This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM 9.355-1 -> 9.4xx should auto upgrade?

Should up2date be prompting me for the 9.4xx upgrades from 3.55-1?

Or is my up2date not working...

df looks like there is lots of room so I don't think that is the issue...

Filesystem 1K-blocks Used Available Use% Mounted on
/dev/sda6 5411204 2448528 2664756 48% /
udev 1798396 108 1798288 1% /dev
tmpfs 1798396 0 1798396 0% /dev/shm
/dev/sda1 338875 15598 301261 5% /boot
/dev/sda5 10624684 2561996 7472612 26% /var/storage
/dev/sda7 13994784 1057672 12167284 8% /var/log
/dev/sda8 1007176 26516 912280 3% /tmp
tmpfs 1798396 0 1798396 0% /var/sec/chroot-httpd/dev/shm
tmpfs 1798396 0 1798396 0% /var/storage/chroot-reverseproxy/dev/shm
tmpfs 1798396 0 1798396 0% /var/storage/chroot-http/tmp
tmpfs 1798396 88 1798308 1% /var/storage/chroot-smtp/tmp/ram

Any thing else I can check...

I tried the:

auisys.plx up2date --verbose

'verbose' mode implicits set noqueue option!
no HA system or cluster node
waiting for db_verify to return (30 seconds max)
removing '/var/up2date/appctrl43-install'
removed directory: `/var/up2date/appctrl43-install'
removing '/var/up2date/aptp-install'
removed directory: `/var/up2date/aptp-install'
removing '/var/up2date/cadata-install'
removed directory: `/var/up2date/cadata-install'
removing '/var/up2date/geoip-install'
removed directory: `/var/up2date/geoip-install'
removing '/var/up2date/ipsbundle-install'
removed directory: `/var/up2date/ipsbundle-install'
removing '/var/up2date/man9-install'
removed directory: `/var/up2date/man9-install'
removing '/var/up2date/ohelp9-install'
removed directory: `/var/up2date/ohelp9-install'
removing '/var/up2date/savi-install'
removed directory: `/var/up2date/savi-install'
removing '/var/up2date/sys-install'
removed directory: `/var/up2date/sys-install'
Starting Up2Date Package Installer
No suitable packages of type <man9> found, skipping
No suitable packages of type <appctrl43> found, skipping
No suitable packages of type <ohelp9> found, skipping
No suitable packages of type <aptp> found, skipping
No suitable packages of type <cadata> found, skipping
No suitable packages of type <sys> found, skipping
No suitable packages of type <geoip> found, skipping
No suitable packages of type <ipsbundle> found, skipping
No suitable packages of type <savi> found, skipping
Up2Date Package Installer finished, exiting

Or is this a reinstall to goto 9.4xx?



This thread was automatically locked due to age.
Parents
  • Hi John,

    You can set the frequency for the update downloads but the firmware update will be a manual process as it requires a downtime. You can verify what frequency is set by navigating through Managament> configuration> Firmware download interval. To manually upgrade the firmware, you can find this option at the bottom of overview tab.

    If you have the update package downloaded successfully, you can find it in the overview tab. Else you can download it from here and manually upload it later.

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • Yup, I am aware that you can set the up2date to check automatically (which currently it is).  

    That is the issue.   up2date IS set to check daily and it has NOT prompted for the update to 9.4xxx.  

    The question is is up2date not working or is the upgrade to 9.4xx only a manual process?

Reply
  • Yup, I am aware that you can set the up2date to check automatically (which currently it is).  

    That is the issue.   up2date IS set to check daily and it has NOT prompted for the update to 9.4xxx.  

    The question is is up2date not working or is the upgrade to 9.4xx only a manual process?

Children
  • Hi John,

    Please post up2date.log here, to investigate further.

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • I believe updates are also staged so the update servers don't get too much traffic at once. It may therefore take more time before the updates start showing up.

    If you do want to update sooner, you can manually download the update from here. If you do this however make sure to also include every other update you need from your current version up to the latest so:

    http://download.astaro.com/UTM/v9/up2date/u2d-sys-9.355001-401011.tgz.gpg
    http://download.astaro.com/UTM/v9/up2date/u2d-sys-9.401011-402007.tgz.gpg


    Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

  • Looking at the log... looks like maybe they aren't posted to the update site yet?

    fw:/var/log # cat up2date.log

    2016:05:17-01:43:02 fw audld[15307]: >=========================================================================
    2016:05:17-01:43:02 fw audld[15307]: Another instance of this process is already running, exiting
    2016:05:17-01:43:02 fw audld[15307]: pids currently running: 15307 15308 (my pid: 15307, parent pid: 15293)
    2016:05:17-01:43:02 fw audld[15307]:
    2016:05:17-01:43:02 fw audld[15307]: 1. main::main:71() audld.pl
    2016:05:17-01:43:02 fw audld[15307]: 2. main::top-level:40() audld.pl
    2016:05:17-01:43:02 fw audld[15308]: >=========================================================================
    2016:05:17-01:43:02 fw audld[15308]: Another instance of this process is already running, exiting
    2016:05:17-01:43:02 fw audld[15308]: pids currently running: 15307 15308 (my pid: 15308, parent pid: 15294)
    2016:05:17-01:43:02 fw audld[15308]:
    2016:05:17-01:43:02 fw audld[15308]: 1. main::main:71() audld.pl
    2016:05:17-01:43:02 fw audld[15308]: 2. main::top-level:40() audld.pl
    2016:05:17-07:43:02 fw audld[22085]: no HA system or cluster node
    2016:05:17-07:43:02 fw audld[22085]: Starting Up2Date Package Downloader
    2016:05:17-07:43:03 fw audld[22085]: patch up2date possible
    2016:05:17-07:43:10 fw audld[22085]: id="3701" severity="info" sys="system" sub="up2date" name="Authentication successful"
    2016:05:17-07:43:10 fw audld[22085]: id="3707" severity="info" sys="system" sub="up2date" name="Successfully synchronized fileset" status="success" action="download" package="savi"
    2016:05:17-07:43:12 fw audld[22085]: id="3707" severity="info" sys="system" sub="up2date" name="Successfully synchronized fileset" status="success" action="download" package="aptp"
    2016:05:17-07:43:13 fw auisys[22136]: no HA system or cluster node
    2016:05:17-07:43:13 fw auisys[22136]: waiting for db_verify to return (30 seconds max)
    2016:05:17-07:43:15 fw auisys[22136]: not cleaning /var/up2date/sys-install in --nosys mode
    2016:05:17-07:43:15 fw auisys[22136]: removing '/var/up2date/appctrl43-install'
    2016:05:17-07:43:15 fw auisys[22136]: removing '/var/up2date/aptp-install'
    2016:05:17-07:43:15 fw auisys[22136]: removing '/var/up2date/cadata-install'
    2016:05:17-07:43:15 fw auisys[22136]: removing '/var/up2date/geoip-install'
    2016:05:17-07:43:15 fw auisys[22136]: removing '/var/up2date/ipsbundle-install'
    2016:05:17-07:43:15 fw auisys[22136]: removing '/var/up2date/man9-install'
    2016:05:17-07:43:15 fw auisys[22136]: removing '/var/up2date/ohelp9-install'
    2016:05:17-07:43:15 fw auisys[22136]: removing '/var/up2date/savi-install'
    2016:05:17-07:43:15 fw auisys[22136]: Starting Up2Date Package Installer
    2016:05:17-07:43:15 fw auisys[22136]: No suitable packages of type <man9> found, skipping
    2016:05:17-07:43:15 fw auisys[22136]: No suitable packages of type <appctrl43> found, skipping
    2016:05:17-07:43:15 fw auisys[22136]: No suitable packages of type <ohelp9> found, skipping
    2016:05:17-07:43:15 fw auisys[22136]: No suitable packages of type <cadata> found, skipping
    2016:05:17-07:43:15 fw auisys[22136]: No suitable packages of type <geoip> found, skipping
    2016:05:17-07:43:15 fw auisys[22136]: No suitable packages of type <ipsbundle> found, skipping
