Sophos Central : SD-WAN Connection Groups not deleting

The deletion of a connection is still pending since a few days ( even after full reboot of all systems )



No pending task , failed transactions or skipped transaction linked to this group deletion.
No residual configuration found on the Firewalls.

Any idea how to get rid of this pending deletion ?

Thanks in advance,
Danny

  • Hi Danny,

    Thank you for reaching out to Sophos Community.

    Have you tried to use any how-to videos, documentation, Sophos Assistant, or KBA to try to check the issue?

    Can you try to de-register the Sophos Firewall and then re-register it again?

    In case, after re-registering the firewall, the issue persists, we’ll need to collect central management logs, SSOD logs, and Sophos central logs. 

    I would advise you to reach out to Sophos Support to create a case# and kindly share it here with us to further monitor. 

    Erick Jan
    Community Support Engineer | Sophos Technical Support
    Sophos Support Videos Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.

  • In this scenario, I wouldn't de register/register.  Easier to simply disable Sophos Central Services and enable again. First, make sure you enable WAN login from your IP and login directly to the firewall.  Once you turn it back on, paste in token, accept services in central and it's removed from the SD-WAN group and if it's hanging up an SD-WAN group deletion, then that will proceed normally.

    Sophos Firewall Engineer 16.0-20.0
    Sophos Firewall Architect 18.0-20.0
    Sophos Firewall Technician 18.0-20.0
    Sophos Central & Endpoint Architect 3.0-4.0
    Sophos Central Email v2.0
    Sophos Mobile v9.6
    Sophos ZTNA 1.0, 2.0
    Synchronized Security Accredited
    Sophos Gold Partner

  • I had this happen to a customer; nothing they did would remove the pending item.  It went away on its own after a while (apparently Sophos said 2 weeks I think)... basically cosmetic.  They pulled all kinds of logs, don't know if they found a root cause or not.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Sophos Platinum Partner

    --------------------------------------

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.