"Wanna" ransomware outbreak. Please see this Sophos article sophos.com/kb/126733 for advice on how to protect your organization. Immediate action recommended.
We'd love to hear about it! Click here to go to the product suggestion community
After upgrading to 184.108.40.206 you may face several issues with the new anti-spam engine lase. They are known issues we are working to address. Please open a support case with us and let me know in the comments if you have a case open and haven't heard back. Updates on the issue will be provided in this thread.
**UPDATE 3 - 3/27/2017**
Articles have now been amended to reflect today's release of an update that switches the anti-spam engine back to the pre 4.2.x.x version until this issue is resolved.
Sophos Email Appliance: Message processing is taking longer than normal on all email appliances and VM running 220.127.116.11
Sophos Email Appliance: ES1000 appliances or VM running with 1GB of RAM on version 18.104.22.168 fails to process messages
**UPDATE 2 - 3/22/2017**
22.214.171.124 may also quarantine mail with more than 10 recipients. Article here.
**UPDATE** We now have two articles written for you on this issue.
I have opened a case with Sophos regarding this and haven't heard back yet. It's disrupting our production outbound E-mail randomly, I'm seeing errors in the syslog such as:
Mar 20 23:19:04 vmaprod1 MessageInfo: 58D06366_38424_37_3: [ERR] Msg scanning failed: http return code: 500, desc: Internal errorMar 20 23:20:27 vmaprod3 MessageInfo: 58D063B9_27764_107_2: [ERR] Msg scanning failed: http return code: 500, desc: Internal errorMar 20 23:20:29 vmaprod1 MessageInfo: 58D063B9_38429_94_7: [ERR] Msg scanning failed: http return code: 500, desc: Internal error
How do we fix this, is there a workaround we can apply while Sophos works on an update? Thanks.
University of British Columbia
In reply to Venkat Mahadevan:
Workarounds are outlined in the articles, for example if system is a VM, it is recommended to increase RAM to 3 GB.
What is the work around for those of us on the ES1000 hardware appliances? My case was opened on day one of this issue (3/17) and we are still waiting on a solution.
In reply to WC IT:
You've done the right thing and opened a ticket. Can you please give me the case #? I will look into expediting things this morning.
In reply to Bianson:
Sent it to you in a private message.
We actually have 4GB of RAM per machine, but were still encountering the issue. The Sophos Engineer downgraded us to an earlier spam engine release and the problem seems to have gone away.
That is great to hear, thank you for following up!
I have increase the physical memory of the appliance with 3 modules DDR2 1Gb 533Mhz (the same as factory) and the appliance is working better than ever.
Keep waiting for the fix.
(Note: 555 Mhz modules also works fine, but you must fill the 4 slots)
In reply to JesúsMartín Bautista:
Do you know if it is 240-pin or 200-pin RAM?
Sent you a DM regarding our open Support ticket.
Ticket opened. Sent number to you in a private message.
Thanks for expediting this.
Unfortunately, since support tweaked the backend yesterday email flow has practically stopped.
If you and escalate this again it would be appreciated!