Possibility to disable the Automatic updates for 1100 and all SMB appliances

[Arun_R]

Dear Trem,

Is there is any possibilities to disable the Automatic Update of Antivirus, Anti-bot and IPS in SMB appliances.

Regards,

Arun.R

[PhoneBoy]

If you don't mind me asking, why?

And are these devices centrally managed or not?

[Arun_R]

Hi Dameon,

The client is facing some disk sizing issue on the 1180 appliance, whenever the blades starts getting update disk was completely utilised due to that TAC team suggest to test by disabling the blade.

But the client is refused it.

As its a complete sizing issue which TAC already confirmed with us but for testing we would like to disable the automatic update to observe the cause.

Its locally managed.

- Arun.R

[G_W_Albrecht]

Let us suppose these are locally managed, then i would say that before you can ask this question, you have to activate scheduled updates ! That is in WebGUI under Threat Prevention > Blade Control > Schedule updates link, here you can (de)select the blades for automatic update and choose an update time.

For centrally managed SMBs you have to use the Dashboard to configure Automatic Updates.

[Arun_R]

Hi Gunther,

Thanks for the assist, I will checked with the client.

- Arun.R

[G_W_Albrecht]

Remember - it is not a disk, but a flash ! I would suggest to refer to my article about Optimizing an IPS profile for SMB.

This can reduce used storage space, see also sk105217, sk107762, sk98606, sk128092 and sk126372 with a special firmware adding the option to Move temporary policy files to storage.

[Steffen_Appel]

Where do you disable the automatic updates for the SMB devices in the dashboard?

[PhoneBoy]

Just to circle back, there was a known issue with the AV/AB on 600/1100 appliances (namely, them being too large).

To solve the issue:

1. Update AB blade (Or make sure by logs that there was update with DB version 1806191748 or above) .
2. Reboot the device.
3. Enable back scheduled updates for AV (in case it turn off) – don’t need to run it manually.
4. Wait to the scheduled time and see if it AV update passes successfully.

Further corrective actions around this area are planned.