So I have IPS protection turned on as shown below:
I know that the pattern is updating as shown below:
So I have 2 questions.
1. Shouldn't the 'Time of signature update' change dates when IPS and Application signatures are updated? Mine doesn't. It's always show Aug 25 2022.
2. When I turn off IPS protection, I get a strange error message stating 'Couldn't Update The IPS Status'. Then when I turn IPS protection back on, I get the same error message. What does this error message mean and is it related to question #1?
I cannot find anything mentioning the error message in Sophos's documentation.
Any help or guidance appreciated.
v19.0 MR2 is scheduled to be released Q1 CY2023. NC-100373 will also be fixed in the upcoming v19.5 release later this year.
The issue you're experiencing only affects the display of last signature update…
is this extract from the firmware update screen or from the IPS policy that you have created?
XG115W - v19.5.0 EAP1 - Home
If a post solves your question please use the 'Verify Answer' button.
Top screen shot is from Intrusion prevention (IPS Policy) and bottom is from Backup and Firmware (Pattern Updates) screen.
Thank you for contacting the Sophos Community.
Yes, the "time of signature update" should match the time of "IPS and Application Signatures".
What type of license do you have? and can you take a screenshot of the error?
What is the output of
# df -h
I was able to capture this error as it only shows for a couple of seconds:
I don't know what you mean by #df -h. Is that a console command?
I have a Home license but I've been assured by your management that the Home license is a 'fully functional' license. The fact that the patterns are updating tells me that updates are working but apparently not being applied correctly.
I'm not opposed to paying for network protection but I wanted to get all of issues resolved first that shouldn't be occurring.
Just to set your expectations correctly.
Home users don't have official Support, so please don't call in Support asking to resolve your issues.
If you’re planning to resolve the issues you’re facing because you potentially would like to purchase the product/license I would recommend working with a Partner close to your zone, so they can work with you in a PoC and go over all your issues/configuration.
Yes, a Home License is fully functional, so this needs to be investigated further, usually the community moderators assist with the troubleshooting.
I have sent you a PM.
are you using a IPS policy you created with selected signatures, if so then you are likely to be seeing the changes that affect those signatures only?
No, these are the 'off the shelf' policies. I haven't created any policies yet.
In my case the time of the signature doesn't match:
Glad it's just not me. If you turn off, then on IPS protection, do you get the error message I get (Couldn't update the IPS Status)?
I get an OK message but the date not update to the latest available: