Firmware v16.0.5.1 experience

Jeffrey,

can you explain better your question?

I have installed XG v16.05 MR1 and it works great (apart I am having a IMAP error. XG does not allow to connect anymore to my external IMAP server. Connection is blocked).

Apart that, now POP3s is working fine. I will upgrade the firmware on XG210 in a few days.

Thanks

Hi Iferrara,

I upgraded my software firewall from 16.01.2 to 16.05.0 and it was a disaster, so I was wondering what the overall experience is with the 16.05.1 before I upgrade my device.

Seems they have a fixed a few IPS related problems but otherwise MR1 is fairly similar to 16.05. If you had major problems, you will likely will have similar problems. But as  pointed out, its hard to tell without knowing exactly what problems you were having.

Hi

I tested also update to 16.0.5 and 16.0.5.1 but everytime I do the update it breaks the connectivity to my Kerio Mail Server behind the FW.

It works for some Minutes but then the connections drop, without showing in Log.

I still need to investigate what it can be and make a thread, but for now the update is a no go for me.

We have been running 16.05.0 in production on an XG430 HA pair since Friday and I upgraded to 16.05.1 today.   Previously I ran both versions in DR on an XG210 , the issues I had were:

XG210 - upgrade to MR1 broke connection to Sophos Central, had to destroy and re-establish - this didn't happen on the XG430s

XG430s - MTA crashed once (status dead), ran command to restart and it moved to status stopped, flipped HA (and back) and that fixed it for now, but this might have been due to me enabling the trial of Sandstorm and setting for email attachments at the same time as upgrading to MR1

Otherwise all seems to work, rules matching, IPSEC VPNs re-established, graphs and reporting working, users recognised etc.

Overall seems quite good.

Cheers,

Charles

Hi Billybob,

The problem I experienced with the 16.05.0 was that my software firewall kept rebooting every 30 seconds. I don't know what the source of the problem was, because I had too little time to research the problem. Maybe it had to do with the IPS problem losts of people had, but I don't know.

So this is why I was wondering what the experience with 16.05.1 is so far. 

Hi Jaffrey,

Being up2date is good but, I will always suggest an upgrade when it is actually needed or when the residing version has a missing feature or a known bug. If things are working good and the upgrade is just a step to get into the latest version available, I would never upgrade until I confirm over its stability from the support. 

Thanks

Hi Sachingurung,

I agree with you for production environments. My own environment is a home licensed software firewall, so when I upgraded only my dog had no wifi connection for a while :)

Jeffery, update to MR1 firmware and revert to the older firmware if you have problems. If your firewall reboots before you can access the gui due to unstable firmware, you can use cli by pressing ENTER at the boot screen to load the correct firmware. That way you can tell us if this version is stable for you[;)]

MTA stopped again but as I enabled Sandstorm straight after applying MR1 I don't know which of them is at fault.  Off to raise a support ticket...