Packet loss and drops on the UTM after 9.605-1 upgrade

Hi Dan,

i had many problems with 9.605 and i have decided to go back to 9.604.

Best regards

Tim

Yeah it frankly sucks. Second upgrade that has broken the UTM in a year and I have to reinstall and restore.

Management is pretty hot about it and asking me to look for another solution now. It's a shame too, because it worked so well....

Dan

I was abut to upgrade a customers FW to this version, has support said anything about it?

Is there a fix being worked on?

there seems to be a lot of issues that seem to fall through the cracks of the UTM firmware, e.g. Red50 and the bricking (found out to my cost)

What were your  problems?   Did you involve support?   The rest of us want to avoid your nightmares, so wr crave details.

the Red50 Issue that has just had an advisory, which if you order a new one unless you know about it, Sophos does not inform you about said advisory (I received mine about the same time as the Advisory was released, I now have a lovely paperweight);

https://community.sophos.com/kb/en-us/134398

and see the following issues with the Red50;

https://community.sophos.com/products/unified-threat-management/f/remote-ethernet-device-red/111304/utm-9-601---red-issues#pi2353=1

I hope this helps you out.

the Red50 Issue that has just had an advisory, which if you order a new one unless you know about it, Sophos does not inform you about said advisory (I received mine about the same time as the Advisory was released, I now have a lovely paperweight);

https://community.sophos.com/kb/en-us/134398

and see the following issues with the Red50;

https://community.sophos.com/products/unified-threat-management/f/remote-ethernet-device-red/111304/utm-9-601---red-issues#pi2353=1

I hope this helps you out.

Even if the RED 50 is no longer covered by its 1-year warranty, I would open a Support case to get it RMA'd.  If 1st-level Support can't do that, request escalation.  I can't imagine that Sophos would refuse to replace a unit killed by a flawed Up2Date.

Cheers -Bob

Argo said:

the Red50 Issue that has just had an advisory, which if you order a new one unless you know about it, Sophos does not inform you about said advisory (I received mine about the same time as the Advisory was released, I now have a lovely paperweight);

https://community.sophos.com/kb/en-us/myprepaidcenter

and see the following issues with the Red50;

https://community.sophos.com/products/unified-threat-management/f/remote-ethernet-device-red/111304/utm-9-601---red-issues#pi2353=1

I hope this helps you out.

 

Thank you so much for sharing such a useful information. I will definitely share this with others.

Argo said:

the Red50 Issue that has just had an advisory, which if you order a new one unless you know about it, Sophos does not inform you about said advisory (I received mine about the same time as the Advisory was released, I now have a lovely paperweight);

https://community.sophos.com/kb/en-us/134398

and see the following issues with the Red50;

https://community.sophos.com/products/unified-threat-management/f/remote-ethernet-device-red/111304/utm-9-601---red-issues#pi2353=1/MyPrepaidCenter.com

I hope this helps you out.

 

 

I was abut to upgrade a customers FW to this version, has support said anything about it?

We moved on to another UTM platform, Sophos kept falling short with these bugs and management just couldn’t wait.

Good luck to all those hanging in!

The bug in the RED firmware was fixed in later versions, but you have to upgrade the firmware on the RED without breaking it while updating. As the update problem was load related, the best chance doing it is while the RED has all devices disconnected from the LAN ports, or in times with very low traffic over the RED.

I would suggest to upgrade the UTM to version 9.700-5 or 9.701-6.

Hi James Gonzales,

because this RED50 situation that I experienced, my views on the UTM has changed dramatically, I do not now deploy it at home or to a business, as I am unable to trust to support functions (the engineers do their best to help) but I have found the following;

1. New Information is non-existent for the UTM even from senior management.

2. Higher level information from the Dev team about failed modules (I am thinking about the problem with Country Blocking/GEO IP a couple of years back), I spoke with one of their 'Devs' and he said that there wasn't going to be a fix for a while, the very next week they release an update to the country blocking!!

3. The product is being undermined by the lack of reliable firmware upgrades - its like Microsoft they released a 'service pack' which created more problems than it fixed (remember those days...lol).

Sophos are pushing the XG, but I feel they are not allowing us to move over from the SG to XG easily, because their 'Migration Tool' means you will have to do 95 percent of the work. It's a wonder they even released it.

rant over