Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 28 subscribers
  • Views 860 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Schedule pattern updates at a specific time

Nathalie Lambert

Hi, 

I am having issues with pattern updates on a XG210 HA cluster. Every time it does IPS and AV updates, connections get dropped. The only way I found for it not to impact the users is to have it do pattern updates at night only. However, in order to have this happen you have to set the auto update interval to Daily, then disable and reenable auto update AT THE EXACT TIME YOU WANT IT TO HAPPEN! Which means that if I want to have the pattern updates at 3am, I have to do this config at 3am. Oh, and of course every time the firewall reboots or there is a failover, the pattern update time is reset back to when the reboot / failover happened. So you have to do the config again, at 3am. Every time. Obviously highly inconvenient and ridiculous. Is there any way to schedule pattern updates at a specific time? If not, can you please implement that, or even better, fix the connection drop issue while IPS / AV pattern updates happen? 

Thanks

Nathalie Lambert



This thread was automatically locked due to age.
Parents
  • 0

    It is ridiculous isn't it and it still hasn't been sorted. I got this escalated to a senior tech support engineer and he agreed it was ridiculous. He had to close the case because the behavior was 'as expected' but his manager was going to take it up with product development to try and get it resolved as a high priority. That was 3 months ago so we shall see.

    You can vote for this feature but quire frankly I don't think Sophos take much notice. It is the second highest requested feature and was first requested 5 years ago...still nothing - https://ideas.sophos.com/forums/330219-xg-firewall/suggestions/13066116-scheduled-installation-of-the-av-updates-and-firmw

  • 0 in reply to JasP

    This feature request is more likely come up because of the Firmware schedule, not the Pattern update. Firmware update is possible via Central. 

    Most customers, i know facing such issues, have limited RAM. This should not happen on a XG210, as i would expect. Can you check your current RAM Consumption? 

  • 0 in reply to LuCar Toni

    Firmware updates happen every few months and (at least for smaller estates) are easy to manage manually out of hours. IPS and ATP updates happen a few times a week. On a 100 series router, connectivity is lost for 3 minutes. How is that acceptable in a router? How do you explain to a customer, "yeah I know it drops all your phone calls a couple of times a week, it's designed that way!".

    I've said this before but it clearly needs repeating. Sophos desperately needs someone with some business sense in their product development team because their design decisions and priorities often make no sense to people actually having to deploy and support the product.

    I can not believe that implementing a scheduling system for updates is a major programming effort so why have we not got it after 5 years?

Reply
  • 0 in reply to LuCar Toni

    Firmware updates happen every few months and (at least for smaller estates) are easy to manage manually out of hours. IPS and ATP updates happen a few times a week. On a 100 series router, connectivity is lost for 3 minutes. How is that acceptable in a router? How do you explain to a customer, "yeah I know it drops all your phone calls a couple of times a week, it's designed that way!".

    I've said this before but it clearly needs repeating. Sophos desperately needs someone with some business sense in their product development team because their design decisions and priorities often make no sense to people actually having to deploy and support the product.

    I can not believe that implementing a scheduling system for updates is a major programming effort so why have we not got it after 5 years?

Children
No Data