This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SW-18 upgrade/installation fails

I'm sad about the software quality of the Sophos XG firewall. I knew from the past, that MR builds could happen to not work, e.g. VPN would not establish (happened with 4 SW17 builds).
But what version SW-18 offers, made me speechless and wasted a complete day.

The new version SW-18.0.1_MR-1-Build396 showed up in the admin interface (SW version with own Intel hardware).
After installation, everything was gone (machine was not reachable anymore).

Restarting the machine and checking locally revealed those error messages (attached).


The CLI login was available and network configuration correct, but the interface was dead and the firewall did not work at all.
Booting of the old image was not possible, as the new boot loader did not have an entry for the old image...

Searching the internet suggest to install the new version fresh from the installer image.

The new version is not available in "mySpohos" and it was not so easy to find it.
SW-18.0.1_MR-1-Build396 was not available at all, but SW-18.0.0_GA-Build379-379 was.
Found here: community.sophos.com/.../xg-firewall-18-0-ga-build379-released

I installed the version and was presented with the CLI login, but "admin" did not work, nor other guesses like "","password","root",...
So Network configuration was not possible.
The web interface was not available under https://172.16.16.16:4444.
In addition, the loader showed version 16_05_8...

Why is an old version packed in the version 18 installer?
The new version is a dead end...

Therefore I downloaded the "old" version SFOS 17.5.12 and went through the installation.
This version accepted the "admin" password on CLI level and allowed network configuration.

Finally,... the web wizard restoration did not work, IPS and Application signatures need to be updated...
So offline setup, then network configuration (VLAN configuration for internet access cannot be done in the wizard...) and then I was able for device registration and IPS and Application signatures, which needed to be updated and then the restoration worked.


Why is it not possible to restore to the old version... For what resaon do you offer 2 image slots, when they do not work...



This thread was automatically locked due to age.
  • Hi,

    two images so you can rollback to the previous working version.

    How much memory does your XG have installed?

    Ian

  • with version 18, there is a new bootloader (GNU) which does not have the second image present. So no rollback possible.

     

    8 GB are installed but if I remember correctly, the "Home" version has some limitation on the memory.

  • Hi,

    the home limit is 6gb, but VMs seem to get away with 8gb.

    There has never been two images in an ISO, the second image you are referring to is the previous version and if installing from an ISO you would wipe that version.

    The versions that started is the last operational one anything prior is lost during the upgrade which should be a GPG or similar file.

    Ian

  • the update from the web interface v18 did replace the bootloader.

     

    Usually you have the old and the current version in the bootloader, but v18 only has the current (v18) in it and therefore does not allow to swith to the old.

     

    Installing from usb using the iso installer of course deletes everything and finishes with 1 image available.

    But this is not what I complained about.