Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 4 subscribers
  • Views 11384 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Configuration can't be confirmed from support package

Yasu .

Hi all,

We have very trouble because the specification of the support package changes.
Is there anyone in trouble about this?

We have used support package for support of our customer from V7.
We restore storage.abf in our unit and we have confirmed the customer's configuration.
Sophos changed the specification of support package suddenly in 9.503.
By this change, when storage.abf was restored , Webadmin access will be failed.

Of course, we contacted support but support doesn't return an effective answer at all.
There is no intention to which sophos support offers the means to read configuration from storage.abf.
We lost the means to read configuration from storage.abf.
This is having a great influence on operation of our support we offer to our customers.
If the quality of the support of Sophos is very high, we can and will escalate to sophos support without checking configuration by ourself.
But actuality is far inferior to this.

P.S.
We know able to see configuration by backup.plx command.
But it's very hard to read configuration from here, so it isn't useful.



This thread was automatically locked due to age.
Parents
  • 0

    Such as resetting a certificate of WebAdmin, there should be other ways.
    Sophos's handling is being too rough and isn't considering the user's  convenience at all.
    Sophos doesn't try engage in productive discourse at all only by insistence of not bug.

    Config Dump which can't check configuration easily is worthless.
    The act of Sophos is same as making this function disablement.

Reply
  • 0

    Such as resetting a certificate of WebAdmin, there should be other ways.
    Sophos's handling is being too rough and isn't considering the user's  convenience at all.
    Sophos doesn't try engage in productive discourse at all only by insistence of not bug.

    Config Dump which can't check configuration easily is worthless.
    The act of Sophos is same as making this function disablement.

Children
  • 0 in reply to Yasu .

    Yasu, I can tell that you're angry, but I'm not sure what about.  Are you saying that your company had developed a tool to read an .abf file and display the configuration in a way you find easier to use than the Printable Configuration in WebAdmin, but that it doesn't work any more?  What do you mean by "resetting a certificate of WebAdmin" and why is another way needed?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Bob, when you'd like to confirm configuration from support package, how do you do?
    I will restore storage.abf in our unit and confirm these.
    If there are other ways to confirm the configuration from support package, would you tell me?

    Sophos removed *Key.pem from storage.abf.
    When storage.abf is restored, file size of *Key.pem will be 0.
    Therefore the access of WebAdmin is failed.

    # ls -al /var/sec/chroot-httpd/etc/httpd
    total 60
    drwxr-xr-x 3 root root 4096 Nov 22 14:22 .
    drwxr-xr-x 3 root root 4096 Nov 22 15:35 ..
    -rw-r--r-- 1 root root 2956 Nov 22 14:22 HotspotCertCA.pem
    -rw-r--r-- 1 root root 4179 Nov 22 14:22 HotspotCert.pem
    -rw-r--r-- 1 root root    0 Nov 22 14:22 HotspotKey.pem
    -rw-r--r-- 1 root root 3001 Nov 22 14:22 httpd.conf
    -rw-r--r-- 1 root root 2918 Aug 12 01:28 httpd.conf-default
    -rw-r--r-- 1 root root 3086 Aug 12 01:28 mime.types
    -rw-r--r-- 1 root root   18 Nov 22 14:22 spx-auth.pass
    -rw-r--r-- 1 root root   40 Aug 12 01:28 spx-auth.pass-default
    drwxr-xr-x 2 root root 4096 Nov 22 14:22 vhost
    -rw-r--r-- 1 root root 2982 Nov 22 14:22 WebAdminCertCA.pem
    -rw-r--r-- 1 root root 3515 Nov 22 14:22 WebAdminCert.pem
    -rw-r--r-- 1 root root    0 Nov 22 14:22 WebAdminKey.pem

    If Sophos's intent is only delete of *Key.pem, there should be a way to maintain access to WebAdmin.
    For example, other *pem evacuated and display Basic system setup.(WebAdmin certificate regenerate)

    Sophos doesn't explain the reason that it was changed.
    Sophos only repeats an answer of "not bug" to our questions about this.

  • 0 in reply to Yasu .

    If I restore from a regular backup, Yasu, I don't see zero-length keys.  How are you generating storage.abf?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Regular backup works fine. Storage.abf is configuration dump generated from Support Package.
    It's the function of Support Package that I regard as a issue.
    That's the changes that impair the function of configuration dump very much.
    Sophos should be able to evade this by a little correction.

  • 0 in reply to Yasu .

    What Support Package?  I've never heard of that in over 14 years with this product.  Do you mean cc support_snapshot_get?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    Support Package can download from the following menu.
    Support -> Advanced -> Config Dump

  • 0 in reply to Yasu .

    Thanks, Yasu - I remember that option now, but it's been over 10 years since I last looked at that.  If the *Key.pem files were included in storage.abf, what would be the advantage of that over a regular backup?

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson

    I understand that you are not using the Support Package and have not found any value.
    I have no intention to discuss the value of the Support Package.
    I wanted to know whether anyone is in trouble like us.
    Thank you for being concerned about what I am in trouble.

    I also understand that alternative means are left.
    However, I don't think that Sophos is allowed rough changes which inconvenience us if there are alternative means.
    What is the intention to offer the config dump function which can't confirm configuration easily?
    If Sophos cared a little more about the user and changed it, there would have been no problem.

Unfiltered HTML