Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 3 replies
  • Subscribers 39 subscribers
  • Views 889 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

xg endpoint security heartbeat breaking

onward

XG330_WP02_SFOS 17.5.9 MR-9#

Example Central Endpoint:

Core Agent   2.5.5 BETA
Sophos Intercept X   2.0.16 BETA
Server Protection   10.8.6.215
     

 

Some of our Windows 2012 + 2016 servers just started cycling between green + red security heartbeat status in the XG control center "at risk" section beginning about an hour ago.   This is resulting in the XG blocking their traffic.  The problem could be with Endpoint client updates but it may just be coincidence that those are also logged.  Some are not reflected in Central and appear consistently green there.  Some seem to have settled down after rebooting them.   Others have broken Sophos services/updates logged we'll probably be able to fix through uninstall/reinstall.  Anyone have info or experiencing similar?



This thread was automatically locked due to age.
Parents
  • FormerMember
    +1 FormerMember

    Hi momentum,

    If your issue gets resolved by rebooting the workstation or uninstall/reinstall. I would suggest you to check the status of two important services on the workstations. 

    Sophos Health Service, which determines the health status of endpoint. 
    Sophos MCS Heartbeat, which provides communication with the firewall.

    In most cases if the SMC service cause this issue. 

    Thanks,

     

  • 0 in reply to FormerMember

    back to normal now after rebooting some and reinstalling others with various services missing.  happened at a couple different locations this afternoon.

Reply Children
  • FormerMember
    0 FormerMember in reply to onward

    Hi momentum,

    In most cases it is an endpoint issue and specifically with those services and the fix for the issue is reboot/uninstall|reinstall. I would suggest you to open a ticket with endpoint team to investigate the issue. 

    Thanks,

     

Unfiltered HTML