Sophos Enterprise Console 5.4.1 release notes
What's new
New features
- SQL 2016 is supported.
- Sophos Enterprise Console issues certificates that are signed with a SHA-2 algorithm.
- Sophos Enterprise Console checks that the administrator running an upgrade has the appropriate database permissions and access rights before performing the upgrade.
- Sophos Enterprise Console enforces TLS (Transport Layer Security) 1.2 protocol when establishing a connection with Sophos Endpoint Security and Control Remote Management System 4.1.0.
Updated components
Sophos Enterprise Console 5.4.1 includes the following updated components:
- Sophos Endpoint Security and Control Remote Management System has been updated to 4.1.0. This is used for communications between console and endpoints.
- Sophos Update Manager has been updated to 1.6.1.
Resolved issues
- ONPREM-1055 - A third party library (ACE library) was causing a failure in the Sophos Endpoint Security and Control Remote Management System.
System requirements
Supported operating systems and SQL Server versions
For operating system requirements and supported SQL Server versions, see http://www.sophos.com/en-us/support/knowledgebase/113278.aspx.
Other software requirements
The installer also attempts to install the following software:
- Microsoft .NET Framework 4.5.2 (unless version 4.x is already installed)
- Microsoft Message Queuing (MSMQ) (unless already installed)
You will need to have the following software installed:
- At least Internet Explorer 7 or later
For more information about installing required system software, refer to the Enterprise Console startup documentation published at http://www.sophos.com/en-us/support/documentation/enterprise-console.aspx.
Port requirements
Enterprise Console requires certain ports to be open. For more information, go to http://www.sophos.com/en-us/support/knowledgebase/38385.aspx.
Hardware requirements
For hardware requirements, see https://www.sophos.com/en-us/support/knowledgebase/118635.aspx.
Upgrading to Enterprise Console 5.4.1
You can upgrade to Enterprise Console 5.4.1 directly from:
- Enterprise Console 5.4.0
- Enterprise Console 5.3.1
- Enterprise Console 5.3.0
- Enterprise Console 5.2.2
- Enterprise Console 5.2.1 R2
- Enterprise Console 5.2.1
- Enterprise Console 5.2.0
- Enterprise Console 5.1
- Enterprise Console 5.0
If you are using Sophos Control Center 4.0.1 or 4.1, you will need to upgrade in two steps by following one of the supported upgrade paths:
- Upgrade to Enterprise Console 5.1 and then upgrade to Enterprise Console 5.4.1.
- Upgrade to Enterprise Console 5.2.2 and then upgrade to Enterprise Console 5.4.1.
See also knowledgebase article 119105 for more information about different upgrade paths.
The installers for earlier versions of Enterprise Console are available from the Sophos Enterprise Console Downloads page (http://www.sophos.com/en-us/support/downloads/console/sophos-enterprise-console.aspx).
Tool version compatibility for Enterprise Console
The following table shows version compatibility between Enterprise Console tools and Enterprise Console.
The Enterprise Console tools are available for download from https://www.sophos.com/support/downloads.aspx.
| Enterprise Console | Reporting Interface | Reporting Log Writer | Virtualization Scan Controller |
|---|---|---|---|
| 5.4.1 | * | 5.1 | 2.0 |
| 5.4.0 | * | 5.1 | 2.0 |
| 5.3.1 | * | 5.1 | 2.0 |
| 5.3.0 | * | 5.1 | 2.0 |
| 5.2.2 | * | 5.1 | 2.0 |
| 5.2.1 R2 | * | 5.1 | 2.0 |
| 5.2.1 | * | 5.1 | 2.0 |
| 5.2 | * | 5.1 | 2.0 |
| 5.1 | 5.1* | 5.1 | 1.0 |
* Since version 5.1, Reporting Interface database objects are installed as part of the Enterprise Console database installation, and the standalone installer on the Sophos Reporting Interface download page includes only Reporting Log Writer.
Known issues and limitations
Installation
- (DEF56407) Distributed installation: Sophos Management Service
doesn't start if a database instance is present without the appropriate network protocols enabled.
For distributed installations of Enterprise Console (with SQL Server on a different server) the Sophos Management Service may not start if the "SOPHOS" database instance was created by PureMessage for Microsoft Exchange, or if the chosen SQL Server instance has TCP/IP protocol disabled.
