Sophos UTM blocking IP RCS traffic?

Hi Adrian and welcome to the UTM Community!

I can imagine that using Web Filtering in Transparent mode might be an issue - are you seeing blocks in that log?  If not, then check the Firewall and Intrusion Prevent logs.  Any luck?

Cheers - Bob

Hi Bob, no I'm not seeing blocks in the log.  The UTM is in routing mode, Nating and filtering is not transparent.  Cheers I'll check the intrusion logs...

I issue is only with Google Android RCS not Apple iMessage as it works fine.

Hi Bob, no I'm not seeing blocks in the log.  The UTM is in routing mode, Nating and filtering is not transparent.  Cheers I'll check the intrusion logs...

I issue is only with Google Android RCS not Apple iMessage as it works fine.

Hi all, in the process of troubleshoot I couldn't find anything in the logs.

So ditches the old firewall and went back to version 9.408-4; low and behold it works fine now!

Sometimes, an Up2Date "breaks" a configuration, Adrian.  It's rare, but sometimes just restoring an older backup solves the problem.  I suggest starting with the one made automatically just before the last group of Up2Dates was applied.

Cheers - Bob

Cheers Bob,

To be honest I have been mucking about with vmware ESXi 7 and a load of things broke.

Sophos UTM 9.7 just wouldn't work in the lab on ESXi 7.

So I thought ESX7 was at fault - but still 9.7 wouldn't work properly. Nor would 9.6.

So I moved back to ESXi 6 - and that happily runs.  So I'm going to upgrade bit by bit on each.  The only problem is ESXi 6 went end of general support in March of this year https://www.vmware.com/content/dam/digitalmarketing/vmware/en/pdf/support/product-lifecycle-matrix.pdf

And you do you know of any documentation for skipping up2date packages or do they have to be done in sequence of release? 

Actually is there any docs for UTM9 on ESXi7 too.

All the best Ade.

Good post, Ade.

You can't skip Up2Dates - they must be applied sequentially.  To see the KnowledgeBase articles available, Google on site:community.sophos.com/kb ESXi.

When you're that far back, I would be worried that the \ directory might get filled by Up2Date files if you let the UTM retrieve them automatically.  Instead, I would retrieve and apply them from the command line.  As root:

#cc get up2date system_download_interval

This latter returns: 10 = Manual or Monthly, 0 = Every 15 mins, etc.  Note this!

Let's set the interval to Manual:

#cc set up2date system_download_interval 10

We'll get the files and apply them in several groups - copy and paste the following at the command line:

cd /var/up2date/sys
wget --no-check-certificate http://ftp.astaro.com/pub/UTM/v9/up2date/u2d-sys-9.406003-407003.tgz.gpg
wget --no-check-certificate http://ftp.astaro.com/pub/UTM/v9/up2date/u2d-sys-9.407003-408004.tgz.gpg
wget --no-check-certificate http://ftp.astaro.com/pub/UTM/v9/up2date/u2d-sys-9.408004-409009.tgz.gpg
wget --no-check-certificate http://ftp.astaro.com/pub/UTM/v9/up2date/u2d-sys-9.409009-411003.tgz.gpg
wget --no-check-certificate http://ftp.astaro.com/pub/UTM/v9/up2date/u2d-sys-9.411003-412002.tgz.gpg
wget --no-check-certificate http://ftp.astaro.com/pub/UTM/v9/up2date/u2d-sys-9.412002-413004.tgz.gpg
/sbin/auisys.plx --showdesc

Wait 10 minutes after the auisys command starts and then install in WebAdmin.  Once that's finished,

cd /var/up2date/sys
wget --no-check-certificate http://ftp.astaro.com/pub/UTM/v9/up2date/u2d-sys-9.413004-414002.tgz.gpg
wget --no-check-certificate http://ftp.astaro.com/pub/UTM/v9/up2date/u2d-sys-9.414002-415001.tgz.gpg
wget --no-check-certificate http://ftp.astaro.com/pub/UTM/v9/up2date/u2d-sys-9.415001-505004.tgz.gpg
wget --no-check-certificate http://ftp.astaro.com/pub/UTM/v9/up2date/u2d-sys-9.505004-506002.tgz.gpg
wget --no-check-certificate http://ftp.astaro.com/pub/UTM/v9/up2date/u2d-sys-9.506002-507001.tgz.gpg
wget --no-check-certificate http://ftp.astaro.com/pub/UTM/v9/up2date/u2d-sys-9.507001-508010.tgz.gpg
/sbin/auisys.plx --showdesc

Wait 10 minutes after the auisys command starts and then install in WebAdmin.  Once that's finished,

cd /var/up2date/sys
wget --no-check-certificate http://ftp.astaro.com/pub/UTM/v9/up2date/u2d-sys-9.508010-509003.tgz.gpg
wget --no-check-certificate http://ftp.astaro.com/pub/UTM/v9/up2date/u2d-sys-9.509003-510005.tgz.gpg
wget --no-check-certificate http://ftp.astaro.com/pub/UTM/v9/up2date/u2d-sys-9.510005-605001.tgz.gpg
wget --no-check-certificate http://ftp.astaro.com/pub/UTM/v9/up2date/u2d-sys-9.605001-606001.tgz.gpg
wget --no-check-certificate http://ftp.astaro.com/pub/UTM/v9/up2date/u2d-sys-9.606001-702001.tgz.gpg
wget --no-check-certificate http://ftp.astaro.com/pub/UTM/v9/up2date/u2d-sys-9.702001-703003.tgz.gpg
/sbin/auisys.plx --showdesc

Wait 10 minutes after the auisys command starts and then install in WebAdmin.  You are now at 9.703

Cheers - Bob
PS I started this list of instructions years ago and keep it updated. 

Oh nice one Bob!  Thank so much.

Cheers I'll have a google about for ESXi7 - however, I noted only ESXi6.7 is supported sophos for VM appliances for VMware hypervisors. 

With regards to UTM version breaking RCS traffic - I'll test the RCS traffic problem after each batch and see how it goes.