I'm having issues with sending logs from XGS4500 (SFOS 19.5.3 MR-3-Build652) to a Linux Ubuntu 20.04 syslog server for forwarding to MS Sentinel. The logs are going to a public IP, so they need to be sent via a secure tls connection. The logs work fine…

Hi all, I setup a new syslog server, but for some reason it is not forwarding all logs. I see the log server in the log settings and I checked all boxes for all log components. I see local logs, so the garner service is running. I ran tcpdumps on both…

Hello, We have a XGS3100 with SFOS version 19.0.3 MR3 that we want to upgrade to 20.0.1 MR1. During upgrade, configuration cannot migrated to new version and also backup restore to new version is not working. In control center, we received it shows…

specific mib to monitor with snmp-exporter the fans and the temperature of a sophos firewall XG

Good day I have client with XG 230, the They don't have an Active Directory, is there a way to install ssl appliance certificate to all machines.

Hello, I work remotely for a customer and wanted to update the SSDs. It seems to me that when the SSD is updated, it might not happen in all HA devices. In order to make sure that is not the case, I SSH into the Primary device and from there I do…

Hi everyone, I have a bit of a situation here. I have tow firewall XGS2100 Version 19.0.2 MR2 in a HA cluster, I tried to upgrade them to 19.5 MR4 Build718 . after one day the LAN zone lost the internet connection . I tried to reboot the firewall but…

Good morning, I missed a critical step when designing our new HA upgrade, I completely forgot about the WAN side of things. To fix the issue, I came across this Sophos article and trying to follow how it is setup without using a Sophos switch. https…

Hi all, Maybe we fundamentally don't understand something about XGS logging. If we create a firewall rule for a server that needs to reach certain servers in the world, we never see which packets to which servers are dropped. If we find out by ourself…

Does regenerating the Appliance Certificate affect any other access besides SSL VPN? This is my issue, we recently had our XG210 replaced and rebuilt the new unit with a backup. Prior to the firewall failure SSL VPN has been my goto setup for staff who…

Hi, looking for some help regarding User creation on the Sophos Firewall using the API. We've managed to be able to update a user's group membership, but are unable to actually create an account using a similar XML format. Currently we're getting…

Hi, I have the problem that the firewall is temporarily not operable via the web interface and is stuck. The status page doesn't show anything when it comes to performance either. tested across various browsers and systems, including sophos central…

Hi, Could anyone suggest an opensource (completely free) syslog server to be used with XGS2100 and XG86. We have couple of XGS2100 and 14 XG86. This server should also store syslogs from some other devices like NVR, routers and windows 2019 servers…

We have a series of customers with a firewall cluster but no local server infrastructure. Their resources are in our datacenter. There is always an IPsec tunnel from the datacenter to the firewall. We can always access the firewalls through the IPsec…

Is it possible to backup and restore from XG135 to XGS 136 without using a third-party migration tool?

Good afternoon, I have a couple of question regarding an upgrade we are doing over the next couple of weeks. So we are replacing our XG 210 with 2 XGS 3100's and have some question to their setup in a Primary/Secondary HA configuration. 1) Do I simply…

Can we renewal Sophos XGS subscription after 2 years if it is not renewed in between.

We have a Sophos XGS 6500, we are trying to configure it to send Firewall notification emails to a small mail server that is INSIDE our network behind the XGS. We have it configured, but we aren't seeing any traffic attempt to pass to the mail server…

I think I need to SNAT this but maybe there is an other option to define from which interface the Firwall sends it's alert/notification mails and Email Backups? We noticed the mails the Firewall sends internally are now coming from different Firewall…

I've a new XGS HA A/P cluster running on v20.0.1. The cluster is a migration from a retired XG system. All is running and looks fine so far. When checking logs, I found in the HA logs that this is filling with errors. Mostly the errors are always of…

Hi, I am setting up Netflow Monitor to monitor traffic levels on our bunch of XGS Firewalls and unfortunately Netflow reports the discovered interfaces as ifindex(x). What i am trying to find out is the easiest way i can identify what port is being…

I have upgraded my Sophos firewall to the latest image v20.0.1 MR-1 but now I can't access the GUI of it. The services are running well, any ideas to solve it?

Hi folks, I have an old thread with questions about IMAP/s and SMTP/s where the IMAP/s issue is being investigated and the SMTP issues appears to be ignored. A fresh thread devoted to SMTP/s issues. Questions. 1/. why are SMTP/s messages not displayed…

Hi. We have two Sophos XGS 136 in HA; installed firmware is SFOS 19.5.4 MR-4-Build718. On firmware page, upgrade to Sfos V20 is not proposed, and if I click on Check for new firmware button, the answer is "No upgrades available". Why? Enhanced Support…

Is there any way to comply with several Sophos firewalls via API or some software, I ask because we are a Sophos MSP and we have numerous firewalls, often the client has access and ends up changing them. Example if IPS was active. Which active admins…