OTP Issues with several users

Not sure but I have also the feeling the issue exists since iOS 16.7 update. Anyone maybe has the same issues with OTP on iOS?

I can confirm that we see it earlier as well. But we got a massive issue after updating to 20.0.2. Are you running a cluster of firewalls? One hint of the support was to do a manual sync of the auxiliary device before doing an update or reboot. Another suggestion is to use a backup of the firewall from the time before the update.

Yes, we have cluster.
Would be cool if Sophos simply fix the bug ;-)

does it happen when the cluster Primary Node changes?

i do not know, but yes I think so. We saw the issue earlier but only for single users, so we could not see a relation to a cluster failover or an update of the firewall. But the last time we updated the firewall, many users reported that they could not login to VPN because the OTP was broken.

and did you notice the Primary node has changed after the upgrade? e.g. when you have no preferred Primary node.

There is also an issue with heartbeat - computers powered on but no longer sending heartbeat are stored as bad computers in the database but of the primary node only. They do not sync it. I wonder if this is the case here too.

The primayry node did not change, because we have a preferred primary. But during the update, the first primary will sync with the previous auxiliary after the reboot. And if the auxiliary is not in sync with some tables, then you get the problems.

The primayry node did not change, because we have a preferred primary. But during the update, the first primary will sync with the previous auxiliary after the reboot. And if the auxiliary is not in sync with some tables, then you get the problems.