Posts made by K.Hays

It seems like for the most part this worked. Thanks for your help @madeyem ! I suppose this is solved now.

@madeyem Gotchya. Well, I did find (through a lot of digging. For whatever reason they don’t really advertise these things) that in April Sophos put out a small guide on how to create a “gold” Image. I’ll post the link but basically you can stop services and delete specific host information, then immediately create the image. When you blast it out, it should then come back up and sync. I’m making a batch file to quicken the process, and then i’m going to test it out. Here’s the link

https://community.sophos.com/kb/en-us/120560

@madeyem Specifically I only get one option in uninstall programs which is “Sophos Endpoint Agent”. I’m assuming that it has to do with the fact that our management is cloud based. I think i may try using a batch file to uninstall the components I see in your picture, and see how that works. Alternatively i could use a batch to disable them before image, and then a snapin to re enable them after image? Just throwing ideas around now.

@madeyem I see. We do have windows but those options do not appear for us. We just have the one “Sophos Anti-Virus”. I’m going to do a fresh install and see what I get.

@madeyem I’m sorry if this is a dumb question but sophos is new to me/us, how do you go about uninstalling specific components in sophos. How do you do it manually?

@madeyem I suppose my question is then, how would you uninstall the components separately? I could possibly do it with a batch file but is there a more simple way? Another thing, we are running cloud based management. We don’t have a dedicated server. Would that affect this process at all?

@madeyem I’ll give it a try!! Thank you!

SERVER

• FOG Version: 1.5.4
  OS: Debian

Description: The ultimate goal here is to install Sophos silently in the background through a snapin if not by other means. I’d love it to be able to just deploy after an image so that there is no user interaction required aside from just checking the machine to assure that everything worked. Sophos has to be installed after image or it won’t interact correctly with Sophos Central. I have the snapin setup up through a couple different means (The EXE and a batch file that points to a local file I left on the image. Side note: There is no MSI available for Sophos) Neither of them work from the login screen. If I am signed in, no problem. I was wondering if anyone had insight as to how we can make this work. It seems like it needs an active desktop, or at least a user account as I can lock the computer, and it will still install.

Here’s some insight on how our images are constructed. We setup up the computer and install all programs that can be installed first. We leave it off of the domain named generically so that after the image Fog renames the computers, adds them to the domain, and then puts them in the correct OU’s. I would love to be able to keep this automated, but not sure if it’s possible the way we have it all set up currently.

If you have any ideas, please let me know. Thanks!

@george1421 Gotchya, that explains it, Thank you!

@george1421 Also, did these settings change after a certain update? On our old server we had these issues after an update when we were previously getting by alright.

@george1421 So far so good. We were able to deploy to an entire lab using unicast. No errors yet! I’ll be using it more this week and will provide further feedback. Thank you!!

@george1421 Yep the memory has been changed since this morning; and i will change the max server when the tasks complete. Thank you !! can or should the memory go higher? The server has 32 gigs of ram, not that it needs it.

Well we went ahead and tested it the the _servers options set to 6,6,6 respectively just to see. It is in fact working. The image is running right now but we waited for the next batch in the unicast task to start and they did. We hadn’t previously gotten the first batch to finish successfully before that so it’s lookin good. So the only other thing you think i should change then would be max_spare_servers to 40; not either of the other min_servers/startserver settings from 6?

@k-hays also we have been able to get to the web gui recently without issue.

@george1421 ok so max_spare_servers needs to be 40. gotchya. Should i change the other 2 _servers settings from 6? Also should max_spare_servers be set to the same as number as pm.max_children?

@george1421 Another update. I set Min_spare_servers = 6, max_spare_servers = 6, and start_servers = 6 and php successfully restarted/not sure if thats good or bad.

@george1421 Yes, and it is currently set to 40. When i said max i meant the Max_spare_servers option. So what it’s telling me is that pm.start_servers cannot be a smaller number than pm.min_spare_servers. Or at least thats the error i’m getting. The last things you had me change (pm.Start_servers and pm,.mid_spare_servers) are apparently causing the error. Also the pm.max_spare_servers that needs to be set higher than what we set the start_servers options as well. could i just set them to 5,6,7 respectively? Im sorry, i’m really not entirely sure how this works

So PHP wouldn’t restart and i’m pretty sure it was because i had set my min spare servers larger than the max. That being said, if my min is 6 (as you said) what should my max be?

Edit- @george1421 I set it to 6 just to see and PHP still failed with a different error this time. It says the start server can be less then the min spare and no more than the max. So what should i change them to?

@k-hays Also if you meant the error, then yes. It is the exact same issue (or at least extremely similar). I made the changes and will test it again shortly.