topic 1550 SMB IPS and TP troubles in Spark Firewall (SMB)

1550 SMB IPS and TP troubles

G_W_Albrecht — Tue, 03 Dec 2019 12:01:36 GMT

Finally, i have a working IPS on the 1550 in my Dashboard. But still, some issues remain. Look at my GW list with enabled blades:

Looks good - but what about TP Updates ? TE lists all GWs with TE enabled:

But IPS, AV and ABOT do not list it, look at the IPS Update Statuses:

You will only see in Device & License Information of the 1550 (or CLI) that it is updated - it does show IPS not updated, but the Version is the newest one:

Hard to explain this to customers...

Re: 1550 SMB IPS and TP troubles

Hugo_vd_Kooij — Tue, 03 Dec 2019 16:13:05 GMT

Welll, The 15xx is a different breed. It's the only SMB device you have there. The other ones are enterprise products.

That is a distinction too often not made by Sales. But it is a critical to understand the design differences.

Re: 1550 SMB IPS and TP troubles

Barel_Tkach — Wed, 04 Dec 2019 11:00:46 GMT

Hi @G_W_Albrecht,

We are investigating the issue internally.

As you wrote - the gateway is enforcing the different blades and the IPS package is updated, so the issue seems to be cosmetic.

I'll update once we make progress.

Barel.

Re: 1550 SMB IPS and TP troubles

G_W_Albrecht — Wed, 04 Dec 2019 11:17:35 GMT

I have had all kinds of SMB units managed by SMS thru the last ten years, from UTM-1 Edge to 1200R. Exactly these issues have turned up in recent CP + Dashboard (?) versions already, and i did hope they would not return so soon 😊.

What i find very strange is e.g. the SMB CLI output from show application-control. The output looks just exactly like on a locally managed SMB - and this is not correct, i think, as you can not set these details in central managed SMB at all...

Re: 1550 SMB IPS and TP troubles

G_W_Albrecht — Thu, 05 Dec 2019 15:52:51 GMT

Interestingly, my only R77.30 GW left shows a similar issue: Even after policy install, IPS shows that the GWs version is older than the current one. On the GW, ips stat shows the newest IPS version is installed. In Dashboard, even hours after policy install, still IPS update is shown as missing in the R77.30...