Very Strange issue has anyone seen anything like this? - XGS RED 60

Also, check the issue with the below command : 

console> system ipsec-acceleration show

console> system ipsec-acceleration disable

Regards

Thanks for your time Lucar and Bharat.   Disabling ipsec-acceleration has fixed the problem.     Is this a bug Sophos need to look into?    

Hi Craig O'Hanlon 

All bugs and issues are fixed on the latest firmware version as per the below link ; 

https://community.sophos.com/sophos-xg-firewall/b/blog/posts/sophos-firewall-v19-mr1-re_2d00_release-build-365-is-now-available 

Regards 

hmm i'm running SFOS 19.0.1 MR-1-Build365

SG 115  Site 2 is Sophos UTM ?

yes that's on 9.711-5

Since how long has the RED 60 tunnel been working?

To find the root causing the issue troubleshoot is required by debugging logs with Sophos Support Team.

red.log syslog.log networkd.log 

Might RED require RMA as per the logs observed?

Thanks and Regards

Since how long has the RED 60 tunnel been working?

To find the root causing the issue troubleshoot is required by debugging logs with Sophos Support Team.

red.log syslog.log networkd.log 

Might RED require RMA as per the logs observed?

Thanks and Regards

This setup is new and the hardware RED 60 is new,  I replicated the issue with another new RED 60 so I don't think it's the RED hardware.   

I was wondering if anyone has a firewall with a /31 subnet and connected REDs successfully?         (I have another site with an XGS firewall and RED's on a  /29 subnet with no issues.)   

I'll have a look through the logs above and see what i can find. 

Hi Craig O'Hanlon 

Please share current firmware version running on Sophos XG under  System-->Admininstration --->Backup and Firmware -->Firmware

Regards

SFOS 19.0.1 MR-1-Build365

craig A said:

I was wondering if anyone has a firewall with a /31

Is it configured on Alias IP under Configure--->Network--> interface?

No Alias setup ,  it's a Static IP4 Physical Interface with gateway.  

craig A said:

I'll have a look through the logs above and see what i can find. 

Sure, it would be great if you raised the case with Sophos Support Team to investigate the issue further 

Regards

Hi Bharat,

i have seen a similar with RDP over UDP.

RDP from SC-RED20 Network to Server behind a IPSec connection results in RED-Blocking (in one direction only ... we can hear the telephone-RTP-Stream at one location) ... when RDP try to switch to UDP.

Configuring Firewall-rule to disable 3398UDP solved the problem within this environment.

I am willing to work with a L2/L3 engineer or a developer onto this problem ... but opening a support call .. Really??