No anti updates for nearly 24 hours

Hi,

a picture saves a thousand words.

Ian

Hello,

Greetings!

I have reviewed it my lab and shows the same!

The Sophos AntiSpam Interface pattern is not expected to update as frequently as eg. AV definifions.

The SASI engine downloads its DB updates itself, the SASI pattern package only holds a key used for authentication when that happens.

Having even a week old SASI pattern package is normal.

That answer only covers anti spam which by the way disagrees with previous answers on the subject.

• ian

IPS signatures are released twice a week, so it's expected the last release was Oct 20. 

Hi bobbylam,

that is a partial answer that does not cover anti-virus updates which still have not arrived or IPS updates which are now 7 days out of date.

Ian

Sorry not sure I understand, in your screenshot it shows both Sophos & Avira AV patterns were update on Oct 25, so your device seems to be receiving AV updates? 

For IPS patterns, it's scheduled to release twice a week. However some of our teams are currently on holiday, which may delay the IPS pattern release for this week. 

The screenshot was taken on the 26th, nearly 24 hours later than the last update. Today being the 27th has not seen any updates since the 25th.

ian

The screenshot was taken on the 26th, nearly 24 hours later than the last update. Today being the 27th has not seen any updates since the 25th.

ian

An IPS pattern was released today, so your device should've received the update already. 

AV patterns were also released today. 

Thank you for the information.

2 anti virus pattern updates, 1 anti spam pattern update, 1 ips pattern update, 1 geoip failed to update. My XG is currently set to update every 12 hours.

Ian

with a bit of prodding geoip is downloading, but failed to update.

Hi Ian, 

Do you see any errors in /log/u2d.log on your device? 

Hi bobbylam,

I cannot see any errors. The last 100 entries are from 2130 until around 2300 on the 27th. I do see the same new servers being added and a response code of 200.

Ian

Hi Ian, 

I checked a running XG, and it successfully updated to the patterns which was released today. What do you see on your patterns page? 

Hi Bobbylam,

I have acknowledge they have update, what hasn't updated is showing failure is the GEOIP database.

Ian

Ah sorry Ian, I thought you were saying your AV & IPS patterns were still failing. 

There was indeed an issue with the new 2.0.015 GeoIP package that was published. This has since been fixed, and your device should've installed it successfully now. 

Hi bobbylam,

thank you for checking, all updates have loaded successfully.

Ian