Sophos v5 upgrade problems.

[Geoff]

Up here in Lancs we've been switching Sophos from v3 to v5 on our school networks. We've been hitting a few problems that no ones figured out yet. Now I know some of you also use Sophos so hopefully you'll be able to help us out.

 

1. Some machines in the domain come up as grey in the Enterprise console. Attempting to do a remote install gives an 'unsupported operating system' error. Windows Firewall is off and Simple File Sharing is disabled.

 

2. Is there any way to get Sophos v5 and SIMS.NET to place nice. We've tried excluding various files from the SIMS.NET installation but it still eats vast tracks of CPU and memory.

 

3. Using the on-access scanner on some machines (paticularly domain controllers) causes similar high CPU and memory issues. This isn't a big deal on servers because I tend not to use the on-access scanner but we've had a few crippled desktop machines because of it.

[Dos_Box]

Have you tried ...

 

a. Locally installing\upgrading Sophos. This seems to work for me when I hit those errors.

 

b. Uninstalling the old Sophos install and manually deleting all the remaining files and folders. Sophos tends to leave all of its old settings and config files behind 'Just in case'. Deleteing these will allow a local install to happen.

 

You should be able to install via the console after that, overwrting the new lcoal install you put on and bringing it under your control.

[Geoff]

Unacceptable. I need to be able to fix these machines remotely. There's too many of them to manually fix them all with a house call.

[Guest]

1. Some machines in the domain come up as grey in the Enterprise console. Attempting to do a remote install gives an 'unsupported operating system' error. Windows Firewall is off and Simple File Sharing is disabled.

 

I have the same issue. Using SAVAdmin I can see the PCs and remotely install + Update. So im still using that. lol

[Dos_Box]

You may be stuffed then. I've yet to find a way. This may be why Westfield have not yet issued the new admin tools and Sophos client to schools yet. I knew they were having problems trying to get it to work fine for schools, and it looks like we have found the very same ones they have.

[Geoff]

Unacceptable. Remind me why we pay Sophos money again?

[Netman]

"Unacceptable" - Agreed - hence I didn't renew with Sophos last June and went to Panda instead. Same price, better admin tools, better detection rate including spyware - have had some issues with the latest client but nothing major... oh, and it's clientshield has a much smaller overhead than the sophos client.

Sophos got into the education market with some very aggresive pricing about 5 years ago but have since upped the cost by x3, so I believe that LEAs and Schools should look around at other products before blindly sticking with Sophos - my sympathies to those who are shackled by your LEA, but if enough people complain to them maybe they'll think twice...

[Dos_Box]

We have put out to tender for our AV cover last month in Lancashire as Sophos was up for renewal. We'll wait and see what come out of it.

[Ric_]

Panda is nice - you get a smiling Panda in the system tray

 

Not used the enterprise one though.

[intrigue]

Whats the website for panda?

.matt

[Geoff]

http://www.pandasoftware.com/

[E1uSiV3]

my sympathies to those who are shackled by your LEA, but if enough people complain to them maybe they'll think twice...

 

Sadly i'm in that very situation, ironically tho i dont seem to have too many problems with Sophos, it was a pain in the rear end at first but once it settled in it seems to run ok. I do have the same problem as you tho Geoff, but i have been doing an XP migration over the last 2 months and every new XP box works fine, yet the old 2000 clients "appear grey" too.

 

You should be able to psexec the following:

 

\\Server\InterChk\ESXP\setup.exe -user username -pwd password

 

After Sophos has been installed/reinstalled this way they tend to appear in the console.

[Dos_Box]

Unacceptable. Remind me why we pay Sophos money again?

 

But I wonder where the problems lie? Is it because M$ have changed some functionallity in XP (ala SFS) that Sophos had not anticipated on the systems they developed their product on? Or is it simply a crap product? Are the other versions (Panda, Norton etc) going to face problems when their next major release is due out, or are their current versions at rev x.7? Perhaps Sophos does not like deploying to computers where files have changed or become corrupted, educational software is notorious for overwriting system files willy-nilly. Maybe a point release will fix these problems.

[ChrisH]

What settings are you using for the AV settings? I have deployed it to one room and the teacher is complaing the workstations are running a hell of a lot slower. Some of them are taking 10 minutes to boot.

[Dos_Box]

Which version are you using. The old one (with the lightning flash) should have quick scanning only enabled (intercheck), because if full scan is on then every file is checked.

[MkII]

Uncheck drives to be remotely checked too in the intercheck tab properties. Our [county] setup by default does a full check every boot or a pre defined time - dunno why this suddenly became apparent before the holidays.

 

We're soon to upgrade to v6 here.

[Dos_Box]

V6 Is good, and has excellent management capabilities. I have encountered reletively few machines where it has a few problems installing. The problems I have encountered have all been caused my Microsoft having XP SP2 turning SFS back on.

[luke213]

We have Sophos V5 and had problems with running Sims.net. It took nearly 15 minutes for program to open up.

 

We contacted Sophos support and they suggested to set the exclude remote files option set.

 

This excludes all network files, which is fine if you set a scheduled scan on the servers over night.

 

It now takes only 3 seconds to open Sims.net. We still have a few problems with regards to workstations running slow though. We have found that the newer machines with more RAM are fine but we are not going to upgrade all the machines just so that Sophos runs faster.

[Rozzer]

Also had the same problem with sims and sophos only way to get past it was by killing the sav processes.

 

Ross

[Pear]

Just reviving this topic as I have a query.

 

1. RouterNT.exe is currently running around 70mb in the task manager which seems a bit excessive, especially with a peak mem usage of 110mb. Is everyone elses taking up as much resources ?

[Dos_Box]

RouterNT on my PC is using 8 MB. You have a setting wrong somewhere!!

[Dos_Box]

Are you using Enterprise Console?

[Pear]

Yes I am using enterprise console on Windows 2000 server.

 

I had a strange feeling it was to do with my hard drive being defragmented but even after defraging it continues to sky rocket. When the server gets too slow I kill the process but it comes back very small at about 5mb but then just keeps rising to 70mb.

 

And yes I have tried a restart, that was the first thing I did.

[Geoff]

This blog entry is probably relevant.

 

http://www.itwriting.com/blog/?postid=219

[Pear]

That has shrunk the usage down to a steady 14mb. Still seems big, I have 115 computers in the console.