Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 14 replies
  • Subscribers 26 subscribers
  • Views 19537 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Pattern Update not working

JoGnu

Hello,

I am using a XG115w hardware with SFOS 16.05.0 RC-1 installed to it as a home version.

I have just set up my basic configuration and so far it seems to be working now.


During my setup phase I had several issues...One was that some webpages were working fine, others did not (HTTP 500 error).

I found out that others solved this problem by doing a pattern update.

So I did this as well and voilá all webpages worked as expected afterwards.

 

Then I wanted to test an old AP10 Rev2 because I (obviously too late :( ) found out that the integrated wireless function of the XG115w will not work if you are using the home version on it... During my tests I then noticed that the AP10 was not recognized by the firewall.

It received an IP via DHCP but in the logs it was stated "unknown AP model encountered: AP10 dropping.".

After further investigation I then found out that this might be related to an old firmware of the AP.

 

Thats why I then came back to the pattern updates.

I tried to install the updates again but all updates failed this time.

I have tried many different possibilites to solve this issue, firewall rules (including any any any for testing purposes), web protection settings, moving content...

None solved my issue.

Thats why I hope some of you here in the community might be able to help me.

 

Regards

 

Here some screenshots of my configuration:

 



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to lferrara

    Hi,

    the following is what I have already tried without success:

    "mv /content/u2d/pattern /content/u2d/pattern.org".


    I think this is what you were aiming at.

     

    So your next step would be to try to switch to version 16.01.2, update the patterns if possible and then update to 16.05.0?

    Is this possible without a complete re-install?

    Can I just upload the 16.01.2 firmware, boot from it (without loosing settings), update patterns and update to 16.05?

    The next question would then be: Where can I get the 16.01.2 firmware for my home installation? 

     

    Regards

  • 0 in reply to JoGnu

    Try this steps:

    • backup the current configuration
    • format the appliance
    • install the 16.01.2
    • sync the license
    • do a standard configuration that allows the XG to update the patterns from internet
    • If everything is ok, upgrade to 16.05
    • apply the saved configuration

    I am not sure if you can upload the 16.01.2 firmware and go back. XG allows you to rollback but you have started from 16.05.

    Let us know.

    Thanks

  • 0 in reply to lferrara

    Hi,

    Thanks for your quick response.

    I guess before formatting I will try to upload the 16.01.2 firmware and rollback like described above...

    This would be easier to accomplish than a complete re-install.

    If this does not work out I will follow your steps.

     

    Nevertheless I will first of all need the 16.01.2 firmware for my home version.

    Is this the right one?:

    (https://community.sophos.com/products/xg-firewall/b/xg-blog/posts/sfos-16-01-2-released --> Downloads --> 

    Software Install   SW-SFOS_16.01.2.SFW-222.gpg ? 

     )
     

  • 0 in reply to JoGnu

    Let us know.

    The right Package is the ISO. GPG are used for in-place upgrade.

  • 0 in reply to lferrara

    I did not find the older version as an .ISO file. Sure that it is still possible to get it?

    I did only find the following version as an ISO: https://community.sophos.com/products/xg-firewall/b/xg-blog/posts/sfos-16-01-0-released-1523397409

    --> 

    SW-SFOS_16.01.1-202.iso

     

    Also, please have a look at the following screenshot:

    Is it normal that my version is not really active (yellow ball)? 

  • 0 in reply to lferrara

    Problem seems to be solved but there are still some questions remaining...

     

    So what I have done...:

    1. Uploaded the 16.01.2 firmware (not the ISO but the GPG) to my appliance and booted from it (--> my appliance was set back to default settings due to this)

    2. Made my initial configuration, interface settings, firewall rules...

    3. Updated patterns --> Worked fine (AP10 is recognized now btw :) )

     

    The question still is why this issue occured...Was it due to a bug in 16.05? Did I have a wrong configuration?

    My problem is that I am not sure if I should upgrade to 16.05. now because somehow I expect the issue to reoccur once I did it...

    As far as I understood it is not officially released now, but instead it is a "soft release" which is something similar to a "beta phase", right?

    --> community.sophos.com/.../xg-firewall-16-05-rc1

    My update configuration at the moment:

     

    When I press "Check for new firmware" it states "No upgrades available".

     

    Is this correct as 16.05 is a soft release? Or is it because 16.05 firmware is already on my system but inactive?

    When I select "Boot fimware image" for the 16.05 version will my config be set back to default again once I do that?

    Would I then still have the possibility to rollback to 16.01 and keep my configuration? (Without backup / restore)

     

    When 16.05 is officially released will I be able to upgrade from 16.01 via the "check for new firmware" function OR will I first of all have to delete the 16.05 RC1 firmware from my appliance (if this is possible?!) OR first switch to 16.05 RC1, and then upgrade to the official release?

     

    Luk, as you told me to format the appliance and reinstall...Do you think my way was a good one or would you rather say that my appliance is not "clean" anymore and I should rather set it up from the scratch again?

     

    Sorry for these many questions, I am just trying to get a better understanding for what I am doing and do not want to start my home firewall experience with an appliance which is not fully healthy right from the beginning.

     

    Regards

  • 0 in reply to JoGnu

    JoGnu,

    checking new Firmware of course will not find any new Firmware. The new firmware checks firmware from Sophos Online database where only GA Releases exist, so you will never find a RC or beta one.

    You are already on the 16.01.2 and you have the 16.05 in it, so you can try to upgrade to 16.05 (before save the configuration just in case) and the XG will upgrade the configuration and firmware too.

    The pattern update is not a problem related to 16.05 RC but it happened even on other releases.

    Please make sure to ask one question per thread.

    Thanks

  • 0 in reply to lferrara

    Hello Luk,

     

    Thank you for your help, I really appreciate it :).

    I think the issue can then be seen as solved now.

     

    One last thing: Would you rather recommend me to reinstall the appliance from scratch to make sure everything is healthy and working as expected or would you rather say that the way I have handled things is fine and that the appliance is in a clean state?

    I do not want to start with an appliance which has some hidden "bad configurations" in it.

    Regards

     

  • 0 in reply to JoGnu

    Good that you fixed.

    I always like to start from a clean installation.

    Thanks