17.5.3 MR-3 no APX support :-(

Hi, installed MR-3 but APX530 does not pop-up as pending, any others seeing the same?

  • If you go to Backup & Firmware and then Pattern Updates, do you see that there is an AP Update available, I saw that this was needed separately once the MR3 booted.

  • awed.log:

     

    2019-02-12 17:38:36 [MASTER] awed_ng starting
    2019-02-12 17:38:36 [MASTER] new firmware detected for AP10: 9500-wifi-971af07-b2cd86b
    2019-02-12 17:38:36 [MASTER] new firmware detected for AP100: 9500-wifi-e057aff3-b2cd86b
    2019-02-12 17:38:36 [MASTER] new firmware detected for AP100C: 9500-wifi-e057aff3-b2cd86b
    2019-02-12 17:38:36 [MASTER] new firmware detected for AP100X: 9500-wifi-e057aff3-b2cd86b
    2019-02-12 17:38:36 [MASTER] new firmware detected for AP15: 9500-wifi-e057aff3-b2cd86b
    2019-02-12 17:38:36 [MASTER] new firmware detected for AP15C: 9500-wifi-e057aff3-b2cd86b
    2019-02-12 17:38:36 [MASTER] new firmware detected for AP30: 9500-wifi-971af07-b2cd86b
    2019-02-12 17:38:36 [MASTER] new firmware detected for AP50: 9500-wifi-971af07-b2cd86b
    2019-02-12 17:38:36 [MASTER] new firmware detected for AP55: 9500-wifi-e057aff3-b2cd86b
    2019-02-12 17:38:36 [MASTER] new firmware detected for AP55C: 9500-wifi-e057aff3-b2cd86b
    2019-02-12 17:38:36 [MASTER] new firmware detected for APX320: 11.0.006-4
    2019-02-12 17:38:36 [MASTER] new firmware detected for APX530: 11.0.006-4
    2019-02-12 17:38:36 [MASTER] new firmware detected for APX740: 11.0.006-4
    2019-02-12 17:38:36 [MASTER] new firmware detected for RED15w: 1
    2019-02-12 17:38:36 [MASTER] access point firmware available: AP15C:9500-wifi-e057aff3-b2cd86b AP10:9500-wifi-971af07-b2cd86b AP55C:9500-wifi-e057aff3-b2cd86b RED15w:1 APX320:11.0.006-4 APX740:11.0.006-4 APX530:11.0.006-4 AP30:9500-wifi-971af07-b2cd86b AP100C:9500-wifi-e057aff3-b2cd86b AP100X:9500-wifi-e057aff3-b2cd86b AP50:9500-wifi-971af07-b2cd86b AP55:9500-wifi-e057aff3-b2cd86b AP15:9500-wifi-e057aff3-b2cd86b AP100:9500-wifi-e057aff3-b2cd86b
    2019-02-12 17:38:37 DIE --------------------------------------------------------
    2019-02-12 17:38:37 JSON error at line 1, byte 1/44: Unexpected character 'A' parsing initial state: expecting whitespace: '\n', '\r', '\t', ' ' or start of string: '"' or digit: '0-9' or minus: '-' or start of an array or object: '{', '[' or start of literal: 't', 'f', 'n' at /</bin/awed>JSON/Parse.pm line 69.
    2019-02-12 17:38:37 1 (eval)
    2019-02-12 17:38:37 2 JSON::Parse::valid_json
    2019-02-12 17:38:37 3 CSC::API::exec_opcode
    2019-02-12 17:38:37 4 main::get_firmware_versions
    2019-02-12 17:38:37 [MASTER] AP firmware info updated successfully in DB.
    2019-02-12 17:38:40 [MASTER] start processing configuration change
    2019-02-12 17:38:46 [MASTER] end processing configuration change
    2019-02-12 17:38:49 [MASTER] new connection from 192.168.0.103:56336
    2019-02-12 17:38:49 [Axxxxxxxxx] AP55 from 192.168.0.103:56336 identified as Axxxxxxxxx
    2019-02-12 17:38:49 Could not read from file '/tmp/awed/Axxxxx.pid': No such file or directory
    2019-02-12 17:38:49 [Axxxxxxxxx] (Re-)loaded identity and/or configuration

     

    AP55 serial masked, but no APX530 seen here...ever...

