We notice strange Heartbeat issues this week when users of one department started desk sharing.
Users have indiividual notebooks with Intercept-X. The Network is connected to XG firewall SFOS 19.0.1.
DHCP Server on the Network.
XG gets the Heartbeat…
I have an XGS 3100 firewall. In the Control Center, I see Connected Remote Users and Liove Users. Everyone in the former group appears in the Live group, but the Live Users group contains one or more "Heartbeat" users. I don't know why they are there…
How to remove a non-existing endpoint from Sophos Firewall Control Center which shows the endpoint with "missing hearbeat" state 175 days ago. The endpoint was decomissioned and Sophos endpoint uninstalled and removed from Sophos Central about 6 months…
We have a client currently that is only connected with LAN. The client is reporting network changes the the firewall every few minutes and generates a new HB session. Causing many interruptins for the user.
The client computer remains connected to the…
is that something to worry about in the heartbeatd.log?
This is logged quite frequently on our SFOS 19.0.1 box
[2023-03-16 14:18:04.039Z] INFO EndpointStorage.cpp[32722]:110 endpoint_connectivity_cb - Connectivity changed for <xxxxxxxxxxxxxxxxxxx…
Hello,
we have noticed a strange issue with Security Heartbeat. Devices often only gain access to the network several minutes after booting. The Heartbeat.log on the endpoint says that the connection initially failed. The heartbeatd.log on the firewall…
We have 2 XGS 2300 (HA mode) with firmware 19.0.1 MR365,
We tried to configure a rule for ssl vpn user with option "Block client without heartbeat" checked". Rule matchs also for clients wihout endpoint installed.
We tried KB-000038254 without luck…
Hi,
I just read this article: https://borncity.com/win/2022/11/15/windows-server-2012-r2-sophos-user-authentication-using-heartbeat-disabled-on-rds-servers/
saying a customer found out tha his Windows 2012 R2 Servers no longer send their heartbeat…
First this seems to be a client issue, because I'm not getting reports of others being affected, but I have seen this happen with different clients over time with Sophos and the only resolution I've found so far has been to restart the computer.
I'd…
I have three seemingly random computers on my network that keep showing up in the Live Users page. When I delete them, they come back. How can I dseletel them permanently?
Hi Community,
we have problems with missing heartbeats. following scenario:
Branch office connected via IPsec to main branch, both XG. In the main branch there are resources that can only be reached with a heartbeat.
Since a few weeks the clients…
Some of our endpoints are blocked because of missing heartbeat.
The heartbeat.log from the endpoint:
2022-05-30T12:56:17.558Z [ 3812: 4508] A ----------------------------------------------------------------------------------------------------
2022…
Hello
I recently (today) activated the Sophos Central management of my home computer based firewall. Oddly - now I happen to notice that the heartbeat feature is no longer available to me. (Says license expired for the Intercept X.
Perhaps I'm missing…
Hello community,
we are using VMware Horizon VDI to realize HomeOffice for our collegues mainly to virtual machines. We have configured Sophos Heartbeat to realize user based firewall rules. This works great for us from VDI machines and workstations…
Hi,
I found this old thread and would like to know if this has somehow changed.
https://community.sophos.com/sophos-xg-firewall/f/discussions/125923/can-heartbeat-information-be-shared-across-firewalls
My idea is to share HB accross multiple sites…
Hi folks,
my CM account appears to have a configuration issue regarding heartbeat, so the question is how do I refresh the account or delete it so that I can start a new account (home use)?
Ian
Hi,
I have been receiving e-mails from Sophos advising one or more of my XGs does not have current version. So, today I decided to investigate further.
1/. a brand new XG115w with the latest version of the software according to the notice still has…
Hello,
is there any way how to tell Heartbeat function to use AD username format? By default its using "local" username format and every Heartbeat try ends up as failed.
Strange is that some common users like "lunches (obedy)", "office dept" etc.…
Is there some KB or information about the future of Intercept-X Linux Agent and Heartbeat?
The latest Linux Agents don't have Heartbeat, the old versions do.
Our Linux server admin complaints, he needs to install an old version of the agent to meet…
OLD THREAD ON
community.sophos.com/.../304532
I have tried Security Heartbeat for 30 days and now the trial period expired. On dashboard the service icon is red and clicking it brings me to System Dashboard menu where "heartbeat service status says…
Hi,
I have a quick question about Security Heartbeat.
Imagine, you have a FW rule on your XG with Security Heartbeat enabled: green source, green destination
No user authentication required on that rule.
Now, someone not belonging to your company…
Hi, this morning all of my IPSEC users are having problems connecting to the internet using the Sophos Connect client.
The error in the XG log is Heartbeat denied
This was working yesterday and we have made no changes to the XG
On which two of the networks can the endpoints be protected from the computer with a red health status? Why do you answer that way?
I feel like it's a trick question as wouldn't all three be protected? I said A and C since B was obvious. I was wrong…
I have recently noticed that all our servers with Intercept X Advanced for Server do not show the 'user' details in the logs and any user based firewall rules fail (obviously). This is with a user logged in via Remote Desktop.
These are domain joined…
Since the Upgrade of our XG 5 days ago which was parallel with the Sophos Central Updates during the weekend, I can see some very old red heartbeat sessions
I blieve this is a bug. In fact I wonder if it is really possible that there is a heartbeatsession…