This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

V17 MR5 and failures

Hi folks,

installed MR5 this morning, not good.

1/. AP 55 5ghz SSIDs now take even longer to come on line.

2/. Mac Books and Ipads are unable to connect to the Apple Store, no internet connection, funny I am writing this post from the same mac book. I have restarted the Mac book.

 

I have an Apple update rule (before MR5 installation) which will be the subject of another thread shortly. iPhones all seem to connect to the Apple store quite happily.

 

Ian



This thread was automatically locked due to age.
Parents
  • Good day Ian,

    I have several Macs, PCs, iPads and iPhones on my home network along with ATVs and Android boxes.  After upgrading to MR5 last night, I've had no issues other than the longer than expected reboot time for the XG.  

    For me, IPv6 appears to have been improved in MR5 at least for my Apple devices which all connect seamlessly via IPv6 now.

  • It would be helpful giving a few details about the configuration in use for those who have had issues resulting from an upgrade, or issues resolved from an upgrade.

     

    We know that web filtering was previously causing issues with Microsoft and Apple Updates because of the way they download updates.  So, it would be helpful when someone reports an issue, or resolution whether they are using web filtering or not in the policy.  It would also be helpful if web filtering is enabled and causing issues, to attempt disabling it and see if the same issue occurs.  If disabling web filtering is still the workaround, then this should be reported to support so the final issues can be resolved with web filtering in the next release. 

     

    We still don't have any production units on v17 yet, I'm mainly concerned about the IPSec VPN stability issues reported, though I think for the sites that don't require VPN it would be stable enough at this point for us.  I am going to use MR 5 on our test box first before going into production.  I want to see the IPSec VPN's stability in our test environment before I would be comfortable upgrading.  Fortunately we don't use web or email filtering with the XG, which is where most of the non-VPN reported issues seem to be.

  • The Apple rules. These worked before MR5. What I did find was that I had to leave the Apple Services out, but after the Apple upgrade I added the Apple service back. I have tried removing it but that had no effect. I also disabled the rule, that had no affect.

    Ian

  • Thanks for sharing that information, unfortunately I don't have Apple devices to confirm the issue with MR 5.  It's helpful to know however you are still having issues without any web filtering enabled.  It sounds like the Apple issue may be a little more complicated with changes being made from both vendors.

     

    Has anyone noticed any internet speed issues?  I have a Sophos XG 115 test box on v17 MR 5, and on a 100meg down connection I am barely measuring 5megs for a speedtest.  I bypass the Sophos XG and get over 90megs, can anyone please confirm speed issues with MR 5?

  • As mentioned above, everything works for my Apple and PC products with v17 MR5.  I do not have any special rules for Apple or other devices (other than a rule to block all outgoing connection attempts from my security cameras).  I do have Scan HTTP, Intrusion Prevention, Web Policy and a rule to block Google Analytics.

    For reference, I've attached my general firewall rule for LAN to WAN (IPv4) traffic.

  • Hi,

    under MR3 there was a problem using Application policy which is fixed for the PCs and the Macs once they have seen the wild internet but not behind the XG.

    The logs don't help, failed or successful attempts show.

    Ian

  • Interesting, that sounds like the issue I had with a fresh install of Bitdefender.  It could not connect to the Bitdefender server for the initial update.  Other machines with Bitdefender installed prior to XG 17 worked fine.  I managed to get the fresh install of Bitdefender to work by temporarily changing the firewall rule on XG from any-to-any, updating Bitdefender database, then reverting my firewall rule back.  The fresh install now works flawlessly.  Nothing was ever registered in the logs, but something was obviously being blocked.

  • Looks like it was only the Apple App store that failed to find an internet connection, the apps themselves all updated, strange.

    I have connected my failing devices directly to the internet via the iphone hotspot and now all connect to the Apple App store without errors while using the XG.

    Ian

Reply
  • Looks like it was only the Apple App store that failed to find an internet connection, the apps themselves all updated, strange.

    I have connected my failing devices directly to the internet via the iphone hotspot and now all connect to the Apple App store without errors while using the XG.

    Ian

Children