Pattern update and Synchronization not working after SFOS 16.05.4 MR-4 update

Hi Vishvas,

Apart from the pattern update and synchronization issue, do the clients behind the XG successfully access the internet? Take SSH to the XG and go to option, 5.Device Management > 3. Advance Console. Execute the following commands and show me the results.

1. ping 8.8.8.8
2. telnet <available mail server IP if any> 25
3. wget sophos.com

Cheers-

Hi Sachingurung,

I have the same issue with pattern updates after upgrading to 16.05.4 MR-4. I'm able to ping 8.8.8.8 from the console but hostnames are not resolved, so there is a DNS issue. Also "Test mail" on notification settings tab is failing to resolve the mail server.

The XG DNS service though seem to work properly and resolves requests from clients. 

Best regards, Anders

Hi All,

Show me the DNS configuration in the XG firewall. Any help with the #4.1.2 in my troubleshooting guide. Also, is there a parent proxy deployement in the network?

Thanks

Unfortunately no luck with the troubleshooting guide. There is only one ISP link. I've tried to restart the DNS service and the XG appliance as well. DNS lookups from the web interface works fine on all available DNS servers. No proxy deployment. After downgrading to MR-3 the pattern updates and mail notifications work fine again.

I'm not experiencing any DNS issues on the clients. 

Provide me some time to check it internally. I will update you with as much information I can gather. 

Thanks

For the sake of completeness: an upgrade to MR5 does solve the Home User 6 vs. 4 GB problem, however, it still contains the unmotivated "loss of DNS"-error

Thanks for looking into it, sachingurung!

Upgraded to MR5 and more than 12 hours no dns issue

No luck with MR-5 on XG 210.

After 15 hours Pattern update ans synchronization not working and users are not getting websites.

Hi Vishvas,

First, Verify the time settings on the XG appliance. Now, take SSH to the XG and go to the option, 5. Device Management > 3. Advance console. Execute, the below command and then do a manual pattern update from Back  & Firmware | Patterns | Update patterns now.

cd /log

tail -f u2d.log

Follow the same steps and check the licensing.log after doing a manual synchronize on the XG device. DM me the captured logs to investigate further. Finally, show me an output of "ping 8.8.8.8" and "nslookup sophos.com" from the advance console. 

Thanks

Hey sachingurung.

DNS stopped working again. And it seems, that DNS server gets killed if a VPN Cisco connection is opened. Check this thread, which DomNik initiated: DNS Server stops working for LAN Zones after Cisco VPN is established . I tested it just now and can confirm the problem.

It would be great to see whether you too can replicate this behavior or potential root cause.

Thanks

Hey sachingurung.

DNS stopped working again. And it seems, that DNS server gets killed if a VPN Cisco connection is opened. Check this thread, which DomNik initiated: DNS Server stops working for LAN Zones after Cisco VPN is established . I tested it just now and can confirm the problem.

It would be great to see whether you too can replicate this behavior or potential root cause.

Thanks

Hi Norbert,

I will certainly investigate it internally. Provide me some time but, please raise a new thread and DM me the link.

Thanks