Policy Manager [on linux] 13.11 --> 14.20 => all [linux] nodes lost their Internet connection

yesterday I upgraded the Policy Manager to 14.20 from 13.11. After it ALL computers in the Domain tree lost their Internet connection.

I noticed in the Advanced view under F-Secure / F-Secure Linux Security (11.x hosts only) 11.10 / Settings / Firewall neither Rules nor Services are NOT inherited from neither parent nor the Root. So my own added Services and Rules disappeared from all Linux node.

Moreover I tried to turn off the Firewall (Settings / Firewall / Firewall enabled = No) to get back the Internet connection on all nodes but it didn't help.
Firewall (iptables rules) still working and blocks almost everything. I have to run this command in "screen" to keep our servers working:

while true ; do sleep 2s ; iptables -I INPUT -j ACCEPT ; iptables -I OUTPUT -j ACCEPT ; done


Moreover I can't click on the F-Secure Linux Security (11.x hosts only) 11.10 / Settings / Firewall / Rules. Actually I can click on but PM doesn't show anything!
I just can see an empty area.

 

I had to upgrade the database after I installed 14.20 (dpkg -i  fspms_14.20.88937_amd64.deb). Due to this upgrading I'm not sure...is there any chance to switch back to 13.11 (fspms_13.11.84108_amd64.deb) ?

Best Answer

Comments

  • jameschjamesch Posts: 159 Moderator

    Hi Jonci

     

    I will check with the relevant team and update you as soon as I hear back from them.

    jonci
  • Yesterday evening I tried to downgrade back to 13.11 and I could restore the DB from the backup.

    It worked well Smiley Happy

     

    Sorry, I didn't notice the hotfix section when I downloaded the 14.20 installer last week. Thank you for bringing this to my attention. Let me try this tonight. Lots of people use one of the servers what was affected and I don't want to disturn them during work hours.

    A-Grinkevitch
  • Hi Alex,

     

    I upgrade the Policy Manager again to 14.20 from 13.11 but this time I applied the Hostfix on both side (PM Server and Console) and now the problem didn't come up.

     

    It seems I just would have had to notice and download the Hotfix when I downloaded the deb packages but unfortunately this text is inconspicuous besides the lots of big blue buttons, what keep the attention away from Hotfix section.

     

    Sorry for the "false" alarm.

     

    Regards,

    jonci

  • A-GrinkevitchA-Grinkevitch Posts: 162 F-Secure Employee

    Hi jonci,

     

    Thank you for the update! Glad that your problem is resolved!

     

    Alex

     

    Laksh
This discussion has been closed.