Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 21 replies
  • Subscribers 2 subscribers
  • Views 4244 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

anyone with input 8.203 or 8.300 best choice ?

emerson8
Will tonight do some updates and fixes with a HA setup with 2 320's.
Using AD as backend and have users complaining about the proxy performance of the current 8.202.

For those who know......8.300 an improvement och safe bet to go with 8.203?

Been reading/searching these forums and can't make out what seems to be the best. Some say that 8.2 is the worst and therefor either 8.1 or 8.3 would be better....


t.i.a.


This thread was automatically locked due to age.
  • 0
    with 200 users you are probably going to push the mahcine into ram problems.  Using the disk option would be best.  All i can say right now is look at this thread:
    https://community.sophos.com/products/unified-threat-management/astaroorg/f/55/t/45405

    hold off on using local database for now as it is technically unsupported.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0
    Ok,,using disk option instead then ?
    The only perceived issue they have is the delays going through Proxy which is causing complaints. 

    But, sorting them out;
    1. 8.3 vs 8.203
    Some seems to say that 8.3 is a "no-no" while other say that it's an improvment over 8.2x

    2. Using the scripts above, using a local DB should be possible ?
    Any special steps when using a HA setup ?

    We're using the local db option both inhouse and myself at home to great effect without issue......
  • 0
    if you want to use it keep in mind this may void your support.  Since you have active/passive HA(i'm assuming) use the cc disk option.  You simply don't have the ram in that box with that many users.  If your disk i/o is low then yes the disk option will help.  Set it up on the master and the slave should update itself.  make a backup first in case thing go weird though.  Keep in mind http traffic will be halted until the download completes.  I would schedule this for an off hours maintenance window.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0
    Thanks again for your time,,

    Well, yeah it is off hours right now so that's why "Im on it"....

    Will try to do a test with the disk option instead,
    Hopefully something will happend then, when using the mem option, it was 0 size reported after 20min's
  • 0
    read the linked thread..[[:)]]  there's a reason i am saying not to use lock database right now..[[:)]]

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0
    I did,, I thought that only referred to a possible issue that only happend to a few
    but I didn't see that as an explaination to why it didn't DL.....
  • 0
    because there's an issue with the content database provider when astaro is set to use local mode..if you leave it on cloudy the content database works fine...aka don't use the local content database.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0
    until the issue is fixed.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

  • 0
    Until the issue is fixed should maybe read;
    Until the issue is spread enough.....

    Humour... This morning at my home-astaro, this started showing up;

    Error message while downloading list: The list subscription for this serial number SFLX-NSEU-6WFT-2880 has expired."
    2012:02:16-10:33:19 ekero httpproxy[6027]: id="0003" severity="info" sys="SecureWeb" sub="http" request="(nil)" function="sc_update_list" file="scr_scanner.c" line="1181" message="serial: SFLX-NSEU-6WFT-2880, perm serial: SFLX-NSEU-6WFT-2880" 

    So,, seems it's not just a question if it works or not, it can obviously stop working too !
  • 0
    This one is not astaro's fault but thei database provider.  Here's how to get the database back to cloudy so you can continue ahving updated filters and database for http proxy:
    cc set http sc_local_db none
     /var/mdw/scripts/httpproxy restart

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Cookie Information Banner