This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG 17.5 MR10 breaks Antivirus (need Help)

juergenb52 over 4 years ago

Hi,

i had a fine working XG with 17.5.9 MR9.

Today i upgraded to MR10 and after the reboot Antivirus stopped.

I manual uploaded the lastest patterns, but the Antivius is not running.

tail avd.log shows me

/bin/avd: error while loading shared libraries: libssp.so.0: cannot open shared object file: No such file or directory
/bin/avd: error while loading shared libraries: libssp.so.0: cannot open shared object file: No such file or directory
..

A manual updates with the file sfos_patterns_update.tar gives me this error

2020-04-04 06:36:32 PM: invalid tar file (u2d meta not found) install

i followed this link
https://community.sophos.com/products/xg-firewall/f/initial-setup/117113/sophos-av-pattern-failed-to-update-in-sophos-xg-firewall

But this is not working with MR10.

Will a upgrade to the new release MR11 help?

Can anyone provide some help today?

Or should i go back to MR9?

This thread was automatically locked due to age.

Parents

0 Pwc over 4 years ago

Hi this is a known issue and development are working on a fix. I am not sure which versions it applies to yet so upgrading may not help
Cancel
Vote Up 0 Vote Down

Cancel
0 juergenb52 over 4 years ago in reply to Pwc

Thanks,

will a Downgrade to MR9 fix this bananaware?

Maybe the 24/4 Support can fix this?
In case someone from support is online, here´s the case ID #9806701
Cancel
Vote Up 0 Vote Down

Cancel
0 Pwc over 4 years ago in reply to juergenb52

Hi, I do not know. I have been dealing with the issue for the last few hours and have been told several other people have also been affected. I have been running MR10 for a little while now so the upgrade process itself is not likely to be the cause of the problem. I did ask if upgrading to MR11 or v18 would solve the issue but support said they are not sure yet as it has only recently been identified as a bug.

If you have an active case then ask them to link it to NC-58941.
Cancel
Vote Up 0 Vote Down

Cancel
0 juergenb52 over 4 years ago in reply to Pwc

At least,

i disabled content scanning for my firewall rules (http/https/ftp) now.

maybe there is realy a 24/7 support at sophos and not only marketing chatter.
Most of the time support take about a week to respond to any ticket here in europe.
Cancel
Vote Up 0 Vote Down

Cancel
0 Pwc over 4 years ago in reply to juergenb52

I am hoping this is just a hotfix/pattern update that gets pushed out to solve this automatically. As soon as I know what the solution is I will let you know.
Cancel
Vote Up 0 Vote Down

Cancel
0 juergenb52 over 4 years ago in reply to Pwc

Thanks,

with every Release, my wish for something else is growing.
Cancel
Vote Up 0 Vote Down

Cancel
+2 LuCar Toni over 4 years ago in reply to juergenb52

Here you go. https://community.sophos.com/kb/en-us/135351

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 FloSupport over 4 years ago in reply to LuCar Toni

As LuCar Toni mentioned,

This is an ongoing active Sophos incident that is being investigated. Please visit the KBA for the latest updates.

Regards,

Florentino
Director, Global Community & Digital Support
Are you a Sophos Partner? | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question, please use the 'Verify Answer' button.

The Award-winning Home of Sophos Support Videos! - Visit Sophos Techvids
Cancel
Vote Up 0 Vote Down

Cancel
0 J_87586 over 4 years ago in reply to FloSupport

Hello FloSupport,

The article you linked to states that effected users should contact support, but doesn't say how to. I'm using the free Home version of Sophos XG. How do I get the patch?

Thanks,

Jonathan
Cancel
Vote Up 0 Vote Down

Cancel
0 J_87586 over 4 years ago in reply to J_87586

I submitted a ticket via https://secure2.sophos.com/en-us/support/open-a-support-case.aspx.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to J_87586

Hi Jonathan,

I wold suggest an upgrade to v18 might be in order?

You can download the .sig file from your mysophos account.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 rfcat_vk over 4 years ago in reply to J_87586

Hi Jonathan,

I wold suggest an upgrade to v18 might be in order?

You can download the .sig file from your mysophos account.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 juergenb52 over 4 years ago in reply to rfcat_vk

Thanks,

a support ticket was the only Solution to the XG17 Problem.
Cancel
Vote Up 0 Vote Down

Cancel
0 lukg over 4 years ago in reply to juergenb52

I have the same problem ...
Cancel
Vote Up 0 Vote Down

Cancel