Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
Options
Suggested

Sophos Firewall Web protection (and other) features went down due to no comm with license server

Shadow82

Hi!

Recently I started to have issues with my Web servers guarded by Sophos Firewall v.21.

FW has 2 web servers configured with "Protect with web server protection" + "web server" rules. When client reuests for connection, FW started to RST at TCP hanshake

I got into this and noticed that my Web server license subscription has been deactivated

Trying to synchronize it doesn't work.

My licensing log shows that since I upgraded FW to v.21

ERROR Dec 04 20:35:38Z [4148057856]: licensing_do_licensecheck() : send post failed.
INFO Dec 04 20:35:38Z [4147791616]: --requestType = 8
INFO Dec 04 20:35:38Z [4147791616]: --serial = VDoesnt_matter9
INFO Dec 04 20:35:38Z [4147791616]: --fwversion = 21.0.0.169
INFO Dec 04 20:35:38Z [4147791616]: --cert = /content/licensing/lic_csr.pem
INFO Dec 04 20:35:38Z [4147791616]: --key = /content/licensing/lic_csr.key
INFO Dec 04 20:35:38Z [4147791616]: --token = Token-Id:VDoesnt_matter9
INFO Dec 04 20:35:38Z [4147791616]: URL : eu-prod-utm.soa.sophos.com/.../appliance
INFO Dec 04 20:35:38Z [4147791616]: licensing_do_applianceupdate : request : { "serialNumber": "VDoesnt_matter9", "applianceAttributes": [ { "name": "firmwareVersion", "value": "21.0.0.169" } ] }
ERROR Dec 04 20:35:38Z [4147791616]: curl_easy_perform(60) failed: SSL peer certificate or SSH remote key was not OK
ERROR Dec 04 20:35:38Z [4147791616]: licensing_do_applianceupdate() : Problem in contacting Server

Here full log:

Fullscreen
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
SFVH_VM01_SFOS 21.0.0 GA-Build169# cat licensing.log
INFO Sep 26 12:00:11Z [4147586816]: --requestType = 1
INFO Sep 26 12:00:11Z [4147586816]: --serial = VDoesnt_matter9
INFO Sep 26 12:00:11Z [4147586816]: --deviceid = 34278023-80e0-4469-849f-e65ba54b5057
INFO Sep 26 12:00:11Z [4147586816]: --model = SF01V
INFO Sep 26 12:00:11Z [4147586816]: --vendor = VM01
INFO Sep 26 12:00:11Z [4147586816]: --upgradedFrom = 0
INFO Sep 26 12:00:11Z [4147586816]: --fwversion = 20.0.2.378
INFO Sep 26 12:00:11Z [4147586816]: --cert = /_conf/certificate/licensing/mfgr_vendor_VM.pem
INFO Sep 26 12:00:11Z [4147586816]: --token = Token-Id:SO-D5C052A8
INFO Sep 26 12:00:11Z [4147586816]: --key = /_conf/certificate/licensing/mfgr_vendor_VM.key
INFO Sep 26 12:00:11Z [4147586816]: URL : https://eu-prod-utm.soa.sophos.com/api/device/1/applianceactivation
INFO Sep 26 12:00:11Z [4147586816]: request : { "serialNumber": "VDoesnt_matter9", "deviceId": "34278023-80e0-4469-849f-e65ba54b5057", "model": "SF01V", "deviceFirmwareVersion": "20.0.2.378", "vendorCode": "VM01" }
INFO Sep 26 12:00:12Z [4147586816]: response : {"trackingId":"b597ed29-3f0a-4dbd-8a22-34825c1a790d","statusCode":200,"errorCode":"ITSERVICELAYER_SUCCESS","message":"Activation successful.","data":{"serialNumber":"VDoesnt_matter9","deviceId":"34278023-80e0-4469-849f-e65ba54b5057","model":"SF01V"}}
INFO Sep 26 12:00:12Z [4147586816]: Activation Successfull...:)
####################################################
generate certificate signing request (CSR) Thu Sep 26 13:00:13 BST 2024
Thu Sep 26 13:00:14 BST 2024 certificate signing request generated with status :: 0
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX

Any ideas?



Edited TAGs
[edited by: Erick Jan at 11:30 PM (GMT -8) on 4 Mar 2025]
Unfiltered HTML