Where is logging for interface negotiation history?

In addition, use the command from advanced shell:

ethtool -r Port2

to force the negotiation to occur and see if the WAN interface goes down from the applog file.

Regards

I would suggest to check via across all logs in the first place: 

https://community.sophos.com/kb/en-us/132211 

grep 'timeframe' /log/*.log | less 

Or spice those command a little bit up and check, what is going on. 

I would suggest to check via across all logs in the first place: 

https://community.sophos.com/kb/en-us/132211 

grep 'timeframe' /log/*.log | less 

Or spice those command a little bit up and check, what is going on. 

Thanks for the replies, I will check on that - for some reason notification of replies to email is not working.  That's disappointing.

As well, I see every reply says to check the CLI.

Interesting - every other SMB firewall has this information in the GUI and does not require advanced knowledge of *nix to get simple information.  Duly noted for future reference.

I don't know what 'timeframe' is, or how to format it.

Can you advise?

(and as the customer has not been very helpful in providing evidence of this "flapping", I don't have a timeframe - so while I would love to narrow it down, I dont have that information)