Avira AV / Sophos AV no Update since April 12

Now Sophos and Avira AV  gets the updates

All is OK here again, too. ATP, Avira and Sophos are updated.

Thank you guys!

Not quite, IPS has not updated.

Ian

I agree Ian, same here. My IPS data is from April 11 but I thought this does not update that often.

So what you are implying is that there haven't been any new IPS/DDOS attacks in the last 3 or 4 days that require new signatures?

Ian

For sure not. Maybe I should have written first "irony mode on"... Last DoS attack I have seen here was two hours ago. I am just used to "some" delays!

Things are improving. My last IPS pattern is 9.15.80, from April 16 6pm.

Actually an "Improving" of the situation is exaggerating reality again. Last IPS pattern is the same 9.15.80 since April 16 6pm and therefore 2 days old again. Manual update does not help. Anybody from Sophos out there who can have a look at it? Would be much appreciated. 

Actually an "Improving" of the situation is exaggerating reality again. Last IPS pattern is the same 9.15.80 since April 16 6pm and therefore 2 days old again. Manual update does not help. Anybody from Sophos out there who can have a look at it? Would be much appreciated. 

I am here as a XG User and personally speaking, The IPS Team collect the latest changes in Talos etc. to bundle them into one IPS update. 

More likely this is the reason for the "slower" publishing of IPS rules. 

You could check the latest talos / snort rule set. There are most likely publish only each week.

https://www.snort.org/talos

IPS update dated 19/4/2019.

Ian

Thank you for sharing that information. Although the idea behind seems reasonable, changes once a week would be a bit scary. Today I have IPS pattern # 9.15.81, it changed yesterday @ 5pm.

In fact it is not "weeks". 

But you cannot publish something, which is not "tested" and you cannot publish something, which does not exist. 

So basically you can take a look at the talos changelog.