Sophos Central : SD-WAN Connection Groups not deleting

Question

The deletion of a connection is still pending since a few days ( even after full reboot of all systems )

No pending task , failed transactions or skipped transaction linked to this group deletion.
No residual configuration found on the Firewalls.

Any idea how to get rid of this pending deletion ?

Thanks in advance,
Danny

Erick Jan · Answer

Hi Danny, 
 Thank you for reaching out to Sophos Community. 
 Have you tried to use any how-to videos, documentation, Sophos Assistant, or KBA to try to check the issue? 
 Can you try to de-register the Sophos Firewall and then re-register it again? 
 In case, after re-registering the firewall, the issue persists, we&rsquo;ll need to collect central management logs, SSOD logs, and Sophos central logs. 
 I would advise you to reach out to Sophos Support to create a case# and kindly share it here with us to further monitor.

DavidSain · Answer

In this scenario, I wouldn't de register/register. Easier to simply disable Sophos Central Services and enable again. First, make sure you enable WAN login from your IP and login directly to the firewall. Once you turn it back on, paste in token, accept services in central and it's removed from the SD-WAN group and if it's hanging up an SD-WAN group deletion, then that will proceed normally.

BrucekConvergent · Answer

I had this happen to a customer; nothing they did would remove the pending item. It went away on its own after a while (apparently Sophos said 2 weeks I think)... basically cosmetic. They pulled all kinds of logs, don't know if they found a root cause or not.