Cisco C170 Ironport - Unable to update Sophos AV Update.

[achung]

Hi,

We have a Cisco C170 Ironport with Sophos AV Active subscription on it dated till July 27 2023.

The issue is that the Sophos AV engine is not updating.

Our sellers asked us to open a ticket but seems we couldn't open a ticket because the C170 is already end-of-life.

In short we have a current active Subscription but its useless as the AV won't update.

This is the error we get from the Device,

sophos antivirus - The Anti-Virus database on this system is expired. Although the system will continue to scan for existing viruses, new virus updates will no longer be available. Please run avupdate to update to the latest engine immediately. Contact Cisco IronPort Customer Support if you have any questions.
Current Sophos Anti-Virus Information:
SAV Engine Version 5.88

How do we get our device to update the AV engine with the latest Sophos updates?

Thanks in advance.

[balaji.bandi]

When was this stopped ? make sure you have connectivity to the internet to get updates, is the rest of the updates working as expected.

Go to command level check below :

> antivirusstatus sophos

> antivirusupdate force

you can check the grep with Sophos log any update, give some time and check again  below :

> antivirusstatus

[Ken Stieers]

The C170 will no longer get sophos updates.  You need to get a new box, or move it to VM... 

Here's an answer posed by a Cisco TAC rep from April for the same question:

https://community.cisco.com/t5/email-security/c170-stopped-updating-sophos-anti-virus/m-p/4600282/highlight/true#M23474