Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Suggested Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 16 replies
  • Answers 1 answer
  • Subscribers 44 subscribers
  • Views 18620 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Connection drops during AV pattern updates

Keith Laudenberger

Running SFOS 18.0.1 MR-1-Build396 and have been having dropped traffic issues with VOIP calls and software VPN connections to outside devices at about the same time the AV patterns are updating. Has anyone else noticed this?



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to emmosophos

    Since the issue only happens when the signatures update I don't have anything that I can send from the capture

  • 0 in reply to Keith Laudenberger

    Hello Keith,

    Thank you for the follow-up.

    Can you run this command in your XG from the back end, just provide the lines from Sep 17 Sep 16 and Sep 15 and confirm if this dates you also noticed the same.

    grep "Initialization Complete" /log/ips.log

    Regards,

     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support Videos | Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
  • 0 in reply to emmosophos

    That filter produces no results

    If if filter for "initialization" only I get this.

    [Sep 15 14:29:31 :24908]:daq_multi_initialize:Loading and initialization of DAQs
    done
    [Sep 15 14:29:31 :24907]:daq_multi_initialize:Loading and initialization of DAQs
    done
    [Sep 15 14:29:31 :24909]:daq_multi_initialize:Loading and initialization of DAQs
    done
    [Sep 15 14:29:31 :24910]:daq_multi_initialize:Loading and initialization of DAQs
    done
    [Sep 16 12:29:29 :17679]:daq_multi_initialize:Loading and initialization of DAQs
    done
    [Sep 16 12:29:29 :17678]:daq_multi_initialize:Loading and initialization of DAQs
    done
    [Sep 16 12:29:29 :17680]:daq_multi_initialize:Loading and initialization of DAQs
    done
    [Sep 16 12:29:29 :17681]:daq_multi_initialize:Loading and initialization of DAQs
    done
    [Sep 17 14:29:28 :17991]:daq_multi_initialize:Loading and initialization of DAQs
    done
    [Sep 17 14:29:28 :17993]:daq_multi_initialize:Loading and initialization of DAQs
    done
    [Sep 17 14:29:28 :17992]:daq_multi_initialize:Loading and initialization of DAQs
    done
    [Sep 17 14:29:28 :17994]:daq_multi_initialize:Loading and initialization of DAQs
    done

  • 0 in reply to Keith Laudenberger

    Hello Keith,

    Thank you for the follow-up!

    I got confused and the command I send was for the IPS actually not the pattern updates.

    There is a fix coming related to pattern updates coming on MR3 so it might be probably that this will help on this issue.

    Since we talked on Friday has this issue happened again?

    Regards,

     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support Videos | Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
Unfiltered HTML