Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 11 replies
  • Answers 1 answer
  • Subscribers 41 subscribers
  • Views 3003 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Could not import the configuration from the selected firewall - Sophos Central

apijnappels

Im a bit lost in this; see a lot of potential in managing the XG firewalls from Sophos Central (we also use it for Endpoint, wireless, encryption, etc).

Adding the XG to Central was easy, so was accepting. Then I tried to create a a firewall group and would like to import the config from the existing firewall. When choosing the firewall and clicking save the process starts. After some time it will give the message:

Could not import the configuration from the selected firewall. with a red exclamation mark in front of it.

I can however perfectly manage the firewall through Sophos Central so connection seems fine.

It may have something to do that at this moment the firewall I am configuring is still behind a UTM hence behind a NAT device and it may need to have some ports opened, however that imho would defeat partly the power of Central management.

How can I troubleshoot what goes wrong with this import?



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi ,

    Thank you for reaching out to the Community! 

    What is the firmware version on your firewall?

    I was able to take the configuration backup from the Central for the firewalls running with v18 MR4 and v17.5 MR14. These firewalls are behind the UTM. 

    I experienced the same issue as yours on v17.5 MR14, but it worked after I re-registered the firewall with the Central. 

    Thanks,

  • 0 in reply to FormerMember

    This is on V18.0.4 MR-4. Registering in Central was also done after upgrading to MR-4.

    Making a backup is not the problem, but when creating a group at the point "Select an initial configuration for your group. You can customize it later" when I choose to import from current config, than it runs for a while, it does create a handful of dynamic objects, but I suspect it fails halfway the proces.

    It also shows different then a group created with Sophos defaults (see screenshot):

    Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Reply
  • 0 in reply to FormerMember

    This is on V18.0.4 MR-4. Registering in Central was also done after upgrading to MR-4.

    Making a backup is not the problem, but when creating a group at the point "Select an initial configuration for your group. You can customize it later" when I choose to import from current config, than it runs for a while, it does create a handful of dynamic objects, but I suspect it fails halfway the proces.

    It also shows different then a group created with Sophos defaults (see screenshot):

    Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

Children
  • +1 in reply to apijnappels

    There are some bug IDs, currently under investigation, which could prevent the Import.

    Just to name some blockers in the Configuration:

    Do you use a WAF Rule? This could block the import. 

    Do you have a Zone under Device access, which does not have select "ANY" services? This will block the import. 

    Those issues will be fixed in a upcoming Central version. 

    __________________________________________________________________________________________________________________

  • 0 in reply to apijnappels

    How did you even get it to start the import on that screen on my central has the button for  Import existing configuration but then has a dropdown box that appears below it with nothing in it??   

  • 0 in reply to LuCar Toni

    import configuration is failing for me as well with error Web_ContentFilter > Policies. 

    What do i need to change on my content filters to get this to import?

Unfiltered HTML