Do I need to worry about such messages in System Live Log?
Time,Log comp,Status,Username,Message,Message ID,
2024-02-02 10:38:53,Central Management ,,,Failed to send firewall information from device to CM,17918,
2024-02-02 09:53:52,Central Management ,,,Failed to send firewall information from device to CM,17918,
2024-02-02 07:38:36,Central Management ,,,Failed to send firewall information from device to CM,17918,
Nothing exceptional in the centralmanagement.log file though. That is pretty much the same in all lines.
XG430_WP02_SFOS 19.5.3 MR-3-Build652 HA-Primary# cat /log/centralmanagement.log |grep "02 06:38"
2024-02-02 06:38:12Z INFO central-connect[16260]:221 main:: - Polling for SSO to PIC-URI [https://utm-cloudstation-eu-central-1.prod.hydra.sophos.com]/sophos/api/v1/firewalls/C420xxxxxxxVQ0F/sshTunnel Timezone: Europe/Berlin
2024-02-02 06:38:12Z INFO central-connect[16260]:276 main:: - got response of poll for SSO. Status: disconnected backupExpected:
2024-02-02 06:38:42Z INFO central-connect[18852]:221 main:: - Polling for SSO to PIC-URI [https://utm-cloudstation-eu-central-1.prod.hydra.sophos.com]/sophos/api/v1/firewalls/C420xxxxxxxVQ0F/sshTunnel Timezone: Europe/Berlin
2024-02-02 06:38:45Z INFO central-connect[18852]:276 main:: - got response of poll for SSO. Status: disconnected backupExpected:
XG430_WP02_SFOS 19.5.3 MR-3-Build652 HA-Primary# cat /log/centralmanagement.log |grep "08:53"
2024-02-02 08:53:08Z INFO central-connect[18988]:221 main:: - Polling for SSO to PIC-URI [https://utm-cloudstation-eu-central-1.prod.hydra.sophos.com]/sophos/api/v1/firewalls/C420xxxxxxxVQ0F/sshTunnel Timezone: Europe/Berlin
2024-02-02 08:53:08Z INFO central-connect[18988]:276 main:: - got response of poll for SSO. Status: disconnected backupExpected:
2024-02-02 08:53:39Z INFO central-connect[22207]:221 main:: - Polling for SSO to PIC-URI [https://utm-cloudstation-eu-central-1.prod.hydra.sophos.com]/sophos/api/v1/firewalls/C420xxxxxxxVQ0F/sshTunnel Timezone: Europe/Berlin
2024-02-02 08:53:39Z INFO central-connect[22207]:276 main:: - got response of poll for SSO. Status: disconnected backupExpected:
XG430_WP02_SFOS 19.5.3 MR-3-Build652 HA-Primary# cat /log/centralmanagement.log |grep "09:38"
2024-02-02 09:38:26Z INFO central-connect[32580]:221 main:: - Polling for SSO to PIC-URI [https://utm-cloudstation-eu-central-1.prod.hydra.sophos.com]/sophos/api/v1/firewalls/C420xxxxxxxVQ0F/sshTunnel Timezone: Europe/Berlin
2024-02-02 09:38:26Z INFO central-connect[32580]:276 main:: - got response of poll for SSO. Status: disconnected backupExpected:
2024-02-02 09:38:57Z INFO central-connect[2985]:221 main:: - Polling for SSO to PIC-URI [https://utm-cloudstation-eu-central-1.prod.hydra.sophos.com]/sophos/api/v1/firewalls/C420xxxxxxxVQ0F/sshTunnel Timezone: Europe/Berlin
2024-02-02 09:38:57Z INFO central-connect[2985]:276 main:: - got response of poll for SSO. Status: disconnected backupExpected:
I assume this is an issue due to changing IP addresses of the loadbalanced FQDN utm-cloudstation-eu-central-1.prod.hydra.sophos.com
Hello LHerzog ,
Thank you for reaching out to the community, this is a known issue - NR-12091, currently under investigation.
Thanks & Regards,
_______________________________________________________________
Vivek Jagad | Team Lead, Technical Support, Global Customer Experience
Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.