This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

9.604 without problems?

Alexander Busch over 6 years ago

Anybody has installed 9.604 already and being happy with it?

Best regards

Alex

This thread was automatically locked due to age.

BAlfson over 6 years ago in reply to Holger Gran

Thanks Holger. You recommended on another thread: NUTM-10962 [RED] Fix for RED50 does not start up after firmware update for most scenarios.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
BAlfson over 6 years ago in reply to neildonaldson

Re: 9.605 Up2Date

Does this Up2Date leave use_unified_firmware at 0? Does it address the issue that was bricking some REDs? Until there's more clarity, I don't recommend this to anyone.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
StephanG over 6 years ago in reply to BAlfson

How does a bricked RED50 look like?

Like this?
Cancel
Vote Up 0 Vote Down

Cancel
BAlfson over 6 years ago in reply to StephanG

2019-08-06 See my final version posted today.

UPDATED 2019-08-01

Hi All,

I've had several messages back and forth with Sophos folks. As Jan Weber says in a post, 9.605 fixes the problem with REDs and the only danger is updating the RED firmware when the RED is under a heavy load. I have suggested that the following instructions be added to the information about the Up2Date (I in blue dot) and the blog post about the 9.605 Up2Date:

In order to ensure that there's no problem with the update of firmware in RED devices, do the following with two planned outages:

1. Outage 1 - Up2Date to 9.604:
     A. In WebAdmin, disable all RED Servers for RED appliances.
     B. Apply Up2Dates through 9.604.
     C. At the command line: cc set red use_unified_firmware 0
     D. In WebAdmin, enable all RED Servers for RED appliances.
2. Outage 2 - Disconnect all LAN connections from all REDs, leaving the RED online but with no connection to local clients.
3. Apply the 9.605 Up2Date.
4. After the Up2Date is complete, reconnect disconnected LAN cables to the REDs.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
apijnappels over 6 years ago in reply to BAlfson

Hello Bob,

I still have my UTM's on 9.602-3. Do you recommend upgrading at all and if so to 9.605? I don't have any RED appliances so that's not really an issue over here.
Cancel
Vote Up 0 Vote Down

Cancel
BAlfson over 6 years ago in reply to apijnappels

I would go to 9.605, Arno, because of the TCP SACK vulnerability.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel