Manage XG with Central

James at this time the Central Management EAP is only open to Central accounts in the AWS EU-West-1 availability region. Is your Central Account in that region? If so can you PM me your Central account details and I'll see if we can get you added to the CM EAP.

Stuart

Also got an EU West 1 Dashboard I would like to get enabled. When will this be made global and be an option in the EAP system?

Emile

Hi Emile,

Not sure on timescale for global CM EAP rollout. I'll try and find out and get back to you.

In the meantime, as with James if you have an EU-West-1 account then PM your details and I'll see if I can get you added to the EAP.

Stuart

Hi Stuart, Pretty sure I'm in US-West with this Central Account though I have another - will PM you the account info if its EU-West.

Thanks for the speedy response.

Kind regards

James

The issue right now, is that we haven't finished the scaling feature, allowing a meaningful number of firewalls (across all central accounts in a region) to be managed. Once we get that done, we can make this available for everyone to test. Stay tuned. We have a small number of internal users testing currently, and once we can open it up to more, I'll post an announcement. Stay tuned!

I now see the firewall in Sophos Central. But nothing more works.

If I want to add the firewall, I get an error that it is already in CFM.

But our partner Central Firewall Manager is empty.

If I click this on the firewall itself, there is also an error.

You can see the error on the first screenshot.

Please try the following steps:

Deregister the XG from Central by removing it. Click the ... on the far right if the firewall is listed.

In the XG webadmin console, try to turn off Central Management. If you get an error and it doesnt switch off, please deregister completely all Central functions.

Wait 10 or 20 seconds. If you had to deregister Central functions please now re-register, if you didn't try to add Central Management by clicking the slide control.

At this point go to the Central UI, your XG should be listed. Don't click the Add Firewall button - its not working yet. The firewall should be listed and it should say Connected on the left hand side. On the right hand side under some placeholder text you should see a link Accept Management. Click that.

The XG should now be connected to Central. Try clicking on the XG name/serial link.

Let us know if this helps.

Dear Stuart

I am having same isssue.I have done the procedure as described but getting error as per the screen shot.

Please help.

BR

VishvasChitale.docx

Try to SSH into the XG and enter the Advanced Shell.

XG135w_XN03_SFOS 17.5.0 Beta-2# ps -w | grep ssod

ssod             1396  1344 root     21348  9464 S    {ssod} csc -L 3 -c /_conf/cscconf.bin

ssod            10473  1396 root     87768  1992 S    ssod -f /cfs/ssod.conf

grep            17533  9389 root     12392   688 S    grep ssod

In the example above:

XG135w_XN03_SFOS 17.5.0 Beta-2# kill -9 10473

Wait 20-30 seconds and then try to click the link in Central for the firewall.

Let me know if this works.

Try to SSH into the XG and enter the Advanced Shell.

XG135w_XN03_SFOS 17.5.0 Beta-2# ps -w | grep ssod

ssod             1396  1344 root     21348  9464 S    {ssod} csc -L 3 -c /_conf/cscconf.bin

ssod            10473  1396 root     87768  1992 S    ssod -f /cfs/ssod.conf

grep            17533  9389 root     12392   688 S    grep ssod

In the example above:

XG135w_XN03_SFOS 17.5.0 Beta-2# kill -9 10473

Wait 20-30 seconds and then try to click the link in Central for the firewall.

Let me know if this works.

Dear Stuart

I have killed the process  and now I am  getting login screen at this URL https://fw-sso.0101.fw.prod.hydra.sophos.com/webconsole/webpages/login.jsp

then i am getting prompted for User name and password ,then I am getting disclaimer screen and when I accept the disclaimer then system is going  again back to login in screen.

I am using password of the admin user .Please help.

BR

Vishvas

Log out of Central. Then log into your account and go to Firewall Management, then Firewalls.

Then click on your firewalls serial number/name - you should get a splash screen and then the UI of your firewall.

Let us know

Dear Stuart

I have Relogged to central am getting my firewall UI. But after username and password I am getting Login in disclaimer and when I accept it , i am again getting login UI.

No improvement sir.

BR

Vishvas

We need to check your account. You should not be seeing a UI login screen at all - thats what SSO is for 

Leave this with me please, and thanks for your patience.

Stu

Hi Vishavas,

This issue was recently reported. The login disclaimer currently breaks the session handling during login, when it's enabled, and will be addressed in an update. 

Dear Alan

I have disabled the Login disclaimer settings then Central Manage is working.

Thanks for update.

BR

Vishvas

When I click on my firewall, the connection to it is established.
For about 0.5 second I see another firewall. What is it about?

It's just a splash screen, has no relation to your installation.

Just squint when you see that page, and it'll look a bit more like the finished version will :)

Dear Stuart

I have to kill everyday this process  ssod            10473  1396 root     87768  1992 S    ssod -f /cfs/ssod.conf .

Please help.

BR

Vishvas