IPSEngine Dead

Over the last hour I have noticed 3 of 5 XG appliances I manage have experienced IPSEngine dead, IPS service stopped and will not start.

Any suggestions on the cause of this and what I can do to correct?  I have logged  a case with Sophos.

  • You could start to dig into the troubleshooting.

    GES MER (within my Signature) can help you to find a starting point.

    Maybe you can find a matching pattern on each defect appliance (Same Firmware, Same Hardware etc.?)

  • In reply to LuCar Toni:

    All of the appliances are running on Microsoft Azure.  Sophos have examined one of them and the case has now been escalated.

  • In reply to CloudManager:

    The IPSEngine dead scenario was limited to those appliances running SFOS 17.1.3 MR-3

    Upgrading to SFOS 17.5.6 MR-6 resolved the issue.

    Root cause unknown.  Issue was investigated under case 8936741 by Sophos escalation team.