Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 12 replies
  • Subscribers 5 subscribers
  • Views 3045 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Update of UTM fails

IT Services26

Hi,

 

I am trying to update UTM, but update is not able to apply. All I get is this:

 

 

2020:03:05-18:51:12 hbips-1 auisys[12137]: Starting Up2Date Package Installer
2020:03:05-18:51:12 hbips-1 auisys[12137]: No suitable packages of type <man9> found, skipping
2020:03:05-18:51:12 hbips-1 auisys[12137]: No suitable packages of type <aws> found, skipping
2020:03:05-18:51:12 hbips-1 auisys[12137]: No suitable packages of type <appctrl43> found, skipping
2020:03:05-18:51:12 hbips-1 auisys[12137]: No suitable packages of type <ohelp9> found, skipping
2020:03:05-18:51:12 hbips-1 auisys[12137]: No suitable packages of type <aptp> found, skipping
2020:03:05-18:51:12 hbips-1 auisys[12137]: No suitable packages of type <cadata> found, skipping
2020:03:05-18:51:12 hbips-1 auisys[12137]: No suitable packages of type <geoip> found, skipping
2020:03:05-18:51:12 hbips-1 auisys[12137]: No suitable packages of type <ipsbundle2> found, skipping
2020:03:05-18:51:13 hbips-1 auisys[12137]: Up2Date Package Installer finished, exiting
2020:03:05-18:51:13 hbips-1 auisys[12137]: id="3716" severity="info" sys="system" sub="up2date" name="Up2Date Package Installer finished, exiting"
 
 
I am on 9.509-3 and want to go for 9.510-5
 
Any suggestions?

 



This thread was automatically locked due to age.
  • 0

    Do you see availeble updates within dashboard?

    Do you allow automatic firmware downloads?


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

  • 0

    Hallo,

    Also, show us what result you get from the version command at the command line.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to dirkkotte

    Hi,

     

    yes, I see 5 updates available. Automatic download is disabled, but we use a parent proxy.

     

    CLI says this:

     

    <M> hbips:/root # version

    Current software version...: 9.509003
    Hardware type..............: 330r2
    Serial number..............: S3307902822FCC5
    Installation image.........: 9.503-4.1
    Installation type..........: ssi
    Installed pattern version..: 178652
    Downloaded pattern version.: 178659
    Up2Dates applied...........: 6 (see below)
    sys-9.503-9.504-3.1.4.tgz (Oct 23 2017)
    sys-9.504-9.505-1.4.1.tgz (Jun 22 2018)
    sys-9.505-9.506-4.2.2.tgz (Jun 22 2018)
    sys-9.506-9.507-2.1.4.tgz (Jun 22 2018)
    sys-9.507-9.508-1.10.1.tgz (Jun 22 2018)
    sys-9.508-9.509-10.3.2.tgz (Jun 22 2018)
    Up2Dates available.........: 5
    Factory resets.............: 0
    Timewarps detected.........: 1

  • 0 in reply to IT Services26

    please show us the output from following shell commands:

    du

    cd /var/up2date/sys  

    ls -l

    you can remove the up2date files and restart the up2date process:

    cd /var/up2date/sys 
    rm u2d-sys-9* 
    audld.plx

    and check the following: Sophos UTM-How to troubleshoot Up2date:

    https://community.sophos.com/kb/en-us/115025


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

  • 0 in reply to dirkkotte

    Thanks, did as you wrot, but still no luck

     

