Sophos-new, I select the computer, right click and say “Update the computer now… “ On the 5th server, the update log shows that it’’’’s communicating with Sophos-Old.

From Sophos-old, I select the computer, right click and say “Update the computer now… “  Nothing happens on the 5th server. Its log does not show any attempt to communicate with either Sophos server.

Oh, and I have rebooted the 5th server.

Has anyone come across this situation before?

:41327


This thread was automatically locked due to age.
Parents
  • Hi Jak,

    I stopped the Sophos Message Router on Server5. On the SEC, it had a red "X" on the computer. Once I restarted the Sophos Message Router, it went back to a green symbol.

    I restarted Server5's Sophos Agent at 9:31:12. On the new Sophos server, the MSGN log showed:

    03.07.2013 09:31:34 0898 I MessagingSystemClientLib::EnvelopeReceiver::Receive: Received message 30681013 of type EM-GetStatus-Reply from Router$Server5:72699.
    03.07.2013 09:31:34 0898 I MessagingSystemClientLib::EnvelopeReceiver::Receive: Processed message 30681013.
    03.07.2013 09:31:34 0898 I MessagingSystemClientLib::EnvelopeReceiver::Receive: Received message 30681014 of type EM-RouterLogon from Router$Sophos-new.
    03.07.2013 09:31:34 0898 I MessagingSystemClientLib::EnvelopeReceiver::Receive: Processed message 30681014.
    03.07.2013 09:31:49 0898 I MessagingSystemClientLib::EnvelopeReceiver::Receive: Received message 30681029 of type EM-EntityEvent from Router$USS9CFYFQ1:72542.
    03.07.2013 09:31:49 0898 I MessagingSystemClientLib::EnvelopeReceiver::Receive: Processed message 30681029.
    03.07.2013 09:31:51 0898 I MessagingSystemClientLib::EnvelopeReceiver::Receive: Received message 30681031 of type EM-RouterLogoff from Router$Sophos-new.
    03.07.2013 09:31:51 0898 I MessagingSystemClientLib::EnvelopeReceiver::Receive: Processed message 30681031.

    So it does appear that Server 5 is communicating to the new Sophos server, even though it says "Awaiting policy update..."

    Does this mean that Server5 will get any policies changes that I make on Sophos-new? We are planning on making a major policy change at the end of this month and I wouldn't want it to miss this change.

    Thanks again for all of your hard work on this confusing problem!

    :41391
Reply
  • Hi Jak,

    I stopped the Sophos Message Router on Server5. On the SEC, it had a red "X" on the computer. Once I restarted the Sophos Message Router, it went back to a green symbol.

    I restarted Server5's Sophos Agent at 9:31:12. On the new Sophos server, the MSGN log showed:

    03.07.2013 09:31:34 0898 I MessagingSystemClientLib::EnvelopeReceiver::Receive: Received message 30681013 of type EM-GetStatus-Reply from Router$Server5:72699.
    03.07.2013 09:31:34 0898 I MessagingSystemClientLib::EnvelopeReceiver::Receive: Processed message 30681013.
    03.07.2013 09:31:34 0898 I MessagingSystemClientLib::EnvelopeReceiver::Receive: Received message 30681014 of type EM-RouterLogon from Router$Sophos-new.
    03.07.2013 09:31:34 0898 I MessagingSystemClientLib::EnvelopeReceiver::Receive: Processed message 30681014.
    03.07.2013 09:31:49 0898 I MessagingSystemClientLib::EnvelopeReceiver::Receive: Received message 30681029 of type EM-EntityEvent from Router$USS9CFYFQ1:72542.
    03.07.2013 09:31:49 0898 I MessagingSystemClientLib::EnvelopeReceiver::Receive: Processed message 30681029.
    03.07.2013 09:31:51 0898 I MessagingSystemClientLib::EnvelopeReceiver::Receive: Received message 30681031 of type EM-RouterLogoff from Router$Sophos-new.
    03.07.2013 09:31:51 0898 I MessagingSystemClientLib::EnvelopeReceiver::Receive: Processed message 30681031.

    So it does appear that Server 5 is communicating to the new Sophos server, even though it says "Awaiting policy update..."

    Does this mean that Server5 will get any policies changes that I make on Sophos-new? We are planning on making a major policy change at the end of this month and I wouldn't want it to miss this change.

    Thanks again for all of your hard work on this confusing problem!

    :41391
Children
No Data