Browse By Tags

  • SG430 (SFOS 19.0.1 MR-1-Build365) has been running for a long time and was recently upgraded to V19. On-Box-Reporting is OFF and cannot be turned ON

    Reporting does not work. I reviewed the reportmigration.log, and it seems like the report migration has never worked. The reportdb service is running, the disk space is fine, we have even run a manual purge of all log data. how can this be corrected…
  • Logging incomplete: Admin Audit logs not showing all changes

    on SFOS 18.5.4 and 19.0.1 we still notice that Admin Audit logs in Logviewer are not showing all changes admins make on the system. Example: anything you do with IPS policies is not logged. Adding, changing, deleting other example: IPSec Site…
  • Sending alert from discover mode firewall

    Hi all, Is it possible to send SNMP trap or syslog to a monitoring server (zabbix) when a Sophos XG firewall detect IPS alert on TAP interface?
  • Why do I get junk like this in my daily reports

    Hi folks, a question for the more knowledgable about XG mail scanning. My daily reports often show spam recipients which are not part of any mail accounts in my users. The firewall rules are setup to receive mail from only the ISP/RSPs. Ian
  • Equivalent to UTM Web Filtering Live Log

    Hi I'm migrating my UTL9 Home to FW 19.0, nearly complete but have a few niggles to sort out. One of them is the log viewer. It doesn't seem particularly quick and is quite chunky. Is there another view or config that can be done to provide the…
  • Ein Haufen Sophos Webdienste mit Kategorie "none" ...

    Moin Zusammen, kann mir einer mal erklären, warum diese Sophos Webdienste alle unter der Kategorie "none" laufen? Sophos Ähm, die Kategorie "none" gehört mit zu den ersten Dingen, auf die wir normalerweise als erstes den Zugriff sperren. Sollte…
  • Missing log messages IDs from XG Firewall SFOS v17.5 to 19

    Hi, I have running some rules from third party tool using logs from Sophos XG Firewall version SFOS 17.5. Some of the rules are based on specific IDs from https://docs.sophos.com/nsg/sophos-firewall/17.5/Help/en-us/webhelp/onlinehelp/nsg/sfos/concepts…
  • Bytes sent incorrectly reported in log viewer

    Hi, We're seeing repeated but inconsistent log entries with the bytes sent in the 4GB region. We use Fastvue and these incorrect bytes values mess with our reporting and make it hard to track down actual high bandwidth users. Some users are reported…
  • Sophos Firewall: Difference between WAN Link Manager and WAN Zone report

    Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Hi Community, This article describes the Data Transfer Traffic…
  • Sophos XG 450 - /var/newdb/base/16386 full

    Hey all :), our XG just notified us, that the disk is full. After a little search on Google I purged all available reports. Sadly it did not help. Is there something else i could do. Our Firewall is runnning the latest Firmware that is available 19…
  • Reports not including all traffic

    Hi, I've been copying a lot of data over SSL this weekend, and I've noticed that while the current activities window shows the traffic, and also includes the total downloaded, the reporting side of things doesn't This is using the latest v19 MR1…
  • Sophos Firewall: How to capture serial console logs for firewall installed on a virtual platform

    Disclaimer : This information is provided as-is for the benefit of the Community. Please contact Sophos Professional Services if you require assistance with your specific environment. Table of Contents Overview What to do Sophos firewall…
  • Web surfing report - No record found

    Hello time, I'm having trouble viewing custom reports, Web surfing report, which is only in No record found. Other reports are apparently working, but Web Risks & Usage I don't get any reports. In my NAT rule, Log firewall traffic is active and…
  • Without Reports

    Dear Colleagues! The Sophos Firewall stoped to record the reports. I can't see the traffic dashboards, logs VPN Connections and logs webfilter. When I reboot the firewall the logs are created and I can see it. Someone c Post an help me?
  • External Storage for reports

    Hello, I have the need to use my firewall's report storage on an external device, such as a NAS for example. It happens that I need to keep the Web Surging report for a period of 1 year, and with the current data traffic, my appliance can keep this…
  • XG on board reports - accuracy

    Hi folks, a discussion about the use of XG on board reports and their accuracy. The reports provide a summary of the affect of users firewall rules and polocies along with the XG inbuilt functions. So what is reflected in the reports is effected highlights…
  • sophos xg log viewer not working

    Hello, Since installing the latest version of SFOS Firmware 19.0.0 GA-Build317, I found that reports they are no longer functional since 2022-07-29 13:12:22 , how I should do to solve this problem , this is the first time I have encountered this kind…
  • XGS 126 report disk full

    Hello! I have a Sophos XGS 126 firewall, and the report disk fills up every week. I got emails that the " Reports disk Usage reached 90% exceeding the higher watermark of 90%" and I need to flush the reports disk to work. I disabled the log in all firewall…
  • SFOS 19.0.0 GA-Build317 : Log Viewer behavior

    hello I have server with SFOS v19, I am confused about log viewer. I think that it always show only logs in 10 minutes window. I tried to change time filter (all records ,last 4 hours, 60 minutes, etc.) but it doesn't work . I can only view firewall…
  • XG -Report partition full

    Hello, I just migrated a customer from UTM to XG (18.5 since 19 is not recommended by the support) and the default 80GB report partition of the VM is filling very quickly, in about 20-25 days. Logrotate is not well implemented and the firewall got…
  • Logviewer sometimes no origin/destination-port

    Good day, at the moment we have a lot of shity traffic going on , mostly from Russia and its lovely friends . Right now I ´ ve seen that there are p ackages without origin-port and destination-p orts in the Log Viewer . Whys that ? Never had this…
  • Log and Drop (IPv6) firewall rule "Allowing" and "Denying"... huh?

    I have a firewall rule (rule 20) which is a "log and drop" rule at the bottom of the IPv6 rules. But I'm seeing something very weird: some of the time it says "Denied" and some of the time it says "Allowed". There are no exceptions in the rule. Not only…
  • Garner Service Dead - XG V19.0 GA

    Hi all, I am running the latest version of Sophos XG (19.0) in a HyperV VM. All has been well since installation some time ago, but suddenly I am having issues with the Garner service, and the XG is reporting Service LoggingDaemon stopped. No config changes…
  • XGFW All Reports are empty.

    My SG330 (SFOS 19.0.0 GA-Build317) has been running for a long time and was recently upgraded to V19. I don't read reports very often, but today I found all the reports were empty. No matter how long you choose . Where might I look to troubleshoot this…
  • Looking at awarrenhttp_access.log for FQDNs

    I have an XG125w (SFOS 18.5.2 MR-2-Build380). A while back, I had a website that needed a web exception for SSL/TLS decryption and scan. The domain needed did not appear in the SSL/TLS log viewer. I opened a ticket with support and they gave me some…