This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

9.208 BUG: Various IPS *** Caught Term-Signal

We have several customers with complaints of failure access (page loading incomplete information), all with IPS enabled and after disabling the feature, the hits just bounce right back.

Not detected any problems via logs ... could verify that this is a bug?


This thread was automatically locked due to age.
ips-2014-11-17.zip
Parents Reply Children
  • Yes, after about 11/17 8:45AM EDT --- a bad update release is to blame.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • I called in today (about an hour ago) and was told this...

    Sophos released a bad file on Monday morning.  As with you guys - on Monday morning, my users starting having trouble with our web based ticketing system.  

    We have been fighting all week to fix it.  Even turning off IPS didn't really resolve it for us.  

    Today - support admitted to the issue and told me to add an exception to IPS to disable all IPS functions headed to the internal IP of the webserver.

    This sounds great and all... but my testing earlier this week included this, as well as NATs around all that protection.  I think they broke more than they think they did.

    The kicker - IT DOESN'T SHOW UP IN LOGS.  This... unfortunately, was also told to me by support.

    I spent countless hours of my own, as well as near 24 hours of consultant time on this issue.  We are still having intermittent issues.  I am not convinced their new updates have fixed it.

    -Jim