Can you select which pattern updates are downloaded automatically?

Question

Hello All, 
 We have a number of XG firewalls connected to very low bandwidth / high latency WAN connections. 
 Is it possible to select which pattern modules are updated automatically? We only need IPS and Application signatures to stay up to date. 
 Regards, 
 Gary.

Vishal_R · Answer

Hi Gary McDonald : Unfortunately no settings or UI way to apply Qos on system generated traffic. So You can not apply QoS for auto pattern update as it is system generated traffic.

LuCar Toni · Answer

The answer is "It depends on the Week". 
 You can look at the release notes of the pattern. 
 Based on how many new pattern, the size varies a lot. 
 https://docs.sophos.com/releasenotes/index.html?productGroupID=nsg&productID=ips&versionID=xg 
 Sometimes, Sophos releases multiple packs per Week. Sometimes they will be pushed together.

JasP · Answer

Not a direct answer to your question but would it help if you could schedule the updates out of hours? 
 ATM you can't do that either but their is a fudge that can achieve this. If you set updates to every 24 hours and then reboot the XG outside work hours, the updates take place 24 hours after the reboot (and every 24 hours after that). At least you can then save your bandwidth during working hours.

Vishal_R · Answer

Hi Gary McDonald : Unfortunately no such settings at the moment to select auto pattern update control for specific module. You may submit your request on Ideas Portal of XG . As of now you may only allow to set Interval for "Auto Pattern Update".

MayurMakvana · Answer

Hi Gary Mcdonald, 
 
 As Vishal said, we currently don't have an option for the individual module update. The alternate option which you can try is disable the auto-update from System -> Backup and Firmware -> Pattern updates. 
 Later, you can manually update the pattern which may help saving the bandwidth. 
 https://docs.sophos.com/nsg/sophos-firewall/17.5/Help/en-us/webhelp/onlinehelp/nsg/sfos/concepts/PatternManage.html 
 
 Mayur Makvana Technical Account Manager | Sophos Technical Support Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts | If a post solves your question use the 'This helped me' link.

Can you select which pattern updates are downloaded automatically?

Top Replies