Continously DNS connect to failed error log & Virus_sample_uploader

RE: Continously DNS connect to failed error log & Virus_sample_uploader

hasan bozkuty — Mon, 30 Oct 2023 13:41:44 GMT

Could it be about firewall software update? Because we get it continously. if it is relevant with the firewall link up/down process then would it be gone in the night or public holidays? The frequent would be also importantly changed. How can I manuel trigg to update it? Then we may have a chance to update process is working correctly.

RE: Continously DNS connect to failed error log & Virus_sample_uploader

Raphael Alganes — Mon, 30 Oct 2023 13:18:12 GMT

Hello Hasan,

Does the users behind the firewall experiencing resolving/connectivity issues? What is your CPU utilization since this occured? Also, What is the frequency of your Pattern updates?

I may also recommend you to open a support ticket for this to be further investigated. https://support.sophos.com/support/s/?language=en_US#t=AllTab&sort=relevancy

Kindly share with us the caseID once you have it.

Many thanks for your time and patience and thank you for choosing Sophos.

Regards,

RE: Continously DNS connect to failed error log & Virus_sample_uploader

hasan bozkuty — Mon, 30 Oct 2023 12:55:35 GMT

Hello do you have any idea? How can I bring my question up?

RE: Continously DNS connect to failed error log & Virus_sample_uploader

hasan bozkuty — Thu, 26 Oct 2023 15:33:35 GMT

Hello Raphael ,

thanks for you replying to me.

We are using UTM 9.

I have just started to work this company and I did not experience these.

in forwarders there are openvpncloud and google dns entries.

static entries are empty

request routing from local to our dc machine.

ntp settings are so;

please let me know if you need further information.

btw virus_sample_uploader is a known thing?

Best regards,

Hasan

RE: Continously DNS connect to failed error log & Virus_sample_uploader

Raphael Alganes — Thu, 26 Oct 2023 14:40:27 GMT

Hello Hasan,

Thanks for reaching out to Sophos Community.

Are you using Sophos UTM or Sophos XG/S Firewall?

Do you happen to experience connectivity or DNS resolving issues while having the log messages above? Could you show yourr DNS and NTP settings?

Regards,