This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Connection drops during AV pattern updates

Running SFOS 18.0.1 MR-1-Build396 and have been having dropped traffic issues with VOIP calls and software VPN connections to outside devices at about the same time the AV patterns are updating. Has anyone else noticed this?

This thread was automatically locked due to age.

Top Replies

Richard Hunt1 over 4 years ago in reply to emmosophos +2

Can verify Mr3 does not solve this problem. As a work around we have to set to manual update (not ideal) or put to daily and reboot the router after hours, there is no way to set the schedule to a specific…

0 emmosophos over 4 years ago in reply to Keith Laudenberger

Hello Keith,

Thank you for the follow-up!

MR3 is coming out at the end of this week beginning of the next.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Richard Hunt1 over 4 years ago in reply to emmosophos

Can verify Mr3 does not solve this problem. As a work around we have to set to manual update (not ideal) or put to daily and reboot the router after hours, there is no way to set the schedule to a specific time. Otherwise, need to fix it to allow traffic when updating IPS/AV signatures.
Cancel
Vote Up +2 Vote Down

Cancel
0 Richard Hunt1 over 3 years ago

This seems to be improved in V18MR4. couple of packet drops in a ping test during a pattern update of AV and/or IPS, but no loss of connection via VPN, etc. I would guess the result could vary depending on the CPU of the appliance.
Cancel
Vote Up 0 Vote Down

Cancel
0 JasP over 3 years ago in reply to Richard Hunt1

No noticeable improvement here on any of our 100 series sites. It may be a little quicker but as we are still seeing at least a two minute cessation of all internet traffic for IPS/ATP updates which results in breaking all connections.

We have had a support case open about this since 20th October (#03253973). It was recently "Assigned to With Sophos Development/Labs" so we will see what they come up with.
Cancel
Vote Up 0 Vote Down

Cancel
0 JasP over 3 years ago in reply to JasP

My case has been "resolved" with Development/Labs once again just saying this is expected behaviour. The L2 engineer has to close the case but his manager is going to take this up with the development team as they agree that this is not acceptable behaviour. I wouldn't hold your breath for an implementation that allows updates without dropping the traffic but they are hoping they will prioritise the ability to schedule updates so that they can be done outside work hours. This feature was first requested in 2016 and is the second highest scoring feature request...and still hasn't been implemented https://ideas.sophos.com/forums/330219-xg-firewall/suggestions/13066116-scheduled-installation-of-the-av-updates-and-firmw
Cancel
Vote Up +1 Vote Down

Cancel
0 Keith Laudenberger over 3 years ago in reply to JasP

On v18MR4 and todays updates resulted in my son being disconnected from an online history test.

It is a joke that these cannot be set to occur only during specific hours of the day.
Cancel
Vote Up 0 Vote Down

Cancel