XG Firewall v18 MR-3: Feedback and experiences

Hi guys, anyone having issues with stability? VPN users reporting connection issues, web admin portal unusable, I even could not restart the router (XG125). So I had to do a hard unplug reset. I was waiting with V18 for at least MR3. Because let's be honest, quality of XG firmwares is going downhill pretty badly. And still v18 MR3 was too soon :-/ If this happens again, I will roll back to v17.

XG was basically dead, no web admin, no ssh, so I cannot provide any more info. Routing, wan connectivity was ok though.

I just had my XG106 MR-3 freeze up where I had to unplug it and plug it back in. It froze in the middle of the night and nothing in the logs that was unusual.  I honestly never had to do this before with any of my Sophos firewalls.  It's been on MR-3 for a week I think. 

Hello Ben,

Do you see any gap in the logs for csc.log, applog.log, syslog.log, networkd.log when this happened?

Also do you see a gap in Memory or CPU graph, when this issue was happening?

Regards,

Hi, I beleive I do have the same issue. As far as I can tell csc, applog have no unusuall gaps, but syslog has 5hours gap the night before the crash.

RAM was at 60% all the time, but the morning before crash I had CPU spikes to 100% which probably caused the web admin not responding.

Thanks for the reply.  I wasn't sure what I should check next to determine what happened.

CPU and Memory both flat line at the same times of the outage.  Memory had a spike from 52% to 81% at 22:50.  My backup is set to run at Sunday at 00:00 and I did receive the backup in an email at 12:02 am.

app.log has a gap 

Nov 01 22:45:10 Checking new IPs of fqdn for mta
Nov 02 11:13:20 prepare_virtual_app_setup: Syncing network interface.

csc.log has a gap

MESSAGE Nov 01 22:45:29 [worker:16734]: {"request":{"method":"nopcode","name":"u2d_dr_installer","version":"1.2","type":"text","length":0}}
mount: /_conf/csc: Invalid argument
MESSAGE Nov 02 11:13:15 [csc:992]: Restricted context is initialized successfully

networkd.log has nothing?

INFO ; Oct 27 09:28:43 ; ADMIN ; ND_MAIN ; sending reply: -1;
ERROR ; Nov 02 11:14:47 ; ADMIN ; ND_MAIN ; string is null;

syslog has a gap

Nov 2 23:59:03 (none) user.err kernel: [45963.307650] 774:appdev_release:dev open 0
Nov 3 00:00:04 (none) user.err kernel: [46024.515571] 729:appdev_open:dev open 0 1f

Check the vpnlog.log for any weird lines,  I have the filling, that the issue is vpn related, same as first release

• NC-56732 [Firewall] Kernel panic after update to 18.0 GA due to SSLVPN.

Unfortunately, that is empty.  I don't use SSLVPN.  

Hello Ben,

Thank you for what about the Graphs, do you see any GAP in there?

Regards,

Hello Ben,

Thank you for what about the Graphs, do you see any GAP in there?

Regards,

Its a flat line at what looks to be zero so no gaps.