• Red Heartbeat when users share docking station

    LHerzog
    LHerzog
    We notice strange Heartbeat issues this week when users of one department started desk sharing. Users have indiividual notebooks with Intercept-X. The Network is connected to XG firewall SFOS 19.0.1. DHCP Server on the Network. XG gets the Heartbeat…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Unwanted Heartbeat users showing up as "Live Users" next to VPN users

    stephang_01
    stephang_01
    I have an XGS 3100 firewall. In the Control Center, I see Connected Remote Users and Liove Users. Everyone in the former group appears in the Live group, but the Live Users group contains one or more "Heartbeat" users. I don't know why they are there…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Remove non-existing Clients from missing heartbeat list

    Hugo Moerenhout
    Hugo Moerenhout
    How to remove a non-existing endpoint from Sophos Firewall Control Center which shows the endpoint with "missing hearbeat" state 175 days ago. The endpoint was decomissioned and Sophos endpoint uninstalled and removed from Sophos Central about 6 months…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • how to debug Endpoint heartbeat "The network status has changed, the Firewall may disconnect."

    LHerzog
    LHerzog
    We have a client currently that is only connected with LAN. The client is reporting network changes the the firewall every few minutes and generates a new HB session. Causing many interruptins for the user. The client computer remains connected to the…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • heartbeat log: Cannot create ID for application, because appId range is exhausted. Application will be ignored.

    LHerzog
    LHerzog
    is that something to worry about in the heartbeatd.log? This is logged quite frequently on our SFOS 19.0.1 box [2023-03-16 14:18:04.039Z] INFO EndpointStorage.cpp[32722]:110 endpoint_connectivity_cb - Connectivity changed for <xxxxxxxxxxxxxxxxxxx…
    • Answered
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Strange issue with Security Heartbeat

    Gerhard Seemüller
    Gerhard Seemüller
    Hello, we have noticed a strange issue with Security Heartbeat. Devices often only gain access to the network several minutes after booting. The Heartbeat.log on the endpoint says that the connection initially failed. The heartbeatd.log on the firewall…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • Security Hearbeat over SSL VPN doesn't work

    Gianluca Maistri
    Gianluca Maistri
    We have 2 XGS 2300 (HA mode) with firmware 19.0.1 MR365, We tried to configure a rule for ssl vpn user with option "Block client without heartbeat" checked". Rule matchs also for clients wihout endpoint installed. We tried KB-000038254 without luck…
    • over 1 year ago
    • Sophos Firewall
    • Discussions
  • rumors of Heartbeat disabled for Windows Server 2012 R2 - true?

    LHerzog
    LHerzog
    Hi, I just read this article: https://borncity.com/win/2022/11/15/windows-server-2012-r2-sophos-user-authentication-using-heartbeat-disabled-on-rds-servers/ saying a customer found out tha his Windows 2012 R2 Servers no longer send their heartbeat…
    • Answered
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Heartbeat Authentication stopped working

    John Nickell
    John Nickell
    First this seems to be a client issue, because I'm not getting reports of others being affected, but I have seen this happen with different clients over time with Sophos and the only resolution I've found so far has been to restart the computer. I'd…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Current Activities - Client Type - Heartbeat

    SteveGross
    SteveGross
    I have three seemingly random computers on my network that keep showing up in the Live Users page. When I delete them, they come back. How can I dseletel them permanently?
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Security Heartbeat missing; but with SSL VPN its connected

    Dr Brezner
    Dr Brezner
    Hi Community, we have problems with missing heartbeats. following scenario: Branch office connected via IPsec to main branch, both XG. In the main branch there are resources that can only be reached with a heartbeat. Since a few weeks the clients…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Sophos Heartbeat not working / Errors in heartbeatd.log

    Markus Ottmann1
    Markus Ottmann1
    Some of our endpoints are blocked because of missing heartbeat. The heartbeat.log from the endpoint: 2022-05-30T12:56:17.558Z [ 3812: 4508] A ---------------------------------------------------------------------------------------------------- 2022…
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Sophos Heartbeat - License expired (I'm an XG Home User) - Just moved to Sophos Central

    Sophos User5937
    Sophos User5937
    Hello I recently (today) activated the Sophos Central management of my home computer based firewall. Oddly - now I happen to notice that the heartbeat feature is no longer available to me. (Says license expired for the Intercept X. Perhaps I'm missing…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Heartbeat Authentication not working with Vmware Horizon connection to workstations

    Markus Ottmann1
    Markus Ottmann1
    Hello community, we are using VMware Horizon VDI to realize HomeOffice for our collegues mainly to virtual machines. We have configured Sophos Heartbeat to realize user based firewall rules. This works great for us from VDI machines and workstations…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Heartbeat accross multiple Firewalls - somehow possible?

