Unable to Register XGS4300 To Sophos Cloud

Check /log/heartbeatd.log 

What should I be looking for specifically in there?  Also is there a preferred way to open it? It looks like it's empty

Hi Online NeonSky 

Suspecting an issue with the firmware you are running on Sophos XG

Please Go to System-->Admininstration --->Backup and Firmware -->Firmware and share the status of the firmware shown on GUI

Regards

Hi Bharat,

Please see the below:

Interestingly when checking for new firmware, this also fails.

Hello NeonSky,

Thank you for reaching out to the community, please refer the following useful KB articles below:

1.) Use the super admin credentials to register with Sophos Central: https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/SophosCentral/HowToArticles/CentralManageXG/index.html

2.) Use OTP to register with Sophos Central: https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/SophosCentral/HowToArticles/CentralRegisterOTP/index.html

3.) Log file details: https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Logs/LogFileDetails/index.html
To check the logs related to centrla
==================
Command lines:
Status: central-register --status
Register: central-register --unregister
Backend Register: /bin/central-register --register -u *EMAIL_OF_CENTRAL_ACC* -p *PASSWORD_OF_CENTRAL_ACC* -s *SERIALNUMBER_OF_XG*

====================
Under the centralmanagement.log see if the sophos urls is able to resolve through your ISP ?
====================
Check the service SSOD via cmd: service -S | grep ssod 
is running or not ?

Hi,

Thanks for the response.

No luck with backend registration either + verified I was doing the other two methods correctly as per the KB.

In centralmanagement.log, looks like it's not resolving due to an SSL verification error?

Also below is output of the service:

Here are my SSL rule settings:

Yup NeonSky that's right utm.cloud.sophos.com fails can you try the registration process with another ISP ? 

Hi,

Not sure I can unfortunately.  Unsure as how this is working perfectly well in other areas of the office but not resolving here only.

To give a bit of background, I have just connected this at the bottom of the chain if you like so as not to disrupt any of the existing network architecture until it is set up properly and ready to be put in out-of-hours.

Basically this is plugged from a switch port into port 2 which is bridged to port 4 which has a laptop plugged in.  Laptop gets an ip via DCHP and has full internet access when plugged in this way so not sure what to make of that.

Do I have other options?

Thanks,

Joe

what is the current status of time and valid license on Sophos XG ?

Please Go to System-->Admininstration --->Licensing | Time 

Are able to view Device on https://id.sophos.com ?

Regards

Please find this info:

Time is correct and matches where I'm sat.

I can't see it on https://id.sophos.com/