This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Mac Sophos v9 Agent Issues

Hello All, Background Info:

Current Mac agent: 8.22

I am testing with a "test" cid where I am using the 9 recommended subscription.

     I've tested by moving machines into a new group getting a new update policy pointing to that cid and also manually

changed the update location from the client. My update servers are redhat 6 boxes running apache 2.15 (the latest in the repo

and probably for the duration of redhat 6). I've come to discover that when the sophos agent does an update it will create a

new http connection to every single file its looking to download. On a version 9 upgrade it will create 1600 + http connections

(1695 file download). I've been doing some tests and on a vanilla fully patched mountain lion host I discovered that although

the agent makes an insane amount of http connections it will pull the v9 files down and do the upgrade no problem. On the

other hand when I do the same thing from a mavericks host it will attempt to pull the files down, create 1000+ http

connections, and eventually fail every time. Not sure if this is an issue with the mavericks tcp stack but this is a big problem

for me. With version 8 ending support in April I am trying to update my clients. In my testing I have about 100 sub 10.8.5

machines that received the upgrade and are running the latest v9 agent but this was more of a on demand process where I

manually updated hosts from the console. I was told by sophos support that my apache server is the cause and to upgrade,

here is the kb article I was told to reference http://www.sophos.com/en-us/support/knowledgebase/118935.aspx Ok, but that

article isn't exactly what I'm experiencing and it works with mountain lion hosts.. I've also tried increasing the max client limit

on the apache server to 4000 connections, mavericks still fails. Any help regarding this issue is greatly appreciated.

Thank You! I can provide logs, etc if need be.

:47181


This thread was automatically locked due to age.
Parents
  • Hello test12234,

    no need for this hard bump :smileyhappy:

    update will create a new http connection to every single file

    this doesn't seem right (if it's indeed the case). If this were the normal operation I think this issue should have already manifested itself at other sites as well.

    Having said this, with the information at hand I'd infer that the updating process already didn't work as it should but the problem only surfaces with Mavericks. Admittedly the article doesn't apply - OTOH 2.2.15 (if this is the correct version) is far from being the latest and it's understandable that Support is reluctant to deal with this combination (Mavericks and v9 on the "other side"). But Support should at least be able to tell you whether initiating a new connection for each file is the correct behaviour. I suspect that the connections aren't correctly closed and it'd be necessary to find out which side is responsible.

    Christian

    :47275
Reply
  • Hello test12234,

    no need for this hard bump :smileyhappy:

    update will create a new http connection to every single file

    this doesn't seem right (if it's indeed the case). If this were the normal operation I think this issue should have already manifested itself at other sites as well.

    Having said this, with the information at hand I'd infer that the updating process already didn't work as it should but the problem only surfaces with Mavericks. Admittedly the article doesn't apply - OTOH 2.2.15 (if this is the correct version) is far from being the latest and it's understandable that Support is reluctant to deal with this combination (Mavericks and v9 on the "other side"). But Support should at least be able to tell you whether initiating a new connection for each file is the correct behaviour. I suspect that the connections aren't correctly closed and it'd be necessary to find out which side is responsible.

    Christian

    :47275
Children
No Data