Running SFOS 18.0.1 MR-1-Build396 and have been having dropped traffic issues with VOIP calls and software VPN connections to outside devices at about the same time the AV patterns are updating. Has anyone else noticed this?
Can verify Mr3 does not solve this problem. As a work around we have to set to manual update (not ideal) or put to daily and reboot the router after hours, there is no way to set the schedule to a specific…
Thank you for the follow-up!
MR3 is coming out at the end of this week beginning of the next.
Can verify Mr3 does not solve this problem. As a work around we have to set to manual update (not ideal) or put to daily and reboot the router after hours, there is no way to set the schedule to a specific time. Otherwise, need to fix it to allow traffic when updating IPS/AV signatures.
This seems to be improved in V18MR4. couple of packet drops in a ping test during a pattern update of AV and/or IPS, but no loss of connection via VPN, etc. I would guess the result could vary depending on the CPU of the appliance.
No noticeable improvement here on any of our 100 series sites. It may be a little quicker but as we are still seeing at least a two minute cessation of all internet traffic for IPS/ATP updates which results in breaking all connections.
We have had a support case open about this since 20th October (#03253973). It was recently "Assigned to With Sophos Development/Labs" so we will see what they come up with.
My case has been "resolved" with Development/Labs once again just saying this is expected behaviour. The L2 engineer has to close the case but his manager is going to take this up with the development team as they agree that this is not acceptable behaviour. I wouldn't hold your breath for an implementation that allows updates without dropping the traffic but they are hoping they will prioritise the ability to schedule updates so that they can be done outside work hours. This feature was first requested in 2016 and is the second highest scoring feature request...and still hasn't been implemented https://ideas.sophos.com/forums/330219-xg-firewall/suggestions/13066116-scheduled-installation-of-the-av-updates-and-firmw
On v18MR4 and todays updates resulted in my son being disconnected from an online history test.
It is a joke that these cannot be set to occur only during specific hours of the day.