This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

9.208 BUG: Various IPS *** Caught Term-Signal

We have several customers with complaints of failure access (page loading incomplete information), all with IPS enabled and after disabling the feature, the hits just bounce right back.

Not detected any problems via logs ... could verify that this is a bug?

This thread was automatically locked due to age.

ips-2014-11-17.zip

0 mdallagi over 10 years ago

Hi all, I can confirm same problem here!

The only workaround is to create exceptions or completely disable IPS.

Please Sophos, solve ASAP
Cancel
Vote Up 0 Vote Down

Cancel
0 Siarom over 10 years ago

The problem in creating exceptions is because we do not have any input in log.
We completely disabling the IPS and every customer has confirmed the normalization of the service.
Cancel
Vote Up 0 Vote Down

Cancel
0 DavideBissacco over 10 years ago

I confirm that this version 9.208 has many bugs.
I have disabled IPS.
I'm waiting that Sophos solve this issue.
Cancel
Vote Up 0 Vote Down

Cancel
0 guawhitehawk over 10 years ago

This issue also exists in the newes 9.3 - ive created exceptions for the problems we encountered rather than completly disabling IPS. I hope they will release an official statement what the he** happened
Cancel
Vote Up 0 Vote Down

Cancel
0 Siarom over 10 years ago

The 9.209 version is affected?
Cancel
Vote Up 0 Vote Down

Cancel
0 guawhitehawk over 10 years ago

@Siarom all versions should be, because its caused by wrong IPS pattern updates
Cancel
Vote Up 0 Vote Down

Cancel
0 mdallagi over 10 years ago in reply to guawhitehawk

I can confirm also 9.209 is affected.
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 10 years ago in reply to mdallagi

If you start a support case, they do say they have a workaround patch. The other fix will be released "in a future firmware update."

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Sophos Platinum Partner

--------------------------------------

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel
0 Siarom over 10 years ago

The strange is that all the problems started yesterday, 11/17/2014.
Cancel
Vote Up 0 Vote Down

Cancel
0 BrucekConvergent over 10 years ago in reply to Siarom

Yes, after about 11/17 8:45AM EDT --- a bad update release is to blame.

CTO, Convergent Information Security Solutions, LLC

https://www.convergesecurity.com

Sophos Platinum Partner

--------------------------------------

Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries. Use the advice given at your own risk.
Cancel
Vote Up 0 Vote Down

Cancel