After MR7 , IPS Pattern fails to update 3.13.89

Hi All,

Restart the IPS service manually from System Services | Services | IPS and then try "Update Pattern Now" from Back & Firmware | Pattern Updates. Alongside, please DM us the following logs and if anyone has a registered case# with the Support Team. Please refer, Sophos Firewall: Where to find log files.

1. u2d.log

2. csc.log 

3. Start debug log for IPS service before capturing the ips.log

Thanks

PM sent with logs.

Thanks

Avira is dated 29/8/2017

Sophos and ATP are dated 28/8/2017

IPS is dated 24/8/2017

Ian

Just to inform that Sophos AV pattern is still downloading (from gui) while on /content/savi_new the pattern is updated.

Sophos AV 1.0.11425

Strange! I guess we need to wait for v17 beta and move to it in order to fix the issue.

Hello luk,

would not be a solution try to clean installation from ISO file, run the Pattern Updates and after these steps restore a configuration? The ISO MR7 is already available on the MySophos portal.

It is an idea, I do not know if it will work and if it is an acceptable solution because of reports, logs, etc.

I have one HW appliance and one vmware appliance and I did not even notice none of the reported problems with one of them (thank God).

alda

Alda,

when I opened this thread, I upgraded XG from MR6 to MR7 because IPS pattern was not updated correctly. Sunday morning I formatted the unit, installed mr7 from ISO and performed the restore config. WAF and Client Authentication are in failed status and even Sophos now.

I guess that something from Sophos Cloud (from where the updates come from) or maybe something on MR7 is broken.

Thanks for your advice!

Hi All, 

We were able to check this issue and found that the issue is with the UI and as per the logs we have concluded that the pattern is updated to the latest version. We believe that this issue will be sorted out after the next IPS update. 

There will be no impact for the customers experiencing this issue and you may ignore the "Failed" status for now until the next update.

Reference: NC-21583

Thanks Aditya,

and regarding the mail problem?

Are you investigating?

The problem is:

With MR7 the mail server stop receiving mail. The XG is configured as Transparent proxy for smtp.

Thanks

Thanks Aditya Patel for updating us.

The same behavious applieas to also WAF, Client authentication and AV patterns?

Thanks

Andrea,

please open a new thread. One question per thread.

Thanks

HI lferrara;

Yes, the same applied for WAF and AV patterns.

Aditya Patel said:

HI lferrara;

Yes, the same applied for WAF and AV patterns.

 

Aditya Patel said:

HI lferrara;

Yes, the same applied for WAF and AV patterns.