    2016:05:17-07:43:15 fw auisys[22136]: Install u2d packages <aptp>
    2016:05:17-07:43:15 fw auisys[22136]: Starting installing up2date packages for type 'aptp'
    2016:05:17-07:43:16 fw auisys[22136]: Installing up2date package: /var/up2date/aptp/u2d-aptp-9.15454.tgz.gpg
    2016:05:17-07:43:16 fw auisys[22136]: Verifying up2date package signature
    2016:05:17-07:43:16 fw auisys[22136]: Unpacking installation instructions
    2016:05:17-07:43:16 fw auisys[22136]: parsing installation instructions
    2016:05:17-07:43:16 fw auisys[22136]: Unpacking up2date package container
    2016:05:17-07:43:16 fw auisys[22136]: Running pre-installation checks
    2016:05:17-07:43:17 fw auisys[22136]: Starting up2date package installation
    2016:05:17-07:43:35 fw auisys[22136]: id="371Z" severity="info" sys="system" sub="up2date" name="Successfully installed Up2Date package" status="success" action="install" package_version="9.15454" package="aptp"
    2016:05:17-07:43:35 fw auisys[22136]: [INFO-306] New Pattern Up2Dates installed
    2016:05:17-07:43:35 fw auisys[22136]: Install u2d packages <savi>
    2016:05:17-07:43:35 fw auisys[22136]: Starting installing up2date packages for type 'savi'
    2016:05:17-07:43:36 fw auisys[22136]: Installing up2date package: /var/up2date/savi/u2d-savi-9.9156-9157.patch.tgz.gpg
    2016:05:17-07:43:36 fw auisys[22136]: Verifying up2date package signature
    2016:05:17-07:43:36 fw auisys[22136]: Unpacking installation instructions
    2016:05:17-07:43:36 fw auisys[22136]: parsing installation instructions
    2016:05:17-07:43:36 fw auisys[22136]: This is a patch. Setting required_version to 9.9156
    2016:05:17-07:43:36 fw auisys[22136]: Unpacking up2date package container
    2016:05:17-07:43:36 fw auisys[22136]: Running pre-installation checks
    2016:05:17-07:43:37 fw auisys[22136]: Starting up2date package installation
    2016:05:17-07:43:59 fw auisys[22136]: id="371Z" severity="info" sys="system" sub="up2date" name="Successfully installed Up2Date package" status="success" action="install" package_version="9.9157" package="savi"
    2016:05:17-07:43:59 fw auisys[22136]: [INFO-306] New Pattern Up2Dates installed
    2016:05:17-07:44:00 fw auisys[22136]: Up2Date Package Installer finished, exiting
    2016:05:17-07:44:00 fw auisys[22136]: id="3716" severity="info" sys="system" sub="up2date" name="Up2Date Package Installer finished, exiting"

  • @apinjappels is correct. There can be a time gap between when one UTM sees and Up2Date update and another UTM sees the same update.

    I manage two UTMs. One of them is a home UTM, and the other is a hardware UTM in a small business. Last year, there was a multi-week gap between when a major Up2Date appeared for the home UTM and when the same update appeared for the hardware UTM. 

    There was a two-day gap between the first 9.4.x.x update on the two UTMs. The second 9.4 Up2Date update (9.402-7) appeared on the same day for both UTMs. 

    I am running 9.402-7 on my home UTM with no issues. The hardware UTM is still running 9.355-1. I am ready to update it to the latest 9.4.x.x, but waiting for the best time to run the update.

  • Hi,

    Please run tail -f up2date.log and click "check for available up2date package" in Up2date tab.

    See if the UTM is able to discover any latest firmware update. Post the logs.

    Thanks.

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • Changing the Firmware Download Interval to manual under Up2Date ->configuration, then clicking the check for updates button, pulled down the new firmware packages.

    Something must have been broken with the Firmware Download Interval set to daily.  

    9.355001-401011 and 9.401011-402007 are ready to install.

    Really weird that it didn't do the daily check automatically.