Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 37 subscribers
  • Views 405 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG430 SFOS 17.5.15 MR 15 sending mails backdated as far as 4 years ago.

Andrew Ding

Hi Guys,

Just wanted to check with the community, whether anyone has faced such an issue before.

Recently my secondary firewall (HA-Active-Active) went into "Fail Safe" mode and support suggested me to perform a factory reset.

Upon factory reset, the unit was able to boot up successfully and we successfully rejoined the unit back to HA configuration.

The strange part here was about 5 hours later, we began receiving back dated information (Weekly backups, HA status failures email, test emails quarantined from an old deployment between few days to few years back) from the firewall. This only happened 1 cycle, about 20 emails went out and we noticed about 20 more mails being queued but so far after 3 days the emails have remained queued.

Note that i have no email subscription license on this device.

Possible bug?



This thread was automatically locked due to age.
Parents
  • 0

    Hello Andrew,

    Thank you for contacting the Sophos Community.

    Most likely one of the processes was stuck, I have seen for example if you shutdown your XG today, and the reports haven't been sent for that day, and you start your XG one week later you’ll receive the reports via email for that day (the day you shutdown the XG) on the day you turn on the XG again.

    This is because of the process that didn't run before the appliance was shut down. 

    However, if you need an RCA for this specific event you would need to open a Case with Support to get this investigated.

    Regards,

     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support Videos | Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
Reply
  • 0

    Hello Andrew,

    Thank you for contacting the Sophos Community.

    Most likely one of the processes was stuck, I have seen for example if you shutdown your XG today, and the reports haven't been sent for that day, and you start your XG one week later you’ll receive the reports via email for that day (the day you shutdown the XG) on the day you turn on the XG again.

    This is because of the process that didn't run before the appliance was shut down. 

    However, if you need an RCA for this specific event you would need to open a Case with Support to get this investigated.

    Regards,

     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support Videos | Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
Children
No Data
Unfiltered HTML