    2020:03:09-14:51:24 hbips-1 auisys[12915]: id="3716" severity="info" sys="system" sub="up2date" name="Up2Date Package Installer finished, exiting"
    2020:03:09-15:05:37 hbips-2 auisys[30000]: running on HA slave system or cluster node
    2020:03:09-15:05:37 hbips-2 auisys[30000]: running on slave/cluster node, skipping license check
    2020:03:09-15:05:37 hbips-2 auisys[30000]: waiting for db_verify to return (30 seconds max)
    2020:03:09-15:06:01 hbips-1 audld[14826]: running on HA master system or cluster node
    2020:03:09-15:06:01 hbips-1 audld[14826]: Starting Up2Date Package Downloader
    2020:03:09-15:06:01 hbips-1 audld[14826]: patch up2date possible
    2020:03:09-15:06:01 hbips-1 audld[14826]: Using static update server list in HA mode
    2020:03:09-15:06:24 hbips-1 audld[14826]: Could not connect to Authentication Server us1.utmu2d.sophos.com (code=500 500 SSL negotiation failed: error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure).
    2020:03:09-15:06:24 hbips-1 audld[14826]: id="3701" severity="info" sys="system" sub="up2date" name="Authentication successful"
    2020:03:09-15:06:24 hbips-1 audld[14826]: Using static download server list in HA mode
    2020:03:09-15:06:26 hbips-1 audld[14826]: id="3707" severity="info" sys="system" sub="up2date" name="Successfully synchronized fileset" status="success" action="download" package="sys"
    2020:03:09-15:06:26 hbips-1 auisys[14906]: running on HA master system or cluster node
    2020:03:09-15:06:27 hbips-1 auisys[14906]: waiting for db_verify to return (30 seconds max)
    2020:03:09-15:06:28 hbips-1 auisys[14906]: not cleaning /var/up2date/sys-install in --nosys mode
    2020:03:09-15:06:28 hbips-1 auisys[14906]: removing '/var/up2date/appctrl43-install'
    2020:03:09-15:06:28 hbips-1 auisys[14906]: removing '/var/up2date/aptp-install'
    2020:03:09-15:06:28 hbips-1 auisys[14906]: removing '/var/up2date/aws-install'
    2020:03:09-15:06:28 hbips-1 auisys[14906]: removing '/var/up2date/cadata-install'
    2020:03:09-15:06:28 hbips-1 auisys[14906]: removing '/var/up2date/geoip-install'
    2020:03:09-15:06:28 hbips-1 auisys[14906]: removing '/var/up2date/ipsbundle2-install'
    2020:03:09-15:06:28 hbips-1 auisys[14906]: removing '/var/up2date/man9-install'
    2020:03:09-15:06:28 hbips-1 auisys[14906]: removing '/var/up2date/ohelp9-install'
    2020:03:09-15:06:28 hbips-1 auisys[14906]: Starting Up2Date Package Installer
    2020:03:09-15:06:28 hbips-1 auisys[14906]: No suitable packages of type <man9> found, skipping
    2020:03:09-15:06:28 hbips-1 auisys[14906]: No suitable packages of type <aws> found, skipping
    2020:03:09-15:06:28 hbips-1 auisys[14906]: No suitable packages of type <appctrl43> found, skipping
    2020:03:09-15:06:28 hbips-1 auisys[14906]: No suitable packages of type <ohelp9> found, skipping
    2020:03:09-15:06:28 hbips-1 auisys[14906]: No suitable packages of type <aptp> found, skipping
    2020:03:09-15:06:28 hbips-1 auisys[14906]: No suitable packages of type <cadata> found, skipping
    2020:03:09-15:06:28 hbips-1 auisys[14906]: No suitable packages of type <geoip> found, skipping
    2020:03:09-15:06:28 hbips-1 auisys[14906]: No suitable packages of type <ipsbundle2> found, skipping
    2020:03:09-15:06:29 hbips-1 auisys[14906]: Up2Date Package Installer finished, exiting
    2020:03:09-15:06:29 hbips-1 auisys[14906]: id="3716" severity="info" sys="system" sub="up2date" name="Up2Date Package Installer finished, exiting"
  • 0 in reply to IT Services26

    seems you use a cluster / HA ?

    So you have to check / clear the updates at the slave node.

    After removing the update-files you can enable up2date download or upload the files manually.

     


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

  • 0 in reply to dirkkotte

    How do I do clear updates at the slave node? System was set up years ago by external vendor. They are not available anymore. Cannot find IP of slave to connect to. Any suggestion?

  • 0 in reply to IT Services26

    To connect to the Slave, from the Master, run:

    ha_utils ssh

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Unfortunately I get this

     

    Connecting to slave 198.19.250.2
    ssh: connect to host 198.19.250.2 port 22: Connection refused

  • 0 in reply to IT Services26

    Never seen that here before.  I would disable High Availability and then re-enable it.  Disabling causes the Slave to do a factory reset and then shut down.  If everything doesn't work correctly when you power the Slave back up, then I think you're stuck with disabling and re-imaging the Slave unit.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Unfiltered HTML