OSQuery Dead - SFOS 19.5.0 GA-Build197

Hello there,

Thank you for contacting the Sophos Community.

Can you do the following:

1. Restart your Device and check if the service remains in Dead status, if the issue persists

2. What Firmware version were you originally using? (you mentioned you upgraded to the latest Firmware) and run the following commands from the Advanced Shell (5>3) of the Firewall, you will need putty to connect:

# ls /conf/certificate/internalcerts/

# ls /conf/certificate/internalcas/

Regards

Thank you for your reply!

When I reboot, the service appears to start successfully.  I get no failure alert, and everything is "green".  It fails after a number of minutes.

The fresh install was using 19.0.1_MR-1-365.  I originally experienced the failure in this firmware and thought that upgrading might fix the issue.  It did not.

SF01V_SO01_SFOS 19.5.0 GA-Build197# ls /conf/certificate/internalcerts/
ClientAuthentication_cert.key  ClientAuthentication_cert.pem

SF01V_SO01_SFOS 19.5.0 GA-Build197# ls /conf/certificate/internalcas/
ClientAuthentication_CA.der  cloud-ca.crt                 index.txt.attr.old           serial
ClientAuthentication_CA.key  index.txt                    index.txt.old                serial.old
ClientAuthentication_CA.pem  index.txt.attr               red-ca.crt

Hello John,

Thank you for the update.

I have sent you a PM.

Regards,

I'm happy to report that for some unknown reason, I'm no longer experiencing the error.  Thanks for taking the time to look into it.  Unfortunately I can't share a cause or solution, as it just seemed to go away on it's own.

Hello John,

Thank you for the update.

If the issue resurfaces let me know, and I will take a look.

Regards,

Hello John,

Thank you for the update.

If the issue resurfaces let me know, and I will take a look.

Regards,