Scheduled maintenance on Saturday, August 8th from 7am to 10am (UTC). Licensing registrations and key activations will be unavailable during this period. More info here.
We'd love to hear about it! Click here to go to the product suggestion community
Hello.Im using the Home License of the XG Firewall
Every now and then,the admin portal does not load(sometimes just shows a blank white page and sometimes shows as "Internal Server Error"). The User portal also does not load(shows a blank white page).The captive portal loads but in-spite of entering correct credentials,the authentication fails.The ssh also fails to authenticate in-spite of entering correct username and password.However,the firewall is providing access to internet as usual.To solve this,i have to reboot the firewall everytime this occurs.
Firmware Version: SFOS 17.5.12 MR-12
Thank you for contacting the Sophos Community.
What are the specifications of the hardware where it is running?
In reply to emmosophos:
Intel i3 3220 ,8GB DDR3 Ram,3 Gigabit NIC's,500GB Hardrive.
is the firewall a member of any central management service like Sophos Central or Sophos Firewall Manager?
In reply to Ryan Partington:
No,its not a member of any central management service
In reply to ADVAIT GHAISAS:
we've had something similar but in addition traffic does slow down and sometimes halts altogether until we reboot. we thought we had spotted a pattern that it was for recent devices added to SFM, but maybe we're barking up the wrong tree and there is another general issue.
Oh. Thanks anyway!
Please collect the following logs when the issue happens again so we can take a look.
csc.log, applog.log, syslog.log, msync.log and networkd.log
If possible, memory and CPU graph from the XG (Monitor & Analize >> Diagnostics >> System Graphs).
Also next to the Firmware do you see anything like this MR-12.HF052220.1?
Uploaded the logs and graphs you asked.
Next to Firmware is see this: SFOS 17.5.12 MR-12.HF052220.1
Did you find anything in the logs?
I found some interesting logs in the u2d.log file.
Have a look.
--fwversion = 18.104.22.1681DEBUG Jun 08 01:30:02 : --productcode = CNDEBUG Jun 08 01:30:02 : --model = SF01VDEBUG Jun 08 01:30:02 : --vendor = SO01DEBUG Jun 08 01:30:02 : --pkg_sysupdate_version = 17DEBUG Jun 08 01:30:02 : Added new server : Host - ap-northeast-1.u2d.sophos.com., Port - 443DEBUG Jun 08 01:30:02 : Added new server : Host - eu-west-1.u2d.sophos.com., Port - 443DEBUG Jun 08 01:30:02 : Added new server : Host - us-west-2.u2d.sophos.com., Port - 443
DEBUG Jun 08 01:30:05 : Response code : 500DEBUG Jun 08 01:30:05 : Response body : <?xml version="1.0" encoding="iso-8859-1"?><!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "www.w3.org/.../xhtml1-transitional.dtd"><html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en"> <head> <title>500 - Internal Server Error</title> </head> <body> <h1>500 - Internal Server Error</h1> </body></html>
DEBUG Jun 08 01:30:05 : Response length : 369ERROR Jun 08 01:30:05 : Received invalid top level tag html, expecting Up2DateERROR Jun 08 01:30:05 : FATAL : Error in parsing response, exiting.
What time did the issue happen for the logs you sent? Was it on Jun 06 at around 7:49?
Yes i think it was around that time exactly.
It got fixed in the SFOS 18.0.1 MR-1-Build396.