The Sophos Community will be offline for scheduled maintenance this Saturday, May 27th, at 13:00 UTC for approximately 1 hour. Apologies for any inconvenience caused.
"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
It is recommended that all UTM users update their systems regularly. While there is usually no issue during an update, sometimes an update can have errors. This is an article to assist when having update problems. The following sections are covered:
Applies to the following Sophos products and versions Sophos UTM
A common issue that occurs are system updates not working in the WebAdmin. Users may forget that they need to apply system updates manually, as opposed to pattern updates which are automatic. Up2date management is configured under Management > Up2date.
In the event that normal updates from the WebAdmin do not work, there are several tests that we can run.
Simulation of an up2date install is useful in determining why an update is failing. The output will appear in the standard /var/log/up2date.log file or for an individual test by sending to a file will make examination easier.
auisys.plx --simulation auisys.plx --simulation >> up2datetest.log
This is useful for updating to a specific version rather than all the way to the latest in particular with up2dates making large changes as noted by our feature releases of 9.1, 9.2, 9.3. Prior to updating completely it is useful and causes less problems to first update to the latest in the series prior to a feature release.
auisys.plx --upto 9.203
auisys.plx --upto 9.203
For up2date issues the combination of the --rpmargs and --force has the best chance on loading all current up2dates. These can be combined with the --upto version to create an effective up2date order. This command is standard to force all up2dates present to load on a system despite previous up2date failures which may be triggered by customized RPM packages loaded on the system.
auisys.plx --rpmargs --force
Or combined with upto version:
auisys.plx --rpmargs --force --upto 8.203
Sometimes a new download or removal of an update is required to resolve an issue if an update has been corrected on the up2date servers or is corrupted on a customer system. Remove any affected system up2dates from the SG and run a new download:
cd /var/up2date/sys rm u2d-sys-8.301* audld.plx
If the download cannot communicate or authenticate to a server the download can be pulled directly from the Sophos ftp servers into the /var/up2date/sys directory with a wget command such as:
cd /var/up2date/sys wget http://ftp.astaro.com/UTM/v9/up2date/u2d-sys-9.410006-411003.tgz.gpg
Then, to make the update appear in WebAdmin:
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.