Firewall Management - New Group - Import config from X not working?

Can you hoover over the ! to see the actual reason for failing? 

No as it dissapears and is nowhere to be found elsewhere, the groups report then fails "Either group is empty or group not found"??

Can you share screenshots of the group, you created? 

• Initializing configuration import
• Creating configurations in Sophos Central.
• Could not import the configuration from the selected firewall.

And you do not see any kind of popup, if you use the mouse to interact with those errors? 
Because usually, you should see a popup after hovering over this error. 

It looks like this:  Could not import the configuration from the selected firewall - Sophos Central  

Thanks ill look BRB

Thanks ill go from this i didnt know about b4

Shame its not more specific especially for last 2.

Can you PN me the serialnumber of this firewall and when you tried to create the Group? 

Not sure what group it is talking about for the 1st either???

So i was checking the Logs, i can access. The firewall uploads its .tar File (import/export) to Central. 
Central tries to understand it.
Sometimes it fails because there is a unexpected config. 

In your example: It could be the following:

1. Authentication Server --> Entra ID server has an invalid group filter? 
2. One of the DNS Host entries is not valid. Could be the case, it is fragmented? Is your firewall "older" in terms of config? 
3. One of your Local ACL Exception rules has a problem and is not understandable. 

When i see such errors, most of the time it is caused by some kind of special characters. 

So i was checking the Logs, i can access. The firewall uploads its .tar File (import/export) to Central. 
Central tries to understand it.
Sometimes it fails because there is a unexpected config. 

In your example: It could be the following:

1. Authentication Server --> Entra ID server has an invalid group filter? 
2. One of the DNS Host entries is not valid. Could be the case, it is fragmented? Is your firewall "older" in terms of config? 
3. One of your Local ACL Exception rules has a problem and is not understandable. 

When i see such errors, most of the time it is caused by some kind of special characters. 

Any way to see debug logs from central and Firewall group imports??

Only support will have access to those Logs. 
The Firewall will not have Logs, as it only send the full config. So Central Logs are the important component here. 

OK the last 2 i can workaround with trial and error but not so much the first error the AADSSO group??  I only have the default group for users plus the admin role group mappings as per the KB article 'adminrole' - Administrator, 'userrole' - HAProfile??