Sophos XG Second Gateway

Could you change the Name of the Gateway a bit? Maybe "LAN" is to generic for the Gateway, because the configuration looks fine to me.

if not, go to the Advanced shell (Option 5 / 3) and check the applog while adding the Gateway.

less /log/applog.log   

Go to the bottom and recreate the gateway. 

Thank you for your quick Reply.

I tried naming it "Mike" (just for the fun of it), but unfortunately no Change.

from applog.log:

Apr 08 09:50:14 Request type = 1
Apr 08 09:50:14 apiInterface:versionsupported: true.
Apr 08 09:50:14 apiInterface:request mode -> 4301.
Apr 08 09:50:14 apiInterface:Current ver :::'1702.1'
Apr 08 09:50:14 apiInterface:entityjson::::::::network::gatewayobject=HASH(0xab73b00)
Apr 08 09:50:14 Info:: Transaction will not be rolled back for opcode add_gateway_object. If any operation fails, request is part of multiple request :
Apr 08 09:50:15 add_gateway_config failed
Apr 08 09:50:15 add_gateway_object Failed

You have to look at the more expand view of this log. 

Your part is only the "It does not work, so i will revert it" part. 

Look at the entries above this one. 

Dear Toni,

please excuse if I'm on the slow side here. But there is nothing in the log above relating to this.

I just performed the action twice for you to see:

Apr 08 19:11:59 Request type = 1
Apr 08 19:11:59 apiInterface:versionsupported: true.
Apr 08 19:11:59 apiInterface:request mode -> 4301.
Apr 08 19:11:59 apiInterface:Current ver :::'1702.1'
Apr 08 19:11:59 apiInterface:entityjson::::::::network::gatewayobject=HASH(0xab737e8)
Apr 08 19:11:59 Info:: Transaction will not be rolled back for opcode add_gateway_object. If any operation fails, request is part of multiple request :
Apr 08 19:11:59 add_gateway_config failed
Apr 08 19:11:59 add_gateway_object Failed
Apr 08 19:12:57 Request type = 1
Apr 08 19:12:57 apiInterface:versionsupported: true.
Apr 08 19:12:57 apiInterface:request mode -> 4301.
Apr 08 19:12:57 apiInterface:Current ver :::'1702.1'
Apr 08 19:12:57 apiInterface:entityjson::::::::network::gatewayobject=HASH(0xab737c8)
Apr 08 19:12:57 Info:: Transaction will not be rolled back for opcode add_gateway_object. If any operation fails, request is part of multiple request :
Apr 08 19:12:57 add_gateway_config failed
Apr 08 19:12:57 add_gateway_object Failed

Hope I'm not missing anything stupid.

Anyway to increase Log Level ?

You could take a look at the csc.log. There are plenty of information about the object called in your applog.log. 

Maybe you will find something there? 

from csc.log:

ERROR     Apr 10 15:10:40  [listener:1093]: worker 14062 killed
ERROR     Apr 10 15:10:40  [listener:1093]: csc_waitpid: pid(14062) exited with signal 9
ERROR     Apr 10 15:10:40  [listener:1093]: worker 14147 killed
CRITICAL  Apr 10 15:10:40  [worker:14147]: read_packet: read error 'Interrupted system call'
ERROR     Apr 10 15:10:40  [listener:1093]: csc_waitpid: pid(14147) exited with signal 9
ERROR     Apr 10 15:10:40  [listener:1093]: ln_recvfrom: fd '97.TCP.INET.auxilary': peer connection closed'Success'

 PAckage ::::network::gatewayobjectERROR     Apr 10 15:10:40  [listener:1093]: worker 14154 killed
CRITICAL  Apr 10 15:10:40  [worker:14154]: read_packet: read error 'Interrupted system call'
ERROR     Apr 10 15:10:40  [listener:1093]: csc_waitpid: pid(14154) exited with signal 9

No clue what this could tell me

You need to expand the view. 

Try to look at this one with more time frame. 

If you do a tailf applog.log 

Then create the object. Look at the same time, you press create, at the Putty. 

I copied some more from applog.log.

Apr 10 22:05:18
Graph[0]= policyconn , time[0]= hourly , Substrs[0]=NA
Apr 10 22:05:18
->input_string=policyconn,hourly,NA
Apr 10 22:06:12 Request type = 1
Apr 10 22:06:12 apiInterface:versionsupported: true.
Apr 10 22:06:12 apiInterface:request mode -> 4301.
Apr 10 22:06:12 apiInterface:Current ver :::'1702.1'
Apr 10 22:06:12 apiInterface:entityjson::::::::network::gatewayobject=HASH(0xa267988)
Apr 10 22:06:12 Info:: Transaction will not be rolled back for opcode add_gateway_object. If any operation fails, request is part of multiple request :
Apr 10 22:06:12 add_gateway_config failed
Apr 10 22:06:12 add_gateway_object Failed

From my point of view only the 22:06 lines relate to my "Create Gateway" Action.

Unfortunately I can't get any reason why the create fails.

Btw. Upgraded to SFOS 17.5.11 MR-11 , but makes no difference

After Upgrading to SFOS 17.5.11 MR-11 the Web Management can no longer display the Configuration/Network Page. "Check your network Connection".

Downgrading to SFOS 17.5.11 MR-10 the page is displayed again.

After Upgrading to SFOS 17.5.11 MR-11 the Web Management can no longer display the Configuration/Network Page. "Check your network Connection".

Downgrading to SFOS 17.5.11 MR-10 the page is displayed again.

Hi Mike72,

did you try clearing the cache after the upgrade?

Ian

Hi rfcat_vk,

thanks for the hint.

Back on (SFOS 17.5.11 MR-11).

P.S.: For everybody moving back and forth make shure to Upload the new Firmware again. Otherwise the config won't get migrated from the previous version.

Might cause some nasty suprises if you changed config on the old image in the meantime.

Hi Guys, somehow I managed to solve it by accident.

I was able to create the Gateway by supplying a NAT Rule (MASQ).

Once the Gateway was created I was able to switch it to no NAT Rule.

Works now. Thanks for your help.

Have a great easter holiday & stay safe