Thread Info
  • State Suggested Answer
  • +6 person also asked this people also asked this
  • Locked Locked
  • Replies 47 replies
  • Answers 4 answers
  • Subscribers 46 subscribers
  • Views 25716 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

v18 MR-1 killing all traffic

Gary Parr

I loaded MR-1, everything was fine for a while then suddenly all traffic dropped. I could still get into XG itself and nothing looked wrong, so I thought it was an upstream device. I rebooted those but still nothing. Rebooted XG and suddenly everything started working again. No more than 15 minutes later, all traffic died again. This time I spent some time looking at the XG logs but nothing stood out. No services were reported down and all interfaces and gateways reported as up. I have since reverted back to GA build 354 and all again is right with the world. When I have some time I can push MR-1 back on and dig some more, but wanted to share in case anyone else has had a similar experience.



This thread was automatically locked due to age.
  • 0 in reply to lferrara

    Hi Iferrara,

       Thanks for your update.

    We have applied patch at many customer appliances and all are working fine.

    Till the time no one reported any issue.

    Could you please enable support access id and share your device access id so we will check further and give you an update later.

  • 0 in reply to rfcat_vk

    Hi rf,

         Thanks for the device access and quick response.

    We have applied fix in your device and now monitoring the device.

    Please share your feedback if you face any issues.

  • 0

    I had this problem after upgrading to MR-1 on our home Sophos setup (mini-PC) - everything just died - reboot and fine for another 8-12 hours or so.  Have rolled back to previous v18.0 345 software release.  But another push for better QA please - this is our house firewall so two people working from home and two kids who connect with their mates and school via this.

    Normally would have waited, but since last week the AV definitions setup broke and needed some Advanced shell tinkering to fix, I thought it best to update - assuming that problem would then be properly fixed...

    Caution please guys.  

    Paul

  • 0 in reply to Apurv Patel

    I can confirm that the firewall is working good with the fix - no blackouts yet.. the patch was applied yesterday at 3pm GMT and its still going good.

  • 0 in reply to Apurv Patel

    So I applied the new release when it came out and have not had a problem (to date) -- Does this affect all MR1 updates, or are there certain conditions that trigger this issue?

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent

    Was it an update from 18.0 GA or 17.x?

    I wonder if this could be the difference.

    Regards, Jelle

    Sophos XG210-HA (SFOS 18.0.4) on SG210 appliances with Sandstorm and 1x AP55
    Sophos Central with Intercept X Advanced, Device Encryption, Phish Threat, Mobile Control Advanced

    If a post solves your question use the 'This helped me' link.

  • 0 in reply to Jelle

    In my case (work from home XG) it was a an eventual upgrade from 17.5.x -- we are a reseller, and I used my home system as one of several to test the beta, and the eventual GA release, so I went from 17.5.x to 18 betas (in succession) then GA build 1, then the latest build of 18.0.0, then 18 MR 1.  Literally every public step available.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent

    OK, I was thinking about a direct update from 17.x to 18.0 MR1 but then that's not the difference.

    Regards, Jelle

    Sophos XG210-HA (SFOS 18.0.4) on SG210 appliances with Sandstorm and 1x AP55
    Sophos Central with Intercept X Advanced, Device Encryption, Phish Threat, Mobile Control Advanced

    If a post solves your question use the 'This helped me' link.

  • 0

    Am I reading that both latest updates of XG and UTM introduced this same issue? I thought these were two completely different products lines?

Cookie Information Banner