Sophos XG 17 RC1 - Can't login as Admin or User

Hey guys,


since beta 2 I have a sporadic problem with the authentication. After 2 days at the latest I can't log in to the admin interface, user portal or web authentication. The firewall practically freezes.
At the admin interface I get an error message that the login process failed. With incorrect credentials I get the same message.

When logging in to the User Portal or web-authentication I get no error message, only the loading graphic rotates with no result.
Logging on to the console is possible, but I cannot select an entry (1-7). The only fix is to reset the firewall.
I can't find any events in the syslog.

The XG firewall runs on an ESXi with 5GB Ram. In addition, a RED has been created and the user authentication runs via a domain controller.

While searching in the forum I came across older topics, but without a solution. Does anyone know the problem?

Regards

Parents
  • Mario, are you joking? Have you read the 2 pages of discussion?

    Here the problem in not login, but that the firewall became unaccessible and stops the dhcp server after a while, without any aparent reason! before it works fiine! I saw another error in web page . The Ram occupation is extremely different from the wab page to the advance shell

  • Don't know if the development team found the cause yet. I guess it is related to Advanced Thread Protection.

     

    It happened daily on my firewall. The worst case was 3 times a day. 

     

    I disabled the Advanced Thread Protection last week. The issue has not happened yet after 5 days running. 

     

    BTW, I also disabled HTTP scan for the primary firewall rule. However I have another zone and some other firewall rules, and they still have HTTP scan enabled. So that I believe it is the Advanced Thread Protection.

     

  • Hey guys,

    The Sophos team seems to have found the problem - probably this is caused by a system daemon. They have patched my firewall and since then it works without any problems.
    The fix is not public yet but i'm sure they release it in the next few days after additional monitoring.

    I don't want to anticipate too much, everything else will be published by Sophos / Deepti.

    Regards

Reply
  • Hey guys,

    The Sophos team seems to have found the problem - probably this is caused by a system daemon. They have patched my firewall and since then it works without any problems.
    The fix is not public yet but i'm sure they release it in the next few days after additional monitoring.

    I don't want to anticipate too much, everything else will be published by Sophos / Deepti.

    Regards

Children