Report showing interface drops?

Hi Jeff Vandervoort,

Thank you for reaching out to Sophos Community.

You can filter out interface events from Reports > Compliance, Show: Events | System evenets

Select the date range as required and filter 'Event type' with Interface. 

Thanks, Yash! That's exactly what I needed.

I'm a bit puzzled, though...I have email notifications for outages that the report does not include. I set the report criteria exactly as you did, except the date range is one month. The report is missing several outages reported by email notifications across several days.

I guess you have received few gateway up/down events for said WAN interface.

Try filtering 'Event type' with gateway as well.

Yes, Gateway shows me all of the email notifications I've received. So I guess I was asking for the wrong thing. But why do Interface and Gateway show me different results?

Also puzzled that these drops are all about 20 seconds...yet they have a VOIP phone system that's in near-constant use, and I've not had any reports of dropped calls or not being able to get a dial tone. Any ideas on that?

Firewall generates gateway UP/Down events when the failover condition configured in IPv4 gateway(Under Interface > WAN link manager) fails. Interface UP/Down events are generated if the physical link goes UP-DOWN.

I would suggest checking the failover rule in IPv4 gateway. Change the default criteria and test ping/tcp connection with any external IP address(8.8.8.8/4.2.2.2/1.1.1.1) instead of the ISP gateway IP.

It's set to 1.1.1.1. The ISP gateway IP almost never goes down, even if the connection is down, so I always change that to ping external hosts. Also, there are no failovers associated with these notifications.

It's set to 1.1.1.1. The ISP gateway IP almost never goes down, even if the connection is down, so I always change that to ping external hosts. Also, there are no failovers associated with these notifications.