Why does the Sophos Central Firewall Management page reference google-analytics.com? In particular it's trying to retrieve analytics.js. This takes about 3 minutes to time out, during which I can't access logs. Please do not build your platform such that it depends on google components. I block many google sites specifically because google engages in and supports snooping, tracking, and so on.
I might be wrong about what's happening, but this is what I can determine via the web browser's built-in developer tools as I watch this slow-motion train wreck.