Sophos not updating on server


27-Nov-2019 00:07

More recently, researchers have started worrying about the security of BMCs more generally.The solution is for server makers to implement authentication, which the researchers say is now part of Supermicro’s updating process for all new products.The use of a specific proxy can be forced by setting the http_proxy environment variable.(Sophos removed it from their list of affected OS)You should not update them, because it will result in them failing to boot.When compromised, an attacker would be able to sneak their own modified firmware onto a server – something that would give admins a very bad day at the office.

At the same time Teamviewer services are down so we can't help them to remove KB4493472. I'm glad I push updates a week and two weeks later for workstations and server respectively (my servers don't automatically install updates anyway).

When first run (without any command line options) the program produces output similar to the following: Update Sophos v1.34 Copyright 2002-2003 Andrew Mc Lean ------------------------------------------------------------- Update Sophos comes with ABSOLUTELY NO WARRANTY.

This is free software, and you are welcome to redistribute it under certain conditions. ------------------------------------------------------------- SWEEPNT version 3.85 detected No proxy detected No metadata for a local copy of archive file. New copy of archive file last modified: Thu, GMT Extracting: Extracting: Extracting: Extracting: Extracting: Extracting: Extracting: Extracting: Extracting: Restarting Sweep services...

Post from the Sophos guys:https://community.sophos.com/products/sophos-central/f/sophos-central/112108/sophos-notification-sophos-central-endpoint-and-sec-computers-fail-hang-on-boot-after-the-microsoft-windows-april-9-2019-update/401524#401524Edit: Added one more OSIn case it helps anyone we wrote a small script to stop the services, set them as manual, reboot, stop the services again (due to dependencies), set the remaining as manual, and then remove all offending KB'stop "Sophos Agent"net stop "sophossps"net stop "SAVService"net stop "SAVAdmin Service"net stop "Sophos Auto Update Service"net stop "Sophos Client Firewall"net stop "Sophos Client Firewall Manager"net stop "Sophos Device Control Service"net stop "Sophos Message Router"net stop "Sophos Web Control Service"net stop "Sophs System Protection Service"net stop "sophossps"net stop "swi_filter"net stop "swi_service"net stop "swi_update_64"------------------------sc config "Sophos Agent" start= disabledsc config "SAVService" start= disabledsc config "SAVAdmin Service" start= disabledsc config "Sophos Auto Update Service" start= disabledsc config "Sophos Client Firewall" start= disabledsc config "Sophos Client Firewall Manager" start= disabledsc config "Sophos Device Control Service" start= disabledsc config "Sophos Message Router" start= disabledsc config "sophosssps" start= disabledsc config "swi_service" start= disabledsc config "swi_update_64" start= -r----------------------------net stop "Sophos Agent"net stop "sophossps"net stop "SAVService"net stop "SAVAdmin Service"net stop "Sophos Auto Update Service"net stop "Sophos Client Firewall"net stop "Sophos Client Firewall Manager"net stop "Sophos Device Control Service"net stop "Sophos Message Router"net stop "Sophos Web Control Service"net stop "Sophs System Protection Service"net stop "sophossps"net stop "swi_filter"net stop "swi_service"net stop "swi_update_64"------------------------sc config "Sophos Agent" start= disabledsc config "SAVService" start= disabledsc config "SAVAdmin Service" start= disabledsc config "Sophos Auto Update Service" start= disabledsc config "Sophos Client Firewall" start= disabledsc config "Sophos Client Firewall Manager" start= disabledsc config "Sophos Device Control Service" start= disabledsc config "Sophos Message Router" start= disabledsc config "sophosssps" start= disabledsc config "swi_service" start= disabledsc config "swi_update_64" start= -r--------------------------wusa /uninstall /kb:4493467 /quietwusa /uninstall /kb:4489893 /quietwusa /uninstall /kb:4493448 /quietwusa /uninstall /kb:4493472 /quietwusa /uninstall /kb:4493450 /quietwusa /uninstall /kb:4493451 /quiet--------------------FFS.

I have 100 calls of users who can't boot this morning.

The license purchased by my employer allows the use of the software by employees on their personal computers at home. Unfortunately, although it is in many respects a very nice program, the basic version of SAV does not provide for automated updating over the Internet, instead a tedious manual process is required.



Incluso tengo una lista de recursos para cámaras por si tú, o alguien que conoces, queréis convertiros en artistas.… continue reading »


Read more