Enterprise Console: if installed on a computer with multiple IP addresses, it may take a long time to establish communication

  • ID dell'articolo: 111862
  • Aggiornato il: 22 dic 2014

Issue 

When you install Enterprise Console on a computer which has multiple IP addresses, it may take a long time to establish communications. This may cause the status of client computers to be displayed incorrectly by Enterprise Console.

First seen in

Enterprise Console 3.0

What to do

Follow EITHER procedure A. 'Sophos Anti-Virus has not yet been installed on client computers' OR procedure B/C 'Sophos Anti-Virus is already installed on your client computers' (depending on whether you have Linux or Windows clients).

Important points:

  • Only procedure A should be performed on the Management Server.  Procedures B and C are changes to client machines only.
  • All IP addresses and computer names used in this article are for example only. Ensure that you use the values and names that apply to your site/network. For example:
    "MRParentAddress"="192.168.15.1,SEC001.sophos.local,SEC001"
    192.168.15.1 is the Server IP
    SEC001.sophos.local is the fully qualified domain name
    SEC001 is the server name
  • Please be aware that on upgrade to a future version, the following changes will need to be re-applied.

A. Sophos Anti-Virus has not yet been installed on client computers

On the computer on which Enterprise Console is installed:

  1. Edit the two files:
    1. C:\Program Files\Sophos\Enterprise Console\MRInit.conf
      and...
    2. C:\Program Files\Sophos\Enterprise Console\SUM\MRInit.conf
      or if you do not have the 'SUM' folder:
      C:\Program Files\Sophos\Enterprise Console\Update Manager\MRInit.conf
      ...to remove the other IPs that you do not use for "MRParentAddress" and "ParentRouterAddress." 

  2. In the example used here, you should change them as follows:

      • if it reads "MRParentAddress"="192.168.15.1,fe80::2438:ac02:15 AMd0:1915,192.168.150.1,fe80::4836:70a08:04 AMd06:07 AMa9c,SEC001.sophos.local,SEC001"
        change it to "MRParentAddress"="192.168.15.1,SEC001.sophos.local,SEC001"
      • if it reads"ParentRouterAddress"="192.168.15.1,fe80::2438:ac02:15 AMd0:1915,192.168.150.1,fe80::4836:70a08:04 AMd06:07 AMa9c,SEC001.sophos.local,SEC001"
        change it to "ParentRouterAddress"="192.168.15.1,SEC001.sophos.local,SEC001"
  3. Edit mrinit.conf in CID. If there is mrinit.conf in the CID (such as under "C:\ProgramData\Sophos\Update Manager\Update Manager\CIDs\S000\SAVSCFXP"), do the same editing as in Step 1.
  4. Edit "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SophosMessageRouter" changing the value for 'ImagePath' from (for example):

    "C:\Program Files\Sophos\Remote Management System\RouterNT.exe" -service -name Router -ORBListenEndpoints iiop://:8193/ssl_port=8194
    to
    "C:\Program Files\Sophos\Remote Management System\RouterNT.exe" -service -name Router -ORBListenEndpoints iiop://192.168.15.1:8193/ssl_port=8194

    (The IP address should be the one that you actually use)

  5. Edit "HKEY_LOCAL_MACHINE\SOFTWARE\sophos\Messaging System\Router", changing the value for ''ServiceArgs" from (for example):

    "-ORBListenEndpoints iiop://:8193/ssl_port=8194"
    to
    "-ORBListenEndpoints iiop://192.168.15.1:8193/ssl_port=8194"

    (The IP address should be the one that you actually use)

  6. Restart the Sophos Message Router service.

    When you have worked through the above procedure, the issue should be solved.

B. Sophos Anti-Virus is already installed on your client computers (Linux)

 

  1. Do steps 1-5 as described above in the section "Sophos Anti-Virus has not yet been installed on client computers."
  2. On the client computer edit "/opt/sophos-av/rms/router.config", changing the value of ParentAddress from (for example) 

    192.168.15.1,fe80::2438:ac02:15 AMd0:1915,192.168.150.1,fe80::4836:70a08:04 AMd06:07 AMa9c,SEC001.sophos.local,SEC001
    to
    192.168.15.1,SEC001.sophos.local,SEC001 
  3. Restart the Daemon by running the command: service sav-rms restart

 

C. Sophos Anti-Virus is already installed on your client computers (Windows)

Note: This step should not be performed on the Management Server.

  1. Do steps 1-5 as described above in the section "Sophos Anti-Virus has not yet been installed on client computers."
  2. On the client computer go to the following registry key,
    HKEY_LOCAL_MACHINE\SOFTWARE\Sophos\Messaging System\Router (on a 32-bit computer)
    HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Sophos\Messaging System\Router (on a 64-bit computer)

    and change the value of ParentAddress from (for example)

    192.168.15.1,fe80::2438:ac02:15 AMd0:1915,192.168.150.1,fe80::4836:70a08:04 AMd06:07 AMa9c,SEC001.sophos.local,SEC001
    to
    192.168.15.1,SEC001.sophos.local,SEC001

  3. Restart the Sophos Message Router service.

 

 

 
Per maggiori informazioni o per assistenza, vi preghiamo di contattare il supporto tecnico.

Valutate l'articolo

Molto scadente Eccellente

Commenti