Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Sophos XG firewall frequently reboots/appliance restarts unexpectedly

Hi, I am trying to understand the root cause of my Sophos XG 20.0 MR3 appliance restarting on average of 1-2 times a week.



SYMPTOMS:

  • Multiple devices lose connectivity to the gateway (the appliance) at the same time - pings do not respond for about 20 seconds.
  • System log in the Admin UI shows an event "Appliance started successfully.
  • Can happen minutes or days apart.  The only predictable thing is the 1-2 times a day.
  • Seem like it was happening occasionally on both 19.5 and 20.0 MR1.  Seems more pronounced recently.  Maybe I am just getting better at detecting it vs thinking it was WiFi interference.

OBSERVATIONS:

  • No common pattern that I can see in the log entries that precede the "Appliance started successfully" messages.
  • No warning or higher logs on my syslog output.

RESEARCHING Similar

I poked around in several logs located in /logs on the device as pointed to in previous messages but did not locate any messages that seemed to indicate why the device restarts.  I would think I would get something.   

CONFIGURATION:

  • Home use. 
  • Single Protectli appliance
  • SFOS 20.0.2 MR-2-Build378
  • 2Gbps Internet service
  • Connected to Sophos Central and also sending DEBUG logs to Central
  • Mixture of wired and wireless devices all connecting through a Netgear router providing mostly wireless capabilities.  Sophos handles DHCP, etc.  

QUESTIONS:

  • Would it be helpful to enable INFORMATION or DEBUG priority and reduce the events I'm sending to syslog?  If so, which ones.  Currently sending the following "Local Logs" to syslog (far right column)



Added TAGs
[edited by: Raphael Alganes at 7:50 AM (GMT -7) on 28 Aug 2024]