IPS update pattern drop packets

Question

Hi, 
 we have a SFOS 19.5.3 MR-3-Build652 and since few weeks, when the ips update the patterns, the sophos firewall drops all the packets for 30s. 
 It will never do that before . 
 Is this a bug ? 
 Thanks 
 Regards,

Vivek Jagad · Answer

Hello GuiSeb ,

Thank you for reaching out to the community, may we know the Pattern download/installation interval set ?
If it is by default set to "2 hours", change that to "Daily" as a best practice so that it does not hamper your production environment.

Vishal_R · Answer

Hi GuiSeb Below is the summary of the case: IPS restart/reload after IPS patterns update is the expected behavior and during this restart/reload few packet drops are observed for a while, Change on the OS side is planned in upcoming versions (no ETA) to prevent this behavior. The workaround would be to disable firewall acceleration if really needed to be applied.

IPS update pattern drop packets

Top Replies