Moving RED15 between UTM and XG

Hi DuncanNewell,

Thank you for reaching out to Sophos Community.

Could you please check red.log events in shell and share session output here or in PM?

utm:/root # tail -f /var/log/red.log

or

utm:/root # tail -f /var/log/red.log | grep -i "RED_Serial_Number"

Did you try with a new unlock code?

Hi DuncanNewell,

Thank you for reaching out to Sophos Community.

Could you please check red.log events in shell and share session output here or in PM?

utm:/root # tail -f /var/log/red.log

or

utm:/root # tail -f /var/log/red.log | grep -i "RED_Serial_Number"

Did you try with a new unlock code?

Hi,

I have tried both them commands and nothing shows in the UTM logs for that device. 

For info I turned the RED device OFF on XG then re enabled it on UTM - note that other untouched devices are still working fine on UTM.   Checked the logs for past 30mins and nothing shows, if I re enable it on XG then it works fine.

The question is should you be able to move a RED15 from UTM to XG and then back to UTM again ?

As a guess moving it to XG has done something to the RED15 stopping it from working on a XG again ?

I have not tried with a new unlock code, I was not sure if you could, and I didnt want to totally break the RED device.

Thanks

Hello Duncan,

Adding to what my co-worker Yash has mentioned, are you decommissioning the RED on the XG? 

Configuration >> System Services >> RED >> Automatic device deauthorization

You would also need to remove the configuration of the RED from the XG.

Regards,

I have deleted the RED from the XG and re setup on UTM,, but this has not worked, it still wont work on UTM.

Hello Duncan,

Are you seeing traffic arriving at the UTM from the Public IP where the RED is located?

You can try to do a TCPdump on the UTM

#tcpdump -eni PortX host x.x.x.x

(Where the X is the port of the WAN interface of the UTM and x.x.x.x is the Public IP where the RED is connected.

Regards,