Sophos AV failing host checker

[Lord_Edam_]

since about 5PM (UK time) yesterday, any of our users running Sophos version 7.6.19 are failing host checker with "compliance requires the latest update files", even though the version they have matches the epupdate_hist.xml file we download every 10 minutes off juniper.net

Detection of other AV products, including Sophos version 9 work fine.

Anyone else having problems at the moment or is there something quirky with our installation?

I've logged it with out support company, and hacked up a file check for some of the IDEs to at least let people get in.

[MattR_]

We've had the same problem here - I've turned off update checking till we find the cause.

[Lord_Edam_]

Thanks Matt. I've sent some debuglog.log files off to our supplier, but since it seems to be a juniper issue rather than just something we've done I don't expect I'll get a fix until after our bank holiday on monday

[TheHorse13_]

Yes, we too have the same issue and it was noticed between 3 and 6pm GMT -5:00 (Eastern Standard Time)

I called support and they had no idea it was happening. I'm currently escalating to level 3 support. Don't expect a quick fix for this folks.

We strongly believe the XML file pushed during that time is broken even though there are no logs that show issues with the XML file or anything else on the IVEs. We cannot get an older one either. We have asked.

We suggest calling JTAC and ranting to bring more attention to the problem.

[trusty1162_]

Opened a JTAC case for this issue. No mention of a timeframe for resolution, althogh they have admitted there is a serious issue with anyone using Sophos 7.6.19

I will update if i hear anything from JTAC.

[evcard_]

hopefully they can fix this over the long weekend and have it fixed by Tuesday, already have clients that use this product failing the host checker and complaining.

[MattR_]

We've just up'd to 7.6.20 and hostchecker seems to like this version.

[evcard_]

I have some users who were impacted by 7.6.19, who updated as of 7am this morning to 7.6.20 and are now passing the policy check as well.

[Lord_Edam_]

yep, same here.

Unfortunately, it wasn't quick enough to stop one of our heads of service complaining that he's paying through the nose for a service that's "down more often than it's up"