Last Thursday I installed a new XGS136 to replace the previous XG135. As far as I could tell, everything went without a hitch. Unfortunately, something is not working properly with the licensing. I can't get a subscription activated.
We use Xstream Protection bundle with email protection and web server protection. Our location is Germany. The firmware used is SFOS 19.0.0 GA-Build317.
The registration went smoothly and adding the licences did not cause any errors. Unfortunately, the subscriptions could not be set to active via synchronisation.The device is displayed correctly in the "mySophos" portal but the licences are all set to "pending". This status did not change even after one day. I opened a ticket with the dealer. He said that Sophos can see the licences as activated. However, if I click on "synchronise", the firewall reports a successful connection to the server but the licences are not activated.
I also noticed the following. When I log on to mySophos, I end up on a German-language server and the licences are marked as "pending". If I click on the firewall under System -> Administration -> Activate licences on Evaluations, I am directed to an English-language server and all licences are marked as active there.
It seems to me that Sophos has a synchronisation problem. Unfortunately, I don't know what to do. Currently, only the packet filter is running and I urgently need help.
best regardsRonald
Hello Ronald Zestermann ,Thank you for reaching out to the community, Can you please share screenshot of Licensing page [Administration > Licensing] And also a screenshot from the licensing account [id.sophos.com > mysophos > Network Protection > view devices]
Thanks & Regards,_______________________________________________________________
Vivek Jagad | Technical Account Manager 3 | Cyber Security Evolved
Sophos Community | Product Documentation | Sophos Techvids | SMSIf a post solves your question please use the 'Verify Answer' button.
Hello Vivek,
This is from the German-language mySophos portal:
This is from the English-language mySophos portal taken last Friday:
My dealer advised me to transfer the device to another Sophos ID. This I did last Friday. In the meantime, the licenses are now also set to "pending" in the English-language portal. This is now from today:
This is also from today:
Best regards
Ronald
This is a Sales problem. Sometimes, the license will be replaced and the new start date is in the future. If you cannot book it yourself, contact your partner/Sophos Sales to get a trial for 7 days.
I am certain, it is this problem.
__________________________________________________________________________________________________________________
Hey Ronald Zestermann, under the cd /content/licensing/#ls are you able to see this two files ? lic_csr.key lic_csr.pem=================================I performed a test in my appliance: We can remove them #rm lic_csr.*=================================SFVUNL_SO01_SFOS 18.5.4 MR-4-Build418# cd /content/licensing/SFVUNL_SO01_SFOS 18.5.4 MR-4-Build418# lslic_csr.key lic_csr.pemSFVUNL_SO01_SFOS 18.5.4 MR-4-Build418# rm lic_csr.*SFVUNL_SO01_SFOS 18.5.4 MR-4-Build418# lsAfter this you can perform a synchronize option from Administration > licensing SFVUNL_SO01_SFOS 18.5.4 MR-4-Build418# lslic_csr.key lic_csr.pem========================================
For each extended function I get the following message in the web interface of the XGS136 (the Networkprotection is only exemplary here)
"This function requires a subscription. It can be configured, but is only enabled with a valid network protection subscription."
best regards
Hey Ronald Zestermann I agree with LuCar Toni I would request you to contact sales or customer care once !!
Yes, the two files exist and I have deleted them. After synchronization both files were created again.
You were both right. I just looked under /log/applog.log:
Nov 21 13:42:53Z REG STATUS :Inactive###Xstream Protection###L0010319350###2022-11-28###2025-11-27###Purchased
Nov 21 13:42:53Z MODULE :web
Nov 21 13:42:53Z apiInterface:: Deleting Entity and Event for legacy mode base operation
Nov 21 13:42:53Z MODULE :email
Nov 21 13:42:53Z Request type = 1
Nov 21 13:42:53Z apiInterface:versionsupported: true.
Nov 21 13:42:53Z REG STATUS :Inactive###Email Protection###L0010319350###2022-11-28###2025-11-27###Purchased
Nov 21 13:42:53Z MODULE :waf
The licence is actually only valid from 28.11.22. This is unbelievable, because the dealer puts me off by saying that I should wait until Sophos has a solution. I am really pissed off.
Many thanks to both of you.
Sophos Sales can start a Trial for this short period of time to cover your time.
The other solution would be to cancle the order and get a new license, but this seems to be much more complicated.
My dealer has just contacted me and told me that Sophos cannot issue a trial licence. Here is the statement from Sophos:"we cannot issue an eval for this case. It is not possible because there is already a license activated for this serial number. "
This is a bad joke. This is how customers are left standing? Is that really how it is, Sophos?
No that is not correct. Sophos can book a Trial on any existing Firewall Appliances. This statement is correct for Central. There you cannot start a trial for such scenario. Maybe there was a misunderstanding.
Short update: I contacted Sales-Sophos yesterday and asked for a trail licence. Yesterday evening, my dealer contacted me and told me that Sophos had issued the trail licence. The XGS136 is now cleanly licensed and everything is working fine.
Many thanks to both of you. Many thanks also to Sophos.