Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 27 subscribers
  • Views 395 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Airgap Pattern.tar file not containing Sophos Connect client and Geo IP DB

LHerzog

Today  I stumbled over this:

docs.sophos.com/.../index.html

The airgap manual pattern update file https://airgap.u2d.sophos.com/sfos_patterns_update.tar

It does contain the legacy SSL VPN client but not the Sophos Connect client. Also Geo IP DB pattern is missing.

When you upload the file to the XG (18.5.2) it tries to update Connect Client and Geo IP DB but fails repeatedly. Can be seen in live log viewer.
2022-02-11 10:41:27
Up2Date
Failed
Failed to download file sophosconnect_1.00_2.1.001.tar.gz.gpg

Can you please include those two modules into the tar file?

Content of the file from today 2022 Feb 11th

This can be reproduced with a re-imaged SFOS without WAN connection. Upload the file and the errors appear in Log viewer>System



This thread was automatically locked due to age.
Parents
  • 0

    Thinking about GEO IP. What is the use case of a GEO IP Database in a Airgap Network? 

    __________________________________________________________________________________________________________________

  • 0 in reply to LuCar Toni

    thats not an answer to the question (ok, my post was not a question - just a report)

    but your question is the same about the VPN client - does it make sense in an airgap network? for a test-scenario it may makes sense, like in mine.
    and Sophos already includes legacy SSL VPN but not Conenct Client.

    2022-02-11 10:40:27,Up2Date,Failed,,Failed to download file sophosconnect_1.00_2.1.001.tar.gz.gpg,18030,
    2022-02-11 10:40:27,Up2Date,Failed,,Failed to download file geoip_1.00_2.0.008.tar.gz.gpg,18030,

    If the geo IP db is not included in the airgap .tar file, there should be logic in the XG airgap scripts to skip that missing file(s).

    or more simple: include in the file.

    I think, someone just forgot to include the new VPN client and Geo DB in the airgap patterns..

Reply
  • 0 in reply to LuCar Toni

    thats not an answer to the question (ok, my post was not a question - just a report)

    but your question is the same about the VPN client - does it make sense in an airgap network? for a test-scenario it may makes sense, like in mine.
    and Sophos already includes legacy SSL VPN but not Conenct Client.

    2022-02-11 10:40:27,Up2Date,Failed,,Failed to download file sophosconnect_1.00_2.1.001.tar.gz.gpg,18030,
    2022-02-11 10:40:27,Up2Date,Failed,,Failed to download file geoip_1.00_2.0.008.tar.gz.gpg,18030,

    If the geo IP db is not included in the airgap .tar file, there should be logic in the XG airgap scripts to skip that missing file(s).

    or more simple: include in the file.

    I think, someone just forgot to include the new VPN client and Geo DB in the airgap patterns..

Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?