Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG210 crashed today

Hello,

The XG210 of my Custommer crashed today at 8:50AM, we were not able to ping the LAN IP or the WAN IP.

The firmware version is 17.1 GA.

It came back after a manual reboot.

Once online again I saw in the "performance" tab that we had an anormal high number of sessions at 8h50 which I guess it's the cause why the firewall crashed.

I don't really know what can cause such a high number of sessions, in normal use the sessions number is between 300 and 600 on this firewall...

Any advice ?


I opened a case with the number: 8183274

 

Viken



This thread was automatically locked due to age.
Parents Reply Children
  • In that case, could you tell us the number of concurrent active users behind the XG Firewall and which modules are actively used for filtering the network traffic. 

    Alongside, PM me the syslog.log to investigate further. Finally, do you see high CPU and high memory utilisation on the XG device?

    Thanks,

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • Hello,

     

    I think the XG210 is oversized for the way it's used by the company. There are 40 users behind the XG210, and the XG210 is connected via SSL VPN SITE-TO-SITE on a XG125 and there are 10 users behind it. So there is 50 users max using the XG210. The license used is EnterpriseProtect. The modules activated are WebFilter and ApplicationFilter, IPS, STAS, Wireless Protection with 3 AP55. 

     

    The CPU and memory utilisation are very low on the XG210 device. The CPU is constantly less than 10% and memory constantly less than 35%.

     

    Where can I find the syslog.log and how can I transfer it ?

     

    Thank you.

    Viken

    XG Certified Architect

    Sophos Gold Partner - Reseller from Lyon, France

  • Refer to the following KB article for the log file information, https://community.sophos.com/kb/en-us/123185. You can copy the logs to the clipboard of set up putty to store the log lines in a text file. PM me these log lines and I will add my inputs.

    Thanks

    Sachin Gurung
    Team Lead | Sophos Technical Support
    Knowledge Base  |  @SophosSupport  |  Video tutorials
    Remember to like a post.  If a post (on a question thread) solves your question use the 'This helped me' link.

  • I sent you the logs via PM.

    Thanks.

    Viken

    XG Certified Architect

    Sophos Gold Partner - Reseller from Lyon, France