Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 40 subscribers
  • Views 2690 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

BUG? Can't change Device Access Settings

ZLogistics

Hi!

 

We are migrating from UTM to XG using the migration tool. We generated the config and imported it into our spare SG.

We are now seeing an error when editing the local Service ACL in "Administration -> Device Access". We edited it before, but for some reason it now gives the error you can see below. I ommited the checkboxes for security reasons. The error comes up if we try to change any of the several checkboxes there.

Any ideas on why this is happening and how to solve it?
Thanks!



This thread was automatically locked due to age.
  • 0

    Any new info on this issue?  I'm having the same problem after I used migration assistant to convert my SG210 configuration to XG230.  I can't change any of the Device access settings.  It errors out and refreshes.

  • 0 in reply to errollm

    Update - I was able to change the Device Access information if I edit the Zone in Network | Zones, so achieved my initial goal of enabling HTTPS management on the WAN interface, but it would seem there is a bug related to the Device Access matrix when configuration is converted using Migration Assistant.

  • 0

    Anyone have more information on this issue?  I have the same problem after using migration Assistant.  I am unable to enable Client Authentication on a Zone due to this issue.  Even If i do it in the Zone and not Device Access I get "Cannot update Zone". I called Sophos and their answer was to reload SFOS and start all over again.  This is simply not an option!!!  I used the Migration Assistant because the firewall config is so complicated and the device is in full production at this time.  There has to be a way around this issue, no??

  • FormerMember
    0 FormerMember in reply to errollm

    Hi errollm,

    Could you please PM me the support ticket number? I will update the thread with any additional information I can get for this issue.

    Thanks,

Unfiltered HTML