This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Schedule firmware updates - XG

I'm so used to manually having to do firmware updates out of hours, I never questioned it. Many firewalls we manage are customers who we don't manage in central. We've won their firewall business, but are not the incumbent partner.

Today for some reason, it popped into my head - why in the name of the lord can I not schedule it for 0530 and then check it when I wake up and action any failures then rather than have to set an alarm early and manually do it.

no really though, this is simple stuff, when? A native option please.

This thread was automatically locked due to age.

Top Replies

Ryan Partington over 4 years ago in reply to LuCar Toni +1

Maybe some users wouldn't want to connect it to central. Are you aware of the bug that currently exists where the /conf partition fills up and once it hits 100% the box goes into failsafe? One of the fixes we have been advised is to turn on database pruning (which isn't on by default) after connecting to central.

With complexity comes risk, some users may want a clean tight environment with no cloud integration.
Jump to answer

0 Ryan Partington over 4 years ago in reply to jprusch

Sure, https://support.sophos.com/support/s/article/KB-000042474?language=en_US I've found this only help in some cases, in other cases you need to raise a ticket, request escalation to GES and then level 2 will apply a patch as there isn't a fix at present. Current firmware's at time of writing: 18.5.3/19.0.0

Do not allow /conf to exceed 99% or you can kiss your firewall tele bye bye (I say don't allow it - I don't know how to control it other than the methods I've mentioned)

------------------------------------------------

worlds number one free ICMP monitoring platform: https://pinescore.com
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to Ryan Partington

That is actually the power of SAC (sync app ID) and its capability of creating own Apps for every app existing on the market. So if you have the situation: Small Appliance + many devices without any cleanup, this can be a result after some time, if you network is very "migrating" (means getting new apps all the time).

Personally i never occur this situation before, but saw the issue reported by partners using SAC + small appliances.

I would recommend to keep a cleanup nevertheless to have a better overview. An app not being used for more than 3 months seems to be outdated anyway.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to LuCar Toni

BTW: https://partnernews.sophos.com/en-us/2022/06/products/whats-new-and-whats-next-for-central-firewall-management/

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel