Sophos Patch downloads fail with event ID 1010 and checksum errors in patch log

  • Article ID: 119133
  • Updated: 27 Aug 2013


Issue

Windows Application Event log shows the following error:

ErrorMessage: Failed to update patch detection
ErrorSource: .Net SqlClient Data Provider
ErrorState: 16
-- System Exception Details --(Contained Exception)
Message: The 3rd PartyID for Patch: windows\x86_64-apps\Office Accounting 2007 Service Pack 1.pls is being used by patch: windows\x86_64-apps\Office Accounting 2007 Service Pack 1 (KB932726).pls which has a different FileChecksum and Name
Failed to update patch detection

The Sophos Patch logs show:

[DATE] [TIME] | PID 4540 | TID 1 | Warning | Checksum does not match for 'http://sophos.cdn.lumension.com/sophos/windows/x86_64/en/Adobe APSB13-02 Acrobat XI 11.0.1 for Windows (Update) (All Languages) (See Notes).pls' from lst file 'windows/x86_64/en/apps.lst' (expected='e1fa4714580c2c4b90122fe185ca5509', actual='844fd9a4897b8d23a4916bf2d0fbb19b')
[DATE] [TIME] | PID 4540 | TID 1 | Information | Failed to process pls file 'Adobe APSB13-02 Acrobat XI 11.0.1 for Windows (Update) (All Languages) (See Notes).pls' found in lst file 'windows/x86_64/en/apps.lst':'Checksum does not match for 'http://sophos.cdn.lumension.com/sophos/windows/x86_64/en/Adobe APSB13-02 Acrobat XI 11.0.1 for Windows (Update) (All Languages) (See Notes).pls' from lst file 'windows/x86_64/en/apps.lst' (expected='e1fa4714580c2c4b90122fe185ca5509', actual='844fd9a4897b8d23a4916bf2d0fbb19b')'

You may also notice that Patch updates on the Sophos management server fail.

First seen in

Enterprise Console 5.0.0

Cause

The Patch data that is being download is being partly stripped by a firewall (normally an appliance) and the files that are download have different checksums and a truncated filename.

What To Do

  1. Set an exception on the firewall for the following URL:
    • sophos.cdn.lumension.com
  2. Browse to the location where the patch data is stored on your machine and locate then rename/delete the files that have generated errors for having an invalid checksum:
    • 2003: C:\Documents and Settings\All Users\Application Data\Sophos\Patch\
    • 2008: C:\ProgramData\Sophos\Patch\
  3. Open C:\Windows\Tasks\ and run the Sophos Patch Feed task and let the patch updates be pulled down from the Internet again.​​


 
If you need more information or guidance, then please contact technical support.

Rate this article

Very poor Excellent

Comments