lukang

Not trying to change the topic much here but when trying to block against zero day threats you should get HIPS enabled properly and not as much to do with the firewall. This would have given you a 100% level of protection for the registry of your windows systems. By default HIPS has three boxes checked to allow you the ability to slowly see what HIPS has seen then you use the authorization selection two selections below the HIPS selection and you can then decide what to authenticate. After doing this you will de-select or Un-check Alert Only in the HIPS selection leaving the other two checked. This setting blocks newly launched processes (Even good ones ) from making changes to your registries without you first authorizing them. Even if it is a Brand New virus that Nobody is detecting for!

Well if everyone knew as much as you then they could use any software solution huh? The biggest issue with sophos is many people dont read the documentation or dont understand what they are reading like RMS and the requirements to deploy the AV. Nor do they under stand the terms such as Do Nothing/ Do Nothing in the AV cleanup settings. Do nothing actually does quarantine what it finds and it allows the end user to safely take action against a virus.

You might actually learn something thats what was next

Try running the SUM.msi again which is in C:\program files\sophos\enterprise console\sum installer. Then reboot and remember to verify all sophos services are running on the server.

No it is a database issue that can be seen in the registry that prevented the Management service from working. Go to the registry in HKLM\software\sophos\EE\Management tools\ databaseconnectionsMS Then make sure that the information for the server is correct. Also in the database user key ( one rung lower ) you will see a reg key that says UseClearText that info should be 0 and the information above it should be blank. I have seen information in this location cause the console to not open.

They usually dont play well together. Remember to install the console first then protect the server with the sophos AV then push to the clients. This builds the certificates then push to the clients.

Hello Just apply and exclusion for this application. Enterprise Console: how to exclude items from scanning on your Windows 2000/XP/2003 computers

If you change the ext at the end of this file from a .txt to a .bat and run it on the console server it will clear out old errors.