Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Sophos Firewall

Discussions UTQ not working anymore after MR1-1 - Bug?

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 8 replies
Subscribers 39 subscribers
Views 13616 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTQ not working anymore after MR1-1 - Bug?

lferrara over 8 years ago

Hi All,

UTQ report is not working anymore after MR1-1. See attachment. It is running more than 30 minutes.

This thread was automatically locked due to age.

Parents

0 vilic over 8 years ago

Works fine on my upgraded XG, allow it more time, maybe a day ?
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to vilic

Thanks Vilic.

Even after a reboot, the UTQ report is running but nothing happens even after 2 hours. Inside the logs, nothing appears.

Strange!
Cancel
Vote Up 0 Vote Down

Cancel
0 Emile Belcourt over 8 years ago in reply to lferrara

Hi Luk,

I got labelled as 80% of our companies potential nastiness last week because Google DNS Prefetch decided to do a lookup of a malicious DNS host!

It seems to be invisible and looks down until something happens!

Try doing an NSLookup on anything on the list found here: http://www.malwaredomains.com/?page_id=66

Then you can see if the UTQ goes "OMG 1 USER IS GOING TO DESTROY YOUR SECURITY PROFILE!!" because that is literally how it looked. I felt ashamed to be labelled as in the top 20% of naughty users on our Company XG, ha ha!

Hope that works!

Emile
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to Emile Belcourt

Thank you Emile for your suggestion.

There should be something that is not working. I upgraded the XG on second of March and only on 23 March, the UTQ reported someting. In the meanwhile, I have surfed bad site everyday. Even if you surf "good sites" UTQ should reports something.

22 Days??? UTQ should reports data after 2 days (giving to me 1 days to collect data and build the report).

[:@]
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 lferrara over 8 years ago in reply to Emile Belcourt

Thank you Emile for your suggestion.

There should be something that is not working. I upgraded the XG on second of March and only on 23 March, the UTQ reported someting. In the meanwhile, I have surfed bad site everyday. Even if you surf "good sites" UTQ should reports something.

22 Days??? UTQ should reports data after 2 days (giving to me 1 days to collect data and build the report).

[:@]
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Emile Belcourt over 8 years ago in reply to lferrara

I agree, regardless of if something has been discovered or not there should be a report that shows the current threat quotient of all the IPs/Users!

I don't want to find out that one of my users has started getting naughty or creeping up the scale until it's too late!

So your UTQ took 2 days to even show that you had done something bad?

Emile
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to Emile Belcourt

No, Emile.

My UTQ took 22 days to report the first data!
Cancel
Vote Up 0 Vote Down

Cancel
0 Emile Belcourt over 8 years ago in reply to lferrara

O.O

Oh...right, yeah that's just stupid crazy!

Are you able to talk to support?

Emile
Cancel
Vote Up 0 Vote Down

Cancel
0 lferrara over 8 years ago in reply to Emile Belcourt

Unfortunately not! It is my home appliance.
Cancel
Vote Up 0 Vote Down

Cancel