This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Android updates only working partly

Hi,

I'm having trouble getting updates for android since some time. (for 3 phones and 2 tablets)
This morning I had two outstanding updates on my tablet.
Updating 'Skype' ran smooth and 'dasoertliche.de' didn't work.

See 'WebFiltering' there is no difference in traffic for skype and dasoertliche. Both are passed and I only see several attempts to download dasoertliche.

See Firewall, there is nothing blocked during this time frame.

But there you see another effect. In the rules the wireless Guest Network is allowed Any to the Internet. In the firewall log the ip from my tablet, which is in the Guest Network is blocked at some time to port 443 an passed at other times. (There are no time rules)
(The difference in rule number in webadmin and log is described in another thread).

I checked all other log like intrusion prevention and application controll, but found no entries for my tablet's IP.

This thread was automatically locked due to age.

0 BarryG over 11 years ago

Hi, the dropped RST packets are a red herring.

Look at the IPS log again; you probably need to disable IPS Rule/SIDs
49759, 29465, & 29466

see also
https://community.sophos.com/products/unified-threat-management/astaroorg/f/54/t/41225

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 wk_03 over 11 years ago in reply to BarryG

Thanks Barry,

the IPS log is empty for this time.

Disabling those rules doesn't change anything.

Next thing that's not updating is 'Google Maps'.
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 11 years ago

Hi,

You can try bypassing the Web Filter - use the skiplist for the Android IPs if you're using transparent mode.

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 wk_03 over 11 years ago in reply to BarryG

Thanks Barry,

bypassing the webfilter was what I did the last days to overcome the update dilema. But I think that cannot be the final solution to secure android devices.

It is the proxy that blocks the update process, but there is nothing logged.

Sophos is delivering by default a lot of web filtering exceptions for updates for Adobe, Apple, Chrome and so on.
If it is necessary for all android device to have exceptions for android.clients.google.com I would expect them to be delivered by Sophos.
If it is only me to need exceptions, then I have a faulty configuration and I would like to find it.
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 11 years ago

Hi, there was another thread yesterday; if you're using transparent SSL filtering, the Androids don't recognize the certificate and you need to import it into the Android (which may not be easy).

Barry
Cancel
Vote Up 0 Vote Down

Cancel
0 BarryG over 11 years ago

The thread yesterday is at
https://community.sophos.com/products/unified-threat-management/astaroorg/f/55/t/46430

There doesn't seem to be an answer there yet, but IIRC there are other threads here discussing it.

Barry
Cancel
Vote Up 0 Vote Down

Cancel