topic Re: Possibility to disable the Automatic updates for 1100 and all SMB appliances in Spark Firewall (SMB)

Possibility to disable the Automatic updates for 1100 and all SMB appliances

Arun_R — Mon, 04 Jun 2018 23:19:28 GMT

Dear Trem,

Is there is any possibilities to disable the Automatic Update of Antivirus, Anti-bot and IPS in SMB appliances.

Regards,

Arun.R

Re: Possibility to disable the Automatic updates for 1100 and all SMB appliances

PhoneBoy — Tue, 05 Jun 2018 05:48:29 GMT

If you don't mind me asking, why?

And are these devices centrally managed or not?

Re: Possibility to disable the Automatic updates for 1100 and all SMB appliances

G_W_Albrecht — Tue, 05 Jun 2018 10:37:30 GMT

Let us suppose these are locally managed, then i would say that before you can ask this question, you have to activate scheduled updates ! That is in WebGUI under Threat Prevention > Blade Control > Schedule updates link, here you can (de)select the blades for automatic update and choose an update time.

For centrally managed SMBs you have to use the Dashboard to configure Automatic Updates.

Re: Possibility to disable the Automatic updates for 1100 and all SMB appliances

Arun_R — Tue, 05 Jun 2018 16:37:01 GMT

Hi Dameon,

The client is facing some disk sizing issue on the 1180 appliance, whenever the blades starts getting update disk was completely utilised due to that TAC team suggest to test by disabling the blade.

But the client is refused it.

As its a complete sizing issue which TAC already confirmed with us but for testing we would like to disable the automatic update to observe the cause.

Its locally managed.

- Arun.R

Re: Possibility to disable the Automatic updates for 1100 and all SMB appliances

Arun_R — Tue, 05 Jun 2018 16:39:53 GMT

Hi Gunther,

Thanks for the assist, I will checked with the client.

- Arun.R

Re: Possibility to disable the Automatic updates for 1100 and all SMB appliances

G_W_Albrecht — Wed, 06 Jun 2018 07:03:57 GMT

Remember - it is not a disk, but a flash ! I would suggest to refer to my article about Optimizing an IPS profile for SMB.

This can reduce used storage space, see also sk105217, sk107762, sk98606, sk128092 and sk126372 with a special firmware adding the option to Move temporary policy files to storage.

Re: Possibility to disable the Automatic updates for 1100 and all SMB appliances

Steffen_Appel — Mon, 18 Jun 2018 08:23:11 GMT

Where do you disable the automatic updates for the SMB devices in the dashboard?

Re: Possibility to disable the Automatic updates for 1100 and all SMB appliances

PhoneBoy — Wed, 20 Jun 2018 20:17:28 GMT

Just to circle back, there was a known issue with the AV/AB on 600/1100 appliances (namely, them being too large).

To solve the issue:

Update AB blade (Or make sure by logs that there was update with DB version 1806191748 or above) .
Reboot the device.
Enable back scheduled updates for AV (in case it turn off) – don’t need to run it manually.
Wait to the scheduled time and see if it AV update passes successfully.

Further corrective actions around this area are planned.