This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AV filtering causes websites not to load correctly

Hi,

An issue started yesterday whereby clients were not displaying websites correctly, (no images etc) and bringing up certificate revocation errors.

With the HTTP scanning turned off, all works fine.

No rules on the FW have been changed in weeks. I have carried out reboots this morning as well.

Currently HTTP scanning is off, but this is obviously not a good position to be in.

Box is XG430, running 15.01 MR2.

I have noticed that my box (well boxes as I have 2, one at each end of a vpn) that they are not updating AV etc. I know not to expect definitions daily etc, but these haven't updated in months. Also, when I do a firmware check on the boxes, I don't get any update either.

Any ideas?

Thanks,
Rich.

This thread was automatically locked due to age.

0 sachingurung over 7 years ago

Hi Richard,

Try a manual update, go to System>Administration>Updates and click the update pattern now button. Alongside, capture up2date_av.log and post it here.

Any help with that?

Sachin Gurung
Team Lead | Sophos Technical Support
Knowledge Base | @SophosSupport | Video tutorials
Remember to like a post. If a post (on a question thread) solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 RichardPhillips over 7 years ago in reply to sachingurung

Thanks.

I do the update, and get the green banner at top saying its running, but nothing updates.

I look in the log, and see up2date give this

2016-09-29 11:30:37

Up2Date

FAILED

-

Failed to check for updates

18029

But I don't know where/how to get you more detailed log. Could you give me some more information?

Thanks.

Sophos XG Certified Administrator
Cancel
Vote Up 0 Vote Down

Cancel
0 RichardPhillips over 7 years ago in reply to RichardPhillips
Think its sorted. AV scanning is back on and its downloaded a load of updates, and can see MR3 firmware too. Not sure if I want/need to run MR3 yet, but I will settle for a system scanning AV.

I am leaving it an hour to see what happens.

I used this information from another post here https://community.sophos.com/products/xg-firewall/f/46/t/73626?pi394=3

In Main Menu choose:
5. Device Management
Then
3. Advanced Shell.
On command prompt type this command:
mv /content/u2d/pattern /content/u2d/pattern.org
This will rename the pattern file to pattern.org.
Now update the pattern files with the GUI using System > Administration > Updates.
Give the firewall some time to succeed the update process.
Sophos XG Certified Administrator
Cancel
Vote Up 0 Vote Down

Cancel