Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.
Hi everyone, hope all is well.
I recently updated some of my units (XG 106, XGS 107 and XG 210) to SFOS 20.0.3 MR-3 and now I can't download any of the SSL VPN configuration files. All three options give me the same error:
I checked under "Backup & firmware -> Pattern updates" to see if there was anything going on there and found that the "SSLVPN Clients" entry had a status of "Failed":
After searching around I came across a thread that seemed to match the issue I'm having:
Sophos FW Unable to download ssl vpn configuration after v20 update
Running one of the commands listed there (curl xg-up2date-patterns.sophosupd.com/sslvpn_1.02_1.0.009.tar.gz.sig -O -v) solved the "Failed" issue on the XG 210:
On the others it didn't work. And on the 210, even though the error was cleared, I still can't download the files.
What should I try next? I haven't rebooted the units yet (still waiting for a maintenance window).
Thanks.
Hello,
Could you please share the below command output?
#csc custom status
Mayur Makvana
Technical Account Manager | Global Customer Experience
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question please use the 'Verify Answer' button.
Of course!
From the 210 (SSLVPN Clients status is "Success"):
XG210_WP03_SFOS 20.0.3 MR-3-Build427# csc custom status
Fri Feb 7 10:24:22 2025
Listerner is in UNFREEZED STATE
Freeze INIT wait val : 10
Freeze wait val : 900
Opcode queue len : 50
Service queue len: 50
Freeze INIT timeout : Not effective Freeze timeout : Not effective
HANDLE_STATE_CHANGE OPCODE RUNNING(2) ?:- 0
HA is disabled
Max static worker: 16
Max dynamic worker: 16
Max dynamic worker spawn last 24 hours: 0
Dynamic worker cross limit in last 24 hours: 0
Static worker cross limit in last 24 hours: 0
Free Workers:
601
575
554
32060
31732
28765
21046
16602
16601
16600
16596
16594
16593
19725
19718
17205
Busy service:
vpnportal
Service Queue of vpnportal:
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
XG210_WP03_SFOS 20.0.3 MR-3-Build427#
From one of the XGS 107s (SSLVPN Clients status is "Failed"):
XGS107_SN01_SFOS 20.0.3 MR-3-Build427# csc custom status
Fri Feb 7 10:32:14 2025
Listerner is in UNFREEZED STATE
Freeze INIT wait val : 10
Freeze wait val : 900
Opcode queue len : 50
Service queue len: 50
Freeze INIT timeout : Not effective Freeze timeout : Not effective
HANDLE_STATE_CHANGE OPCODE RUNNING(2) ?:- 0
HA is disabled
Max static worker: 16
Max dynamic worker: 16
Max dynamic worker spawn last 24 hours: 2
Dynamic worker cross limit in last 24 hours: 0
Static worker cross limit in last 24 hours: 1
Free Workers:
18630
18536
18465
18464
17982
9670
9213
9212
9208
9205
9204
9203
28587
28586
Busy workers:
C_FLAG: 1-DB_CONTROL, 2-NO_WAIT
R_FLAG: 1-DEBUG, 2-NO_SYNC
PID OPCODE NAME C_FLAG R_FLAG EXEC_TIME
17204 u2d_pt_installed 0x 0 0x 2 Fri Feb 7 10:30:29 2025
17205 u2d_pt_installer 0x 0 0x 2 Fri Feb 7 10:30:28 2025
Busy service:
vpnportal
Service Queue of vpnportal:
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6
vpnportal:restart 6 ...
XGS107_SN01_SFOS 20.0.3 MR-3-Build427#
Hello,
The log suggest that the service is in busy state and hence you are unable to download it.
It looks like your device is affected with the Bug ID: NC-147793. Kindly raise the support case and share these logs along with the access ID of the firewall to apply the pre-fix.
Please do share the case ID to track it further.
Also, refer to the KBA:
Mayur Makvana
Technical Account Manager | Global Customer Experience
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question please use the 'Verify Answer' button.
Hello Suporte Braveo ,
Have you raised the ticket?
Mayur Makvana
Technical Account Manager | Global Customer Experience
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question please use the 'Verify Answer' button.