Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 38 subscribers
  • Views 1598 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG randomly classifies traffic as X-VPN - why?

rfcat_vk

Hi folks,

I know when this is issue started, but do not understand why?

There is another thread asking for assistance to block X-VPN which I added to my block list because it was bypassing  the block VPN and tunnel filters.

The device affected is my solar Power inverter which regularly (many times a day) with a central reporting server. Randomly one to two transactions a day are marked as X-VPN.

The inverter has even on the network since it was installed in 2019, the traffic marked as X-VPN is allowed through the firewall with over 300 packets received and some sent.

The firewall rule used by the inverter does not have any application or web policies applied - allow all, no decrypt and scan. The rule has LAN to WAN IPS.

So what is wrong with the classification process?

Ian



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to emmosophos

    Hi Emmanuel,

    the issue is random and it is not every connection. Trying to packet capture would be very frustrating because it might happen twice a day.

    At the moment trying to investigate issues is difficult, my ISP/RSP had the network off for an hour while migrating to new DHCP infrastructure and the XG is not behaving in a friendly manner even after a restart. Working with the ISP/RSP to investigate what has failed in the their network.

    Ian

    currently unclassified according to yesterday's daily repot.

    XG115W - v20 GA - Home

    XG on VM 8 - v20 GA

    If a post solves your question please use the 'Verify Answer' button.

  • 0 in reply to rfcat_vk

    At this stage I can't perform any testing, my internet link is partially broken and I along number of others are waiting for the repair.

    Ian

    XG115W - v20 GA - Home

    XG on VM 8 - v20 GA

    If a post solves your question please use the 'Verify Answer' button.

  • 0 in reply to rfcat_vk

    Hello Ian,

    Thank you for the update.

    Regards,

     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support Videos | Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
Unfiltered HTML