XG Firewall v18 MR-5: Feedback and experiences

Did you configure your SSMK in MR3 (Set the Secure Storage Master Key)? Seems like the database could not migrate the password.

Check the /log/migration.log for any migration errors after/while migration to MR5. 

any hints for what to check?

btw. the ldap connection is normaly without auth. the server with the auth was created while debugging.

Are you a business customer or Home user? It seems like the migration log cannot migrate a specific field in this config, which is empty. Hence the adding of the server fails (my initial assumption). 

You should:

Open a support case as a business customer.

Open a own thread in this community to get this analyzed as a home user.  

We should not discuss this in depth in such overview thread. 

business i will open an support case

thanks

I upgraded a few of our hardware firewalls this week-end. All were successful except 1. It failed to reboot successfully and never recovered. I have to power off and choose the previous firmware version from the boot loader. Looks like another very, very long phone call to support in my future.

All were upgrades from 18.0.4 to 18.0.5

Check the /log/migration.log for insights, why the appliance failed to migrate. 

This is the last part of the migration.log file. Any insight would be helpful as my call to Sophos tech support was just unbearable so I hung up. The tech support guy couldn't be understood and he had no idea what was going on let alone how to troubleshoot it. Sophos is getting worse by the day...

nvram_get failed with -16
Old version is 18.031 and currentversion is 18.033
Database is upgrading to dbv18.032
Check migration for version dbv18.032
Applying migration for version dbv18.032
remove_duplicate_entry
------------------------

(1 row)

1428 2021-04-11 18:06:52.029 GMTERROR: duplicate key value violates unique constraint "tblsnmpmanagerconf_unique"
1428 2021-04-11 18:06:52.029 GMTDETAIL: Key (name, source)=($sfos$7$0$qzkr8dY8fN8iFNZnBQxwZwVWEcjP3eWosu0jI9mUH8jurqO3F4hs6mN8A-Xuxo7ZnGlotijUUKtCnEXqzwWjzw~~A7Z7nfLA3FB43QmOHGuZfbH-zAgmeymS-rLVen2qeiE~, 192.168.70.88) already exists.
1428 2021-04-11 18:06:52.029 GMTSTATEMENT: update tblsnmpmanagerconf set name=$1
DBD::Pg::st execute failed: ERROR: duplicate key value violates unique constraint "tblsnmpmanagerconf_unique"
DETAIL: Key (name, source)=($sfos$7$0$qzkr8dY8fN8iFNZnBQxwZwVWEcjP3eWosu0jI9mUH8jurqO3F4hs6mN8A-Xuxo7ZnGlotijUUKtCnEXqzwWjzw~~A7Z7nfLA3FB43QmOHGuZfbH-zAgmeymS-rLVen2qeiE~, 192.168.70.88) already exists. at /_conf//DB/migratesecuredata.pl line 279.
DBD::Pg::st execute failed: ERROR: duplicate key value violates unique constraint "tblsnmpmanagerconf_unique"
DETAIL: Key (name, source)=($sfos$7$0$qzkr8dY8fN8iFNZnBQxwZwVWEcjP3eWosu0jI9mUH8jurqO3F4hs6mN8A-Xuxo7ZnGlotijUUKtCnEXqzwWjzw~~A7Z7nfLA3FB43QmOHGuZfbH-zAgmeymS-rLVen2qeiE~, 192.168.70.88) already exists. at /_conf//DB/migratesecuredata.pl line 279.
Issuing rollback() due to DESTROY without explicit disconnect() of DBD::Pg::db handle dbname=corporate; at /_conf//DB/migratesecuredata.pl line 279.
Secure password migration Failed
UPDATE 1
Stopping database
438 2021-04-11 18:06:53.699 GMTLOG: received fast shutdown request
438 2021-04-11 18:06:53.699 GMTLOG: aborting any active transactions
441 2021-04-11 18:06:53.700 GMTLOG: shutting down
441 2021-04-11 18:06:53.800 GMTLOG: database system is shut down
Sun Apr 11 15:06:54 ADT 2021 : Database stopped after 1 seconds
applymigration.sh exited with 1
Sun Apr 11 19:07:08 BST 2021: Before mountconf unmount

Delete your SNMP Traps and redo it. Seems to be a known bug, which is currently under investigation. Related to the duplicated SNMP Entries. 

Hello,

Just to add to Luca comment, the ID for this issue is being troubleshot under NC-71491

Could you please share the Case ID you have open with support?

Regards,

I have been doing some testing on my home edition, so I cannot log a ticket, but this update has broken HA (Active-Passive);

to clarify my setup & testing performed so far.

I have a VMWare v6.7 with XG running on MR5 (previously I had this running without issue on MR4, it is only when I upgraded to MR5 did I get this issue).

to connect to FTTC, I have a router/modem set to bridge mode (PPPoE PassThru)

Initially I upgraded to MR5, and found that the upgrade on on of the unit did not initiate and update/reboot to the MR5 (a little disappointed).

then to update to MR5,

• I disabled HA
• booted using MR5 on Primary.
• then booted the secondary unit to MR5
• checked config was correct for both units, and tried to configure HA (Active-Passive) using the quick mode - this would not connect.
• then tried interactive mode - this worked - I thought it was just an oversight on my part.
• problem is that I had no internet connection

I checked my network connections and all was correct except for the internet connection.

I assumed that it was the router/modem causing the issue, I then went about getting another router  updated and configured, testing before hand to check that it did indeed connect to the internet via FTTC, I go this setup, abut still no connection.

I now turned to the XG HA setup, disabled HA and voila within seconds, it all connected and i could access the internet.

I can replicate this every time, without issue.

I have even gone through creating new VMs and this same experience happens so it is not down to a configuration issue on my VMs.

if anyone can help me fix the issue I would be very grateful, or if you need to use my system to gather the logs to identify the issue I would also be willing to help.

I hope this provides some info.