Hi all. I have been successfully remotely monitoring a Sophos XG Firewall via SNMP (using MRTG), mainly to monitor incoming and outgoing bandwidth on all 3 Ethernet ports. To clarify... there is an MRTG server out on the Internet, connecting to the Sophos…

Hi, I'm trying to monitor the status of my policy based ipsec s2s tunnels. I already found the Nod "sfosXGTunnelInfo", but that is only the intended configuration and not a live status. Has anybody managed to get that status from a Sophos XG? Is it…

Hi everyone, a snmpwalk through 1.3.6.1.4.1.2604.5.1.7.1 did not show the sfosDeviceAPName (1.3.6.1.4.1.2604.5.1.7.1.1.1). All other OIDs (1.3.6.1.4.1.2604.5.1.7.1.1.[2-6]) show correct values. SfosDeviceAPEntry ::= SEQUENCE { sfosDeviceAPName…

Hi everyone, since we query all firewalls with the SNMP MIB, SNMPD memory usage keeps increasing. After a certain time the firewall crashes. Reproducible SFOS versions: 18.5.2, 18.5.3, 19.0 ATOP - localhost 2022/05/06 10:12:35 ----x--------- 10s…

Trying to setup SNMP monitoring but Paessler SNMP Tester keeps returning Value: No response... SNMP error 2003 I have enabled the snmp agent and created a trap in Administration -> SNMP and also flipped the switch for SNMP traps in System services …

Hi, i need to monitor a firewall with zabbix by snmp, do you have configuration settings document or guide for this, templates, mibs are useful too, somebody has any idea? Regards.

Hi All, After updating about 10 firewalls to XG18 for one of our customers we had another go at enabling SNMP-traps. (after the abysmal functionality that snmp-traps where in XG17). I cannot say that it has improved much. some traps are still being…

Hello everybody, I use Zabbix to monitor Traps. In some firewalls i'm receiving/sending VARIOUS MESSAGES from AuthenticationFailure at 169.254.234.5 (interface ipsec0). I dunno what this message is about. I looked at all the xg firewall logs, but there…

Hi a common issue we face is as customers sites expand the QOS policies need to be adjusted or expanded to deal with the increased devices or bandwidth required for such a service.Unfortunately troubleshooting issues like these are difficult at times…

Hello, I recently upgraded our Sophos XG firewalls to version 18.0.4 MR-4 and after the reboot I could not see the ports traffic through SNMP. I still can see other information like CPU and Memory and this happened in all Sophos Firewalls we use after…

Hi, is there a way to monitor realtime bandwith usage of individual Site2Site VPNs? So far, i could not find any graph displaying VPN bandwith with history or realtime values. In the latest XG Academy webinar i was told to monitor using CLI and "iftop…

Is there an SNMP OID for polling the current number of IPSec/Sophos Connect users? I see one for "sfos live users count" but that seems to pull a number from all total firewall sessions not just VPN. It's essentially meaningless due to the inaccuracy…

Our SNMP monitoring has fallen off for a particular VLAN (Down SNMP), looking at XG logviewer I can see the DENY ALL policy denied traffic to the destination UDP Port 161 to where the SNMP agent is, there hasn't been any other changes, and I have restarted…

Hi, I am using Zabbix 3.4.1 on CentOS and connecting to a Sophos XG virtual appliance (formerly Cyberoam). I am using the following templates with this device: Template MIB XG-FIREWALL-MIB - sophos Template Module Generic SNMPv2 Template Module Interfaces…

Hi, I've got some Sophos XG SFV1C2_KV01 (KVM Edition) with firmware 17.1.1 MR-1. Polling the XG via SNMP I'm getting wrong data: snmpwalk -v 2c -m +ALL -c public x.x.x.x 1.3.6.1.4.1.21067.2.1.3 XG-FIREWALL-MIB::appRegStatus.0 = INTEGER: unregistered…

Hello everyone, we're supporting a number of XG firewalls for clients. We use LogicMonitor to monitor the appliances via SNMP. Recently (I feel like this all started after we pushed out MR5 to all XGs), we've been getting alerts that the SNMP Agent…

Hello, i'm having an issue trying to access the SNMP of a XG firewall in a branch office from the head office via VPN, XG is MR7 SNMP is enabled and a community is created with v1 and v2c, no traps, with the ip of the HO management station device…

Hello, as get the updated MIB's list below for Sophos XG 16.5-MR *, I need to monitor the expiration date of the license with snmp (nagios) but the documentation I think is referring to the 2015 MIB and not all MIB's work. kb.cyberoam.com/default.asp

Hi all, I have been facing issues with getting snmp working for me. I have done the following: - Allowed SNMP on BOTH LAN and WAN under Device Access - Created an any to any firewall rule allowing snmp ports (161 and 162) - Deployed the cacti…

I am trying to poll the XG210 via SNMP and I cannot seem to get it to work. I have enabled the SNMP agent on the XG, added a community, and also ACL allow for SNMP on the LAN zone, but when I attempt to poll it says the port is closed. Do I have to also…

How should I set up SNMP on the XG to be like my old firewall?

Have have just configured a new XG115 device. There are 2 DSL links on the device, one is a very good vdsl link (90Mbps). Everything works great : very good ping time, very good troughput. But, when I make a SNMP request, the response take about…

We're setting up our first Sophose XG (a 115) and Im baffled as to why you can't enter an IP range instead of just a single IP address when configuring SNMP Query. Does anyone know of a workaround? It will accept: 10.77.1.10 WONT accept: 10…

Hi, on our XG105 i need to get the snmp-data for each port for traffic measuring. We use cacti for measuring the 95th percentile bandwidth. How to configure this? Best regards & thank you in advance!

"Enable SNMP Agent" checked. Community set (tested multiple community names and source) v1 and v2 checked. SNMP checked for WAN in device access. Cannot get any response from outside ....