Firewall Filter Error [80320012]

Hi Anthony Stevens

What are the version of the Sophos Enterprise console and the endpoint installed? If you acknowledge the alert from the console, does it re-appear on the same machine? 

Hi,

We are currently on Sophos Enterprise Console version 5.5.2, Sophos Endpoint Security and Control 10.8 and the Client Firewall version is 3.0.6.

Also, if I acknowledge the alert on the Enterprise Console, it can re-appear on the same computer(s).

Kind Regards.

Hi Anthony Stevens

What is the status of the windows firewall on working and the issue facing machine? Once you comply with the policy, acknowledge the alert and then reboot the machine and check if it is still showing the same error under the firewall logs. 

Hi,

With the firewall status, it is set to being Off when connected through the VPN because our corporate firewall takes over and then the firewall shows being enabled, when off the VPN. This is expected behaviour for us.

I've complied the Group Firewall Policy on some of the affected computers. I won't be able to restart them myself as the computers are off site, but I have made a note of the computers being tested. The errors have occurred at random intervals, so I'll keep an eye on the situation.

Kind Regards.

Hi Shweta.

Apologies for the late response back. I compiled the Group Firewall Policy for the original computers affected, made sure that the computer restarted and unfortunately at least 1-2 of them have come back with the same error.

Is there anything else that I can look for with these errors if that happens please?

Kind Regards.

Hi Anthony Stevens

In that case, we will require an in-depth investigation by opening a support case along with client firewall logs. Please PM me the case number once done.