The firewall web admin is not accessible from the LAN.

Question

Verified that the firewall is accessible via ping on the LAN. 
 Successfully obtained SSH access to the firewall. 
 Enabled appliance access, but the firewall was still inaccessible. 
 Determined that the apache and reportdb services are dead on the firewall. 
 Observed that the disk utilization on the firewall is 100%. 
 
 The support engineer suggested trying to access the firewall by purging the reports. If the firewall is still inaccessible, a reimage will be necessary. 
 
 The data that is being lost through these processes is important to the client. They would like to avoid losing any data if possible. 
 Is it possible to run a FSCK reboot of the firewall instead of flushing reports or performing a reimage? or any method

Erick Jan · Accepted Answer

Hi, 
 Upon checking the case, the issue has been resolved by Flushing of Reports. 
 As per advised, kindly monitor the usage of /var partition to avoid the re-occurrence of the said event. To monitor the /var, access the firewall via SSH. Go to >>> 5. Device Management Then >>> 3. Advance Shell In advance shell, run the command: df -kh

Erick Jan · Answer

Hi Gustin, 
 Thank you for sharing the case ID. 
 Upon checking, your firmware version is still version 17.5. This version is already EOL. As the case handler has advised, kindly update your firmware version. 
 For additional information, kindly see below. 
 
 Sophos Firewall: Best practice for Sophos Firewall firmware upgrade

Erick Jan · Answer

Hi Gustin, 
 Thank you for reaching out to Sophos Community. 
 We regret to hear about your experience. If the logs are highly important, you may check 
 
 Sophos Central Management and Reporting 
 
 However, upon checking the closed case of 6971796. I would recommend creating another case to find out the Root cause of the issue. 
 As the case last update: 
 
 "As discussed the device is stable at the moment and due to unavailability of the logs we were not able to provide the RCA. Further we can't even keep the service for debug for longer period for the issue to re-occurs as it would consume disk and memory which might effects your device performance. As suggested we would appreciate if you could get us the console logs before rebooting the device which will help us to see if there is any kernel error which would lead to hardware problems. Also it would be best if you could give us call on the support line when the issue is live so that we would guide you on the logs required to check further."

The firewall web admin is not accessible from the LAN.

Top Replies