This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

WAF stops processing requests

I have the same issue posted about here XG WAF stops working without error - Discussions - Sophos (XG) Firewall - Sophos Community. All WAF rules stop being processed seemingly random. This has been an issue since upgrading to v18.0.4. I am currently on 18.0.5 MR-5-Build586 an have experienced the same issue. The WAF stops responding, the service still runs, must stop WAF then Start WAF. Then all WAF rules are good again.

What was the outcome of the now closed thread? XG WAF stops working without error - Discussions - Sophos (XG) Firewall - Sophos Community

This thread was automatically locked due to age.

Top Replies

AADD over 2 years ago in reply to emmosophos +2

Awaiting responses from support, to get the older logs, or we must wait until the issue happens again to pull the reverseproxy logs while the issue is happening. Please keep this post open, I will reply…

Parents

0 emmosophos over 2 years ago

Hello there,

Thank you for contacting the Sophos Community.

The customer stopped responding to the case, so it went cold, however, there was a suspected ID attached to the case with ID NC-66112 unfortunately the customer also stopped responding.

If you are having issues with WAF, please open a support case and send me the Case ID so I can left a note there.

Please submit any output you have for

/var/cores

ATOP utilization

garner.log

reverseproxy.log

csc.log (debug mode csc custom debug)

error_log.log

syslog.log

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 emmosophos over 2 years ago

Hello there,

Thank you for contacting the Sophos Community.

The customer stopped responding to the case, so it went cold, however, there was a suspected ID attached to the case with ID NC-66112 unfortunately the customer also stopped responding.

If you are having issues with WAF, please open a support case and send me the Case ID so I can left a note there.

Please submit any output you have for

/var/cores

ATOP utilization

garner.log

reverseproxy.log

csc.log (debug mode csc custom debug)

error_log.log

syslog.log

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 AADD over 2 years ago in reply to emmosophos

Case: 04102921
Cancel
Vote Up +1 Vote Down

Cancel
0 emmosophos over 2 years ago in reply to AADD

Hello,

Thank you for the Case ID, I have left a note for the engineer to check your logs.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 AADD over 2 years ago in reply to emmosophos

Awaiting responses from support, to get the older logs, or we must wait until the issue happens again to pull the reverseproxy logs while the issue is happening. Please keep this post open, I will reply with the answer when we discover it.
Cancel
Vote Up +2 Vote Down

Cancel
0 AADD over 2 years ago in reply to AADD

Still working with support. The sporadic nature of the issue is making this a lengthy process. I will keep this post open until we have a solution or have identified the flaw.

If others have the same issue, please leave a comment.
Cancel
Vote Up +1 Vote Down

Cancel