To work around this problem, do the following.
- When installing Sophos Enterprise Console and PureMessage together, you must first install Sophos Enterprise Console.
- If PureMessage for Exchange is already present, or if you are using a SQL Server 2005/2008 database on a different server (a remote database) and the issue occurs, use the SQL Server Configuration Manager to enable the TCP/IP protocol for the database instance and also start the SQL Server Browser service.
Upgrading
- (WKI79868) When you upgrade from Sophos Enterprise Console 5.0 to Sophos Enterprise Console 5.4.x, the Patch Assessment Event Viewer will be blank. Missing patches data
will appear in the Patch Assessment Event Viewer after the computers are
assessed for missing patches during their next scheduled assessment. (The patch
assessment interval is specified in the Patch Policy and can be set to "Every 8
hours", "Every day" (default), or "Every week".)
This issue does not appear when upgrading to Enterprise Console 5.4.x from Enterprise Console 5.1 or later.
For more information about issues with upgrading Enterprise Console, see http://www.sophos.com/en-us/support/knowledgebase/114627.aspx.
Deployment
- (DEF84838) It is not possible to protect Windows 8 and Windows 8.1 computers
that are in a workgroup from Enterprise Console 5.4.x running on Windows Server
2008, Windows Server 2008 R2, Windows Server 2012, or Windows Server 2012
R2.
For more information and instructions on how to enable deployment, see http://www.sophos.com/en-us/support/knowledgebase/118354.aspx.
General
- (DEF90191) On Japanese or Chinese Windows Server 2012 installations, Enterprise Console fails when the Chart tab is selected in the Reporting window. Workaround: Use scheduled reports instead.
- (DEF82914) Optional user-defined desktop messages are not displayed on computers running Windows 8. For more information, see http://www.sophos.com/en-us/support/knowledgebase/118233.aspx.
- (DEF58871, DEF58872) When discovering
computers or synchronizing to Active Directory, Enterprise Console may fail to differentiate between multiple computers with the same name, and
may switch them between groups alternately. This situation may arise where
identically-named computers are situated on different domains or sub-domains.
To work around this problem, do one of the following.
- Ensure that Sophos RMS (Remote
Management System) is installed and running on all identically-named
computers before attempting to find them from Enterprise Console.
Do not synchronize any Active Directory groups that contain machines which have identically-named computers. Manage the computers manually.
- Eliminate duplicate computer names on your network.
- Ensure that Sophos RMS (Remote
Management System) is installed and running on all identically-named
computers before attempting to find them from Enterprise Console.
Data control
For information about limitations of data control, see http://www.sophos.com/en-us/support/knowledgebase/63016.aspx.
Additional information
For release notes and other documentation for managed endpoint software, follow these links:
- Endpoint release notes
- Sophos Endpoint Security and Control for Windows
- Sophos Anti-Virus for Mac OS X
- Sophos Anti-Virus for Linux
- Sophos Anti-Virus for UNIX
Before using Sophos Reporting Interface, read the Sophos Reporting Interface documentation.
Sophos documentation is published at www.sophos.com/en-us/support/documentation.aspx.
Information from previous releases
For information about changes in earlier versions of Sophos Enterprise Console, see the following release notes:
- Sophos Enterprise Console 5.4.0 release notes
- Sophos Enterprise Console 5.3.1 release notes
- Sophos Enterprise Console 5.3.0 release notes
- Sophos Enterprise Console 5.2.2 release notes
- Sophos Enterprise Console 5.2.1 R2 release notes
- Sophos Enterprise Console 5.2.1 release notes
- Sophos Enterprise Console 5.2.0 release notes
- Sophos Enterprise Console 5.1 release notes
Technical support
You can find technical support for Sophos products in any of these ways:
- Visit the Sophos Community at community.sophos.com/ and search for other users who are experiencing the same problem.
- Visit the Sophos support knowledgebase at www.sophos.com/en-us/support.aspx.
- Download the product documentation at www.sophos.com/en-us/support/documentation.aspx.
- Open a ticket with our support team at https://secure2.sophos.com/support/contact-support/support-query.aspx.
Legal notices
Copyright © 2016 Sophos Limited. All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner.
Sophos, Sophos Anti-Virus and SafeGuard are registered trademarks of Sophos Limited, Sophos Group and Utimaco Safeware AG, as applicable. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.