  • In reply to Nicholas Eagle:

    Nicholas Eagle

    If you go to Backup & Firmware and then Pattern Updates, do you see that there is an AP Update available, I saw that this was needed separately once the MR3 booted.

     

    Hi Nicholas,

     

    Already did this before posting, sorry for not writing that :-)

    Do your APX work?

  • Hello twister5800 and all,

    I think the problem is with APX that was connected to Central. The APX 320 which was connected to the Central does not appear in Pending access points but I have the APX740 which has never been connected to Central and this APX is already active at 2.4 and 5 GHz.

    I will try to convince APX320 somehow, although I turned it on and off several times (always with at least 5 minutes delay) so in the end is permanently lit red LED, therefore, does not have connectivity to the Internet. I have the APX530 too which is connected to Central, so maybe I'll try that one too ...

    We are waiting so long and now such problems ?! I guess without commenting that ...

    Regards

    alda

    P.S. Pattern 11.0.006 is installed of course...

  • In reply to twister5800:

    Haven't got me APX yet, though I'd throw that in as you didn't mention if you applied the firmware or not.

     

    Nick

  • In reply to Nicholas Eagle:

    Thanks for pointing it out anyway then ;-)

  • In reply to alda:

    alda

    I think the problem is with APX that was connected to Central. The APX 320 which was connected to the Central does not appear in Pending access points but I have the APX740 which has never been connected to Central and this APX is already active at 2.4 and 5 GHz.

    I will try to convince APX320 somehow, although I turned it on and off several times (always with at least 5 minutes delay) so in the end is permanently lit red LED, therefore, does not have connectivity to the Internet. I have the APX530 too which is connected to Central, so maybe I'll try that one too ...

     

     
    It was the same with the UTM, if AP was joined to central, you needed to remove, reboot, then add it to UTM, it failed, remove it from UTM and add it again, when it was pending.
     
    I will try to block access from the APX to central IP ranges, as it tried on port 443, let's see if XG will be the fallback on 1.2.3.4 ;)
  • In reply to twister5800:

    SOLVED!

    Connected it to Central account, let it firmware upgrade in there (Think the new firmware installs xg as fallback?!) Deleted from central, and voila!:

    [Unknown] new AP detected, adding to system. ID:P1200xxxxxx Model:APX530 Version:custom-build LAN_MAC:7c:5a:1c:34:59:c8 WIFI_MAC:7c:5a:1c:34:59:c0 Max SSIDS:8 TX Power Control:1 DFS:1

     

    :-)

  • In reply to twister5800:

    Hello twister5800,

    how did you connected an APX to the Central? Through XG or by another connectivity? Because the APX 320 does not want me to join to the Central Account ...

    Regards

    alda

  • In reply to alda:

    I joined it to another central account that had wireless sub. let it upgrade through there. Found this just now: community.sophos.com/.../133505 Problem is, APX does not install latest firmware by themselves.
  • In reply to twister5800:

    Hello all,

    if you have a problem with APX access point I could recommend next PDF document, especially section how to reset APX to factory settings.

    It solved my problem.

    Regards

    alda

    https://www.sophos.com/en-us/medialibrary/PDFs/documentation/sophos-apx-series-access-points-qsg.pdf 

  • In reply to twister5800:

    Hi Community,

    Thanks  for sharing your workaround.

    Please note that this issue is being tracked under the ID: NC-43321

    Apologies for this inconvenience, stay tuned as we will announce more information for this shortly.

    Regards,

  • In reply to FloSupport:

    This article has been published to provide more information regarding this issue.

  • In reply to FloSupport:

    [Update - RESOLVED] This issue has been resolved - all APX models should now be able to update to the latest firmware when connected to the internet and become compatible for management with XG Firewalls.

    Apologies for any inconveniences caused.

    Please don't hesitate to PM me directly for any further questions or concerns.

    Regards,