XG330 (SFOS 17.5.12 MR-12)
Since firewall reboot last night our XG is now blocking all HTTP sites and displaying the following page. We have not made any changes to any rules, and the HTTPS version of the site works fine.
More critically, there are no entries in the log viewer for these blocks to help diagnose which area of the XG is causing this block.
Hi IT Support166, Here request are getting blocked due to malware scanning failed which could be due to AV engine selected inside "Scan engine selection" in Web ==> General Settings patterns updated failed or broken during last pattern update checks.
Reference snapshot:
Please confirm patterns are up to date and if it is still giving failed result, as in work around "Change the scan engine to another one" time being. (If only the selected AV update is failed, if both Sophos and Avira AV pattern updated failed ) then /log/u2d.log will give more information on reason as guided by LuCar Toni
Is appliance running in HA setup? If yes, is it A-A or A-P setup?
Thanks Vishal_R and LuCar Toni,
Not an HA appliance setup.
Looks like the pattern update has been failing which corresponds with a support case we have open relating to Firmware check fails, and issues with Sophos Central Management.
I've not before accessed logs via scp on the XG but will follow details here: https://support.sophos.com/support/s/article/KB-000035842
Warmest regards.
Thanks Vishal_R and LuCar Toni,
Not an HA appliance setup.
Looks like the pattern update has been failing which corresponds with a support case we have open relating to Firmware check fails, and issues with Sophos Central Management.
I've not before accessed logs via scp on the XG but will follow details here: https://support.sophos.com/support/s/article/KB-000035842
Warmest regards.