    LHerzog
    LHerzog
    Hi, I found this old thread and would like to know if this has somehow changed. https://community.sophos.com/sophos-xg-firewall/f/discussions/125923/can-heartbeat-information-be-shared-across-firewalls My idea is to share HB accross multiple sites…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • How do I delete or refresh my CM account?

    rfcat_vk
    rfcat_vk
    Hi folks, my CM account appears to have a configuration issue regarding heartbeat, so the question is how do I refresh the account or delete it so that I can start a new account (home use)? Ian
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Heartbeat issues as per Resolved Advisory notice

    rfcat_vk
    rfcat_vk
    Hi, I have been receiving e-mails from Sophos advising one or more of my XGs does not have current version. So, today I decided to investigate further. 1/. a brand new XG115w with the latest version of the software according to the notice still has…
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Heartbeat using wrong username

    Jakub Kavka
    Jakub Kavka
    Hello, is there any way how to tell Heartbeat function to use AD username format? By default its using "local" username format and every Heartbeat try ends up as failed. Strange is that some common users like "lunches (obedy)", "office dept" etc.…
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Intercept-X Linux Agent - future of Heartbeat?

    LHerzog
    LHerzog
    Is there some KB or information about the future of Intercept-X Linux Agent and Heartbeat? The latest Linux Agents don't have Heartbeat, the old versions do. Our Linux server admin complaints, he needs to install an old version of the agent to meet…
    • Answered
    • over 2 years ago
    • Sophos Endpoint
    • Discussions
  • Heartbeat trial ended - Services status is dead and red icon -UPDATE

    David Moro
    David Moro
    OLD THREAD ON community.sophos.com/.../304532 I have tried Security Heartbeat for 30 days and now the trial period expired. On dashboard the service icon is red and clicking it brings me to System Dashboard menu where "heartbeat service status says…
    • Answered
    • over 2 years ago
    • Sophos Firewall
    • Discussions
  • Heartbeat Rules - can someone sneak in with foreign device with Sophos Endpoint?

    LHerzog
    LHerzog
    Hi, I have a quick question about Security Heartbeat. Imagine, you have a FW rule on your XG with Security Heartbeat enabled: green source, green destination No user authentication required on that rule. Now, someone not belonging to your company…
    • Answered
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Heartbeat denied on IPSec connections

    Downsideup
    Downsideup
    Hi, this morning all of my IPSEC users are having problems connecting to the internet using the Sophos Connect client. The error in the XG log is Heartbeat denied This was working yesterday and we have made no changes to the XG
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • Security Heartbeat question

    MJ_P1
    MJ_P1
    On which two of the networks can the endpoints be protected from the computer with a red health status? Why do you answer that way? I feel like it's a trick question as wouldn't all three be protected? I said A and C since B was obvious. I was wrong…
    • Answered
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • No live user displayed for Intercept X Advanced for Server

    JasP
    JasP
    I have recently noticed that all our servers with Intercept X Advanced for Server do not show the 'user' details in the logs and any user based firewall rules fail (obviously). This is with a user logged in via Remote Desktop. These are domain joined…
    • Answered
    • over 3 years ago
    • Sophos Firewall
    • Discussions
  • any way to kick computer Heartbeat sessions on XG?

    LHerzog
    LHerzog
    Since the Upgrade of our XG 5 days ago which was parallel with the Sophos Central Updates during the weekend, I can see some very old red heartbeat sessions I blieve this is a bug. In fact I wonder if it is really possible that there is a heartbeatsession…
    • Answered
    • over 3 years ago
    • Sophos Firewall
    • Discussions
<>