Guest User!

You are not Sophos Staff.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 27 subscribers
  • Views 630 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Our Sophos FW receiving a Failed Patter Update

Ryan Dionido



Here is the logs as well under /log/u2d.log

DEBUG 2022-10-08 04:52:37Z [14462]: Received md5sum : 87b1da28f8b17ac15df58af0a4a16011
DEBUG 2022-10-08 04:52:37Z [14462]: Received module : sysupdate
DEBUG 2022-10-08 04:52:37Z [14462]: Received cv : 0
DEBUG 2022-10-08 04:52:37Z [14462]: Received type : full
2022-10-08 04:53:28Z dr_dload_checker: Download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg was interrupted/did not complete.
2022-10-08 04:53:28Z dr_dload_checker: Retrying/Resuming download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg.
2022-10-08 04:54:28Z dr_dload_checker: Download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg was interrupted/did not complete.
2022-10-08 04:54:28Z dr_dload_checker: Retrying/Resuming download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg.
2022-10-08 04:55:28Z dr_dload_checker: Download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg was interrupted/did not complete.
2022-10-08 04:55:28Z dr_dload_checker: Retrying/Resuming download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg.
2022-10-08 04:56:28Z dr_dload_checker: Download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg was interrupted/did not complete.
2022-10-08 04:56:28Z dr_dload_checker: Retrying/Resuming download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg.
2022-10-08 04:57:28Z dr_dload_checker: Download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg was interrupted/did not complete.
2022-10-08 04:57:28Z dr_dload_checker: Retrying/Resuming download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg.
2022-10-08 04:58:28Z dr_dload_checker: Download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg was interrupted/did not complete.
2022-10-08 04:58:28Z dr_dload_checker: Retrying/Resuming download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg.
2022-10-08 04:59:28Z dr_dload_checker: Download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg was interrupted/did not complete.
2022-10-08 04:59:28Z dr_dload_checker: Retrying/Resuming download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg.
2022-10-08 05:00:28Z dr_dload_checker: Download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg was interrupted/did not complete.
2022-10-08 05:00:28Z dr_dload_checker: Retrying/Resuming download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg.

DEBUG 2022-10-08 05:01:06Z [18186]: --deviceid = e624033599ed831dd11297fe8f399a88841d
DEBUG 2022-10-08 05:01:06Z [18186]: --fwversion = 18.5.3.408
DEBUG 2022-10-08 05:01:06Z [18186]: --productcode = CN
DEBUG 2022-10-08 05:01:06Z [18186]: --model = XG135
DEBUG 2022-10-08 05:01:06Z [18186]: --vendor = XN03
DEBUG 2022-10-08 05:01:06Z [18186]: --pkg_sysupdate_version = 14
DEBUG 2022-10-08 05:01:06Z [18186]: Added new server : Host - ap-northeast-1.u2d.sophos.com., Port - 443
DEBUG 2022-10-08 05:01:06Z [18186]: Added new server : Host - eu-west-1.u2d.sophos.com., Port - 443
DEBUG 2022-10-08 05:01:06Z [18186]: Added new server : Host - us-west-2.u2d.sophos.com., Port - 443
DEBUG 2022-10-08 05:01:06Z [18186]: --u2d_proto = 2.00
DEBUG 2022-10-08 05:01:06Z [18186]: Final query string is :
?


