Sophos Firewall Communication to Sophos Central

Hello Randy Cleveland ,

Thank you for reaching out to the community, please refer Domains and ports to allow.

Hi,

Thank you for the link, but it hasn't helped much.

If all firewall communication occurs on port 443, then Spectrum can't be blocking that port, as web browsing on 443 from the clients at this site is working normally.

Spectrum re-booted the cable modem at this site, and that did not solve the issue.

I'm beginning to suspect an issue with FIOS 20.0.0 GA-Build222. 

We had another firewall (XGS107W) that we updated to FIOS 20.0.0 and the WiFi service stopped and would not restart without Sophos Support assistance.

I'm beginning to wonder if the service that communicates with Sophos Central has stopped working.

Hey Randy Cleveland ,

You can check the services status under the console> system diagnostics show subsystem-info

Ocassionally you will see such issues, that Cental reports Firewalls disconnected. Sometimes it is false positive. There have been waves of such issues.

What you did not write is, if the fiewalls were shown as disconnected in Central or if it was only the alert mail.

It's not a false positive.  The firewall has not contacted Sophos Central since the first notification on Monday morning.

Hi,

Thank you so much for that information. 

I haven't had to access the console until recently with the SSD firmware updates we neede to do to some of our firewalls.

Which service would I be looking for?  Most of then say RUNNING or UNTOUCHED.  The LoggingDaemon is in a STARTING state though.

And I am seeing in the System logs "The audit system has successfully shut down" over and over..

I have started a support ticket for the issue, since it appears to be an issue with the firewall itself.

We're seeing the same issue today.  Also very slow accessing Sophos Central and also issues with App Control blocking whitelisted apps.

Hello Randy Cleveland ,

Regret to hear you bumped into an issue. Could you let us know the caseID of your opened support case with us? 

Many thanks for your time and patience and thank you for choosing Sophos.

Regards,

Seems my answer lies in this post:

 Missing Firewalls on Central + Stopped Services 

Sophos Supoort has not officially replied to me with this solution, and they did not download the firewall logs in time to identify the root cause of the issue.