To allow automatic installation of hotfixes in Sophos Firewall 20.0 and later, see the hotfix section under Sophos Firewall: System
This is also under console.
Showing posts with label Hotfix. Show all posts
Showing posts with label Hotfix. Show all posts
Thursday, July 24, 2025
Tuesday, March 29, 2022
Sophos Firewall: Verify if the hotfix for CVE-2022-1040 is applied on your Sophos XG firewall
Given the "Allow automatic installation of hotfixes" feature enabled (it is enabled by default). First come first is check this setting is it enabled.
Then, you need to verify the hotfix is it install by access the advanced shell by using SSH client remotely login your firewall or via console access
- Select "5" – Device Management
- Select "3" – Advanced Shell
- Enter the following command:
test -f /static/up_mode_json_stamp && echo "Hotfix is applied" || echo "Hotfix isn't applied"
If the hotfix is applied, the return is "Hotfix is applied"
Enter "Exit" to exit the shell mode.
Reference:
Accessing Command Line Console - Sophos Firewall
Sophos Firewall: Verify if the hotfix for CVE-2022-1040 is applied
Thursday, June 29, 2017
Check the build version and hotfix level of McAfee Endpoint Security (ENS) from registry
Go to the registry: HKEY_LOCAL_MACHINE\SOFTWARE\McAfee\Endpoint\AV , check the "BuildNumber"
The "BuildNumber" from registry also indicate the hotfix level of McAfee Endpoint Security:
Sunday, November 20, 2016
How to apply Windows hotfix, patch... on a Windows without connect to network which is running on VMware ESXi?
Section 1 – To allow copy and paste text between administrator computer and VM via vSphere client
1. Poweroff the Windows Server (VM)
2. Change the following configuration parameters to allow copy and paste “text” via vSphere client
Section 2 – Use MBSA standalone to check a MS server for patch status and also transfer file between administrator computer and VM via vSphere client by mount the ISO file
3. Download “Folder2Iso” (http://www.softpedia.com/get/CD-DVD-Tools/CD-DVD-Images-Utils/Folder2ISO.shtml)
4. Download MBSA 2.3 and related files:
a. Download Microsoft Baseline Security Analyzer 2.3 (for IT Professionals) - http://www.microsoft.com/en-us/download/details.aspx?id=7558&tduid=(4c7cdc0dd0c55c8a10d5e21f1173f9a1)(256380)(2459594)(TnL5HPStwNw-Vt9plCUUmDbMRMjz_kd1Lg)()
b. Download Security update catalog (wsusscn2.cab) from : go.microsoft.com/fwlink/?LinkId=76054
Remark: You need to keep using the latest one before run the offline scan
c. Windows Update Redistribution Catalogue (wuredist.cab) located at http://update.microsoft.com/redist/wuredist.cab
5. Use Folder2Iso to convert those MBSA 2.3 files into ISO
6. Power on the Windows Server (VM)
7. Mount the ISO via vSphere client
8. Copy file from virtual CD to the server and install MBSA 2.3
9. After the installation of MBSA complete, copy the wsusscn2.cab and wuredist.cab to “C:\Program Files\Microsoft Baseline Security Analyzer 2”
And then, go to command promote to run:
MBSACLI /xmlout /catalog “C:\Program Files\Microsoft Baseline Security Analyzer 2\wsusscn2.cab” /unicode >updates.xml
10. Open the “updates.xml” by notepad and copy all text inside
Remark: You need to make sure all line being copied. Since the line and content in the files (updates.xml) may over the limit of VMware vSphere client able to copy, you need to check your result in file size very carefully. (I copy all text by separate the file into different parts – I did not copy all line in one time)
11. Paste all text into a file which is on your machine and rename it to “updates.xml”
12. Download the “Getupdate.ps1” from https://deploywindows.info/2015/01/22/automate-mbsa-scan-and-download-missing-patches/ or
https://powershell.org/forums/topic/script-to-automate-mbsa-scan-and-download-missing-patches/
Modify the line 31, to remove the “#” and save the file to “Getupdate.ps1”
Copy the Run the “updates.xml” and “Getupdate.ps1” into the C:\temp and run the “Getupdate.ps1” under PowerShell to download all necessary hotfix, patch….
Remark: If you running the download from Windows 7 machine, you will need to upgrade your PowerShell verison 5 (By download and install Windows Management Framework 5.0 - https://www.microsoft.com/en-us/download/details.aspx?id=50395)
13. Use Folder2Iso to convert those hotfix, patch files into ISO file
14. Mount the ISO via vSphere client
15. Copy all files to C:\temp
16. Install those hotfix by run the “_install.bat”
Remark: If you are using Windows Server 2012 R2, you will need to do the following change of the “_install.bat”
Change "start /wait pkgmgr.exe /ip /m:" to "dism /online /Add-Package /PackagPath:C:\temp\"
Change "nostart" to "norestart"
Remove "/l:%SystemRoot%\Temp\*****.log"
17. You can go to “Programs and Features” – View installed updates to verify those hotfix, patch being installed:
18. Reboot the Server
19. Run the MBSA scan again until no missing patch have been found
Reference:
http://clintboessen.blogspot.hk/2009/11/perform-offline-mbsa-scan.html
http://www.breaknenter.org/2011/02/how-to-use-mbsa-standalone-to-check-a-ms-server-for-patch-status/
http://arnavsharma.net/windows-clients/understanding-mbsa-23-microsoft-baseline-security-analyzer
https://deploywindows.info/2015/01/22/automate-mbsa-scan-and-download-missing-patches/
Friday, July 1, 2016
McAfee VSE 8.8 with Patch 7 should consider to apply Hotfix1123565 (Post P7 - hotfix) - VSE88HF1123565
If you running VSE on Windows 64bits environment, you will able to check the hotfix is it installed by check the following registry:
You will find a registry like:
Reference:
Released Notes
Hotfix 11235
https://kc.mcafee.com/resources/sites/MCAFEE/content/live/PRODUCT_DOCUMENTATION/26000/PD26485/en_US/VSE_8_8_HF1123565_release_notes.pdf
Supported Upgrade Paths for McAfee Agent, VirusScan Enterprise, and Host Intrusion Prevention
https://kc.mcafee.com/corporate/index?page=content&id=KB87328
https://community.mcafee.com/thread/90284?start=0&tstart=0
Subscribe to:
Posts (Atom)