topic Re: ETA on R80.10 for Sandblast Appliances in Firewall and Security Management

ETA on R80.10 for Sandblast Appliances

cstueckrath — Wed, 26 Jul 2017 07:31:19 GMT

We own a TE100X Sandblast Threat Emulation Appliance and it is our last product running R77.30.

We would really like to upgrade to R80.10 here, but although it lets me install R80.10 as upgrade or fresh install on the Appliance, emulations wont work anymore:

Initialization process of Threat Emulation advisors failed.

[7838 4089317328][7 Jun 16:49:28] [TE_TRACE]: daemon reconf (AMW) [7838 4089317328][7 Jun 16:49:28] [TE_TRACE (TD::Important)] te::URLInvestigator::DoReconf: proxy is: xxx.xxx.xxx.xxx:8080 [7838 4089317328][7 Jun 16:49:28] [TE (TD::Surprise)] te::AdvisoryInvestigator::AddAdvisor: Failed to init advisor 5 [7838 4089317328][7 Jun 16:49:28] [TE (TD::Surprise)] te::AdvisoryInvestigator::PrepareAllAdvisors: Failed to prepare the BD advisor [7838 4089317328][7 Jun 16:49:28] [TE_TRACE]: loading executable analyzer configuration (revision: 541187) [7838 4089317328][7 Jun 16:49:28] [TE (TD::Surprise)] te::AdvisoryInvestigator::AddAdvisor: Failed to init advisor 5 [7838 4089317328][7 Jun 16:49:28] [TE (TD::Surprise)] te::AdvisoryInvestigator::PrepareAllAdvisors: Failed to prepare the BD advisor [7838 4089317328][7 Jun 16:49:28] [TE (TD::Surprise)] te::EngineUpdates::SendCurrentUpdateRevision: Did not read revision file: /opt/CPsuite-R80/fw1/teCurrentPack/revision_data Not necessity an error [7838 4089317328][7 Jun 16:49:28] [TE_TRACE]: Don't ask Update file repository to save some version

As Upgrade Wizard does not contain R80 for Sandblast either, I assume it wasn't officially released for TE-X?

Re: ETA on R80.10 for Sandblast Appliances

PhoneBoy — Wed, 26 Jul 2017 15:01:51 GMT

You are correct, R80.10 is not released for the TE appliances.

That said, most of the functionality that R80.10 provides is not entirely relevant on emulation appliances.

Re: ETA on R80.10 for Sandblast Appliances

cstueckrath — Fri, 28 Jul 2017 07:07:14 GMT

I wouldn't mind running it with R77.30, but I cannot get rid of the R77 Threat Prevention Policies that way, as you must not have any managed R77 Systems in the console to be able to switch to R80 policies.

I just ask for an ETA to schedule my project...

Re: ETA on R80.10 for Sandblast Appliances

cstueckrath — Mon, 04 Sep 2017 12:30:05 GMT

just to inform the others waiting for R80.10:

I have it up and running using latest Take 35 and engine version 54.990001557

It needs some new src:APIPA dst:APIPA roles and you will want to edit /opt/CPUserCheckPortal/scripts/configure_scrub_web_service.sh as described in sk118353 so you should consider using an extended maintenance window for the upgrade or reinstall (upgrade worked fine for us)

Re: ETA on R80.10 for Sandblast Appliances

PhoneBoy — Mon, 04 Sep 2017 18:59:06 GMT

It's worth noting this is considered "Early Availability" at this point (see version 6.8.1 here): Threat Emulation Engine Update - What's New?

If you are using a Threat Emulation appliance with R80.10, R&D would love the feedback.

Re: ETA on R80.10 for Sandblast Appliances

Georg_Reichau — Thu, 01 Feb 2018 12:25:01 GMT

Hi there,

are there any news on a release date for R80.10 GA for the TE appliances?

Our 2 TE1000X are the last systems running R77.30, and I would really like to use the new reports, but can't risk it in my production environment with EA builds.

Re: ETA on R80.10 for Sandblast Appliances

G_W_Albrecht — Tue, 06 Feb 2018 14:47:59 GMT

Sadly, it looks like these appliances currently do not officially support R80.10 at all 😞

You can consult the Appliance Support page at Life Cycle Policy Page:

TE1000X

Supported Software Versions

R77.30

Same is true of R80.10 Gaia Fresh Install page and R80.10 Fresh Install and Upgrade from R7X, the model just does not show...

Re: ETA on R80.10 for Sandblast Appliances

Georg_Reichau — Tue, 06 Feb 2018 15:36:19 GMT

Funny enough, on my TE1000X Appliance, the R80.10 Fresh Install and Update does show up.

But I guess I would run into trouble with my emulation environment etc. on update.

I hope the GA for these types will be added soon, as the EA seems to be working since September last year.

Re: ETA on R80.10 for Sandblast Appliances

cstueckrath — Fri, 02 Mar 2018 09:52:07 GMT

we have it running on 80.10 for 6 months without major issues now (just make sure, you have the latest engine, see my post above)