Testing Macs not updating from 9.1.8 to 9.2.2

Question

We have a testing group to test the preview versions of the Sophos client.

Our process has been to move computers from a standard group into the testing group which has an update policy using a preview subscription. This way we can use a small number of computers to try out the preview versions of the Sophos client. It's worked well for the last year, but now I'm having a problem.

Macs running Sophos 9.1.8 that are moved into the testing group are not updating to 9.2.2 even when they report they are compliant with the test Updating policy and are "Up to date" in the Update Details tab of the console. The AutoUpdate log on the clients say they have updated successfully. The detection data ad IDEs match the 9.2.2 clients so they seem to be getting detection data updates, just not updating to 9.2.2.

I'm going to create a new test group and new test CID, but it seems odd that this worked before and doesn't work now. The Macs are running 10.7.5, 10.9.5, and mostly 10.10.1.

Any thoughts?

Aaron

This thread was automatically locked due to age.

AaronMelgares · Accepted Answer

We figured this out today.

The Mac 9.2.2 clients includes these files without extensions:

ESCOSX/Sophos Installer Components/savi.bundle/Contents/_CodeSignature/CodeDirectory

ESCOSX/Sophos Installer Components/savi.bundle/Contents/_CodeSignature/CodeRequirements

ESCOSX/Sophos Installer Components/savi.bundle/Contents/_CodeSignature/CodeResources

ESCOSX/Sophos Installer Components/savi.bundle/Contents/_CodeSignature/CodeSignature

The Mac 9.1.8 clients also include these files without extensions:

ESCOSX/Sophos Anti-Virus.mpkg/Contents/_CodeSignature/CodeDirectory

ESCOSX/Sophos Anti-Virus.mpkg/Contents/_CodeSignature/CodeRequirements

ESCOSX/Sophos Anti-Virus.mpkg/Contents/_CodeSignature/CodeResources

ESCOSX/Sophos Anti-Virus.mpkg/Contents/_CodeSignature/CodeSignature

We recently upgraded our server from IIS 7 to 7.5 and the 7.5 web server was not configured to serve these files. We added this to the MIME type config:

File extension type: .

MIME type: application/octet-stream

And the files now download and our Macs are updating from 9.1.8 to 9.2.2.

Apparently the previous .* setting worked to allow files without extensions in 7 but didn't work with 7.5.

This was stopping updates for all the Mac clients, but since most of our Macs were already at 9.1.8, they didn't see this issue.

Thanks for the confirmation that it worked for you Christian, it led us to investigate the web server itself. :smileyhappy:

- Aaron