Sophos has released a cumulative patch for the SafeGuard Server and SafeGuard Management Center.
Ideally, this patch should be installed pro-actively to prevent the issues from occurring. However, it can also be installed in environments which have already experienced one of the issues mentioned below, in which case it will to help to resolve the root causes of the issue.
The cumulative patch addresses the following issues in SafeGuard Enterprise 5.60.0 and 5.60.1:
- Active Directory sync via SafeGuard task scheduler does not work. Last Run Result stays in "Running" state
- Active Directory sync fails with CBIERR_BAD_KEY
- Decreased policy update performance after backend upgrade to 5.60.x
- Decreased inventory performance in SafeGuard Management Center after upgrade to 5.60.x
First seen in
SafeGuard Management Center / Local Policy Editor 5.60.0
SafeGuard Enterprise Server 5.60.0
Who can be affected
These issues can occur either if you performed a fresh installation of SafeGuard Enterprise 5.60.x or if you upgraded to SafeGuard Enterprise 5.60.x from an earlier version.
What To Do
The patch consists of one msi file (Microsoft Installer) for the SafeGuard Server and one for the SafeGuard Management Center component. Install both packages on all SafeGuard Servers and Management Centers in your environment.
The required files can be downloaded here:
Protocol: FTP over explicit TLS/SSL
If you experience problems accessing the location, refer to the knowledgebase article: Configuring your FTP Client to connect to Sophos' FTP.
If you cannot configure your client to use encrypted transfer, you can alternatively connect to ftp-insecure.sophos.com on port 21 with plain FTP mode. However, all data sent and received across the insecure ftp network may be visible to others: ftp://sgn560patch:278A97128c@ftp-insecure.sophos.com:21
Please note: The patch should only be applied on SafeGuard installations which are in an original state. If parts of these issues have already been addressed by manually added hotfixes (e.g. dlls) the installation of the patch might fail.
This patch will be obsolete with SafeGuard 6.