Error Message-Couldn't Update the IPS Status

Question

So I have IPS protection turned on as shown below:

I know that the pattern is updating as shown below: 
 
 So I have 2 questions. 
 1. Shouldn't the 'Time of signature update' change dates when IPS and Application signatures are updated? Mine doesn't. It's always show Aug 25 2022. 
 2. When I turn off IPS protection, I get a strange error message stating 'Couldn't Update The IPS Status'. Then when I turn IPS protection back on, I get the same error message. What does this error message mean and is it related to question #1? 
 I cannot find anything mentioning the error message in Sophos's documentation. 
 Running this: 
 Any help or guidance appreciated.

bobbylam · Accepted Answer

v19.0 MR2 is scheduled to be released Q1 CY2023. NC-100373 will also be fixed in the upcoming v19.5 release later this year. 
 The issue you're experiencing only affects the display of last signature update date/time on the IPS page. The IPS signatures are updated correctly, and the pattern/firmware page displays the correct status/date, so IPS is functioning normally. 
 As for the error message you're seeing when enabling/disabling IPS: 
 When IPS is enabled, it needs to load on startup all the IPS signatures which are in use. If you have a lot of signatures, or your host device is slower, it may take a while to load. The UI can time out waiting for IPS to start, and shows the error message you see. IPS does get started, so again it's functioning properly, so again this is a UI display issue. We will also fix this in v19.0 MR2 and v19.5.

emmosophos · Answer

Hello there, 
 Thank you for contacting the Sophos Community. 
 For anybody following this thread you might be affected by NC-100373 , and this issue is being fixed on MR2. 
 So basically the IPS will show the sigupdated date&time of earlier firmware, v19.0 due to duplicated cv. 
 New installations won&rsquo;t show this, so if you re-image your device to v19.0 MR1, it would show the correct date. 
 Regards,

Error Message-Couldn't Update the IPS Status

Top Replies