DEBUG 2022-10-08 05:01:07Z [18186]: Response code : 200
DEBUG 2022-10-08 05:01:07Z [18186]: Response body :
<Up2Date>
<Package u2dtype="firmware" requiresMandatoryUpdate="0">
<File name="HW-19.0.1_MR-1.SF300-365.sig">
<location>xg-up2date-firmwares.sophosupd.com/.../location>
<version>SFOS 19.0.1 MR1-Build365</version>
<fwversion>19.0.1.365</fwversion>
<appmodel>XG135</appmodel>
<appvendor>XN03</appvendor>
<productcode>CN</productcode>
<size>437373455</size>
<md5sum>478f96985dfd103f852d75d30bd3efef</md5sum>
<release>GA</release>
<releasenotes>xg-up2date-firmwares.sophosupd.com/.../releasenotes>
<message>Sophos Firewall MR Release</message>
<releasedate>2022-08-10</releasedate>
</File>
<File name="HW-18.5.4_MR-4.SF300-418.sig">
<location>xg-up2date-firmwares.sophosupd.com/.../location>
<version>SFOS 18.5.4 MR4-Build418</version>
<fwversion>18.5.4.418</fwversion>
<appmodel>XG135</appmodel>
<appvendor>XN03</appvendor>
<productcode>CN</productcode>
<size>405189873</size>
<md5sum>2ee98c5ebc0289ed4ad6a62f52b828c2</md5sum>
<release>MR</release>
<releasenotes>xg-up2date-firmwares.sophosupd.com/.../releasenotes>
<message>Sophos Firewall MR Release</message>
<releasedate>2022-06-13</releasedate>
</File>
</Package>
<Package u2dtype="pattern">
<File name="sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg">
<location>xg-up2date-firmwares.sophosupd.com/.../location>
<version>15</version>
<size>176806</size>
<md5sum>87b1da28f8b17ac15df58af0a4a16011</md5sum>
<module>sysupdate</module>
<cv>0</cv>
<type>full</type>
</File>
</Package>
</Up2Date>

DEBUG 2022-10-08 05:01:07Z [18186]: Response length : 1866
DEBUG 2022-10-08 05:01:07Z [18186]: Received name : HW-19.0.1_MR-1.SF300-365.sig
DEBUG 2022-10-08 05:01:07Z [18186]: Received location : xg-up2date-firmwares.sophosupd.com/.../HW-19.0.1_MR-1.SF300-365.sig
DEBUG 2022-10-08 05:01:07Z [18186]: Received version : SFOS 19.0.1 MR1-Build365
DEBUG 2022-10-08 05:01:07Z [18186]: Received fwversion : 19.0.1.365
DEBUG 2022-10-08 05:01:07Z [18186]: Received appmodel : XG135
DEBUG 2022-10-08 05:01:07Z [18186]: Received appvendor : XN03
DEBUG 2022-10-08 05:01:07Z [18186]: Received productcode : CN
DEBUG 2022-10-08 05:01:07Z [18186]: Received size : 437373455
DEBUG 2022-10-08 05:01:07Z [18186]: Received md5sum : 478f96985dfd103f852d75d30bd3efef
DEBUG 2022-10-08 05:01:07Z [18186]: Received release : GA
DEBUG 2022-10-08 05:01:07Z [18186]: Received releasenotes : xg-up2date-firmwares.sophosupd.com/.../19.0.1.365.releasenotes
DEBUG 2022-10-08 05:01:07Z [18186]: Received message : Sophos Firewall MR Release
DEBUG 2022-10-08 05:01:07Z [18186]: Received releasedate : 2022-08-10
DEBUG 2022-10-08 05:01:07Z [18186]: Received name : HW-18.5.4_MR-4.SF300-418.sig
DEBUG 2022-10-08 05:01:07Z [18186]: Received location : xg-up2date-firmwares.sophosupd.com/.../HW-18.5.4_MR-4.SF300-418.sig
DEBUG 2022-10-08 05:01:07Z [18186]: Received version : SFOS 18.5.4 MR4-Build418
DEBUG 2022-10-08 05:01:07Z [18186]: Received fwversion : 18.5.4.418
DEBUG 2022-10-08 05:01:07Z [18186]: Received appmodel : XG135
DEBUG 2022-10-08 05:01:07Z [18186]: Received appvendor : XN03
DEBUG 2022-10-08 05:01:07Z [18186]: Received productcode : CN
DEBUG 2022-10-08 05:01:07Z [18186]: Received size : 405189873
DEBUG 2022-10-08 05:01:07Z [18186]: Received md5sum : 2ee98c5ebc0289ed4ad6a62f52b828c2
DEBUG 2022-10-08 05:01:07Z [18186]: Received release : MR
DEBUG 2022-10-08 05:01:07Z [18186]: Received releasenotes : xg-up2date-firmwares.sophosupd.com/.../18.5.4.418.releasenotes
DEBUG 2022-10-08 05:01:07Z [18186]: Received message : Sophos Firewall MR Release
DEBUG 2022-10-08 05:01:07Z [18186]: Received releasedate : 2022-06-13
DEBUG 2022-10-08 05:01:07Z [18186]: Received name : sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg
DEBUG 2022-10-08 05:01:07Z [18186]: Received location : xg-up2date-firmwares.sophosupd.com/.../sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg
DEBUG 2022-10-08 05:01:07Z [18186]: Received version : 15
DEBUG 2022-10-08 05:01:07Z [18186]: Received size : 176806
DEBUG 2022-10-08 05:01:07Z [18186]: Received md5sum : 87b1da28f8b17ac15df58af0a4a16011
DEBUG 2022-10-08 05:01:07Z [18186]: Received module : sysupdate
DEBUG 2022-10-08 05:01:07Z [18186]: Received cv : 0
DEBUG 2022-10-08 05:01:07Z [18186]: Received type : full
2022-10-08 05:01:28Z dr_dload_checker: Download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg was interrupted/did not complete.
2022-10-08 05:01:28Z dr_dload_checker: Retrying/Resuming download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg.
2022-10-08 05:02:28Z dr_dload_checker: Download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg was interrupted/did not complete.
2022-10-08 05:02:28Z dr_dload_checker: Retrying/Resuming download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg.
2022-10-08 05:03:28Z dr_dload_checker: Download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg was interrupted/did not complete.
2022-10-08 05:03:28Z dr_dload_checker: Retrying/Resuming download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg.
2022-10-08 05:04:28Z dr_dload_checker: Download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg was interrupted/did not complete.
2022-10-08 05:04:28Z dr_dload_checker: Retrying/Resuming download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg.
2022-10-08 05:05:28Z dr_dload_checker: Download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg was interrupted/did not complete.
2022-10-08 05:05:28Z dr_dload_checker: Retrying/Resuming download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg.
2022-10-08 05:06:28Z dr_dload_checker: Download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg was interrupted/did not complete.
2022-10-08 05:06:28Z dr_dload_checker: Retrying/Resuming download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg.
2022-10-08 05:07:28Z dr_dload_checker: Download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg was interrupted/did not complete.
2022-10-08 05:07:28Z dr_dload_checker: Retrying/Resuming download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg.
2022-10-08 05:08:28Z dr_dload_checker: Download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg was interrupted/did not complete.
2022-10-08 05:08:28Z dr_dload_checker: Retrying/Resuming download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg.
2022-10-08 05:09:28Z dr_dload_checker: Download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg was interrupted/did not complete.
2022-10-08 05:09:28Z dr_dload_checker: Retrying/Resuming download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg.
2022-10-08 05:10:28Z dr_dload_checker: Download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg was interrupted/did not complete.
2022-10-08 05:10:28Z dr_dload_checker: Retrying/Resuming download for file sfsysupdate-NC-106666-v1-phase1.tar.gz.gpg.






This thread was automatically locked due to age.
Parents
  • 0

    Hello Ryan,

    Greetings!

    Based on the logs, I suspect that the firewall is unable to download the pattern from our domain.

     Possible solution:

    1. If you are having multiple service providers and all are set to active. Set either of the ISP links to backup and perform manual pattern updates and review once.
    2. If not, whitelist the domain xg-up2date-firmwares.sophosupd.com from any upper-layer device.
    3. Also check the disk usage by executing df -kh in advance shell.

    Regards,

    Mayur Makvana

Reply
  • 0

    Hello Ryan,

    Greetings!

    Based on the logs, I suspect that the firewall is unable to download the pattern from our domain.

     Possible solution:

    1. If you are having multiple service providers and all are set to active. Set either of the ISP links to backup and perform manual pattern updates and review once.
    2. If not, whitelist the domain xg-up2date-firmwares.sophosupd.com from any upper-layer device.
    3. Also check the disk usage by executing df -kh in advance shell.

    Regards,

    Mayur Makvana

Children
No Data