Hello! After updating to SFOS 21.0.0, we're facing a high CPU utilization. I've found that snort is related to IPS Engine. Pattern updates for IPS and Application signatures are updated and a few days ago I've flushed Device Reports (before…

Hi All. I have a XGS136. - Reporting DB shows 100% I have tried purging the reports as well as attemting to delete the files manually but no success. I ran the below and did a purge and I am getting this error: (tail -f /log/reportdb.log /log/iview…

Hi everyone, We're using the integrated Let's Encrypt feature in SFOS V21. We've noticed some strange behavior when it comes to renewing certificates. When the firewall attempts to renew the certificate, it fails with the message: "Reason for failure…

Hello. Recently, a bunch of my locally-generated certificates have expired and I am having trouble finding a way to renew them. I am using the firewall's local CA to make certificates for WAF rules and the web-admin console. You'd think there would…

Dear all, I found a Migration Tool on Github and did everythink like the Instructions told me to do. Here is the Link to the tool: https://github.com/sophos/Sophos-Migration-Utility-CLI Now I have a Problem, when I want to Import the "Export…

Hello, I would like to know the recommended CLI commands to perform hardware diagnostics on the Sophos Firewall 2100 . Specifically, I want to test components like CPU, memory, storage, and network interfaces to ensure the device is functioning properly…

I have XG 115 which only has an active basic protection license. Now I need to add new sd-red 20 devices. Can I purchse the Network Protection license and proceed? Will it work? Cuz one of Network specialists told me it won't work, no more licenses for…

Dear Forum, I created a new active-passive HA setup which is working flawlessly in terms of basically everything, except one thing which is the auxiliary device management. For some reason i not able to reach it via the aux management ip address, when…

Anyway to turn these off from showing in the logs? Thx

HI I have Xgs450 V20 that is running under HA. I posted long time about the ability to transfer Trunkvlans from one physical port to a lag physical port. But since i was on an older version I had to do it manually. However the project has been delayed…

Hey, on our fresh deployed XGS3300 with SFOS v21 the Reports Widget still shows 0 on all values: But you can see all information in the detailed view when click on one of the line. Is there a way to reset the view, or do i have to restart the complete…

Hello, I have a previous Sophos device that was copyrighted, but now when I reinstall it, I get an error that I cannot access the web because the device serial is not recognized, and the old id.sophos management website cannot be accessed because I switched…

Sophos FW for Production has failed to open on Google Web Browser however the IP is reachable. Version: XGS4500 (SFOS 20.0.0 GA-Build222) Mode: HA Any solution towards that. Thank you

We have an XGS116 firewall and after updating to the SFOS 20.0.2 MR2-Build 378 I can no longer log in to the admin web portal, only login failure. Even trying to access via SSH when you can log in, navigation between the options is extremely slow and…

Hi, below diagram right now we have one firewall and one core connectivity we need to change to active passive mode i have some query regarding configuration. switch to firewall A1,A2 port will connect what i need to configure in firewall ports…

Hi all, I had our XGS 2300 hard lock today, display buttons didnt work on the unit and no lan/wan connection on the interface, i've lodged a case and waiting a response. I've been running 21.0 GA build 169 and it's been running fine, also have been…

Hi I tried do upgrade my "SFVH_VM01_SFOS 20.0.2 MR-2-Build378" Sophos XG SFVH VM to XG 21 using the SIG-File SW-21.0.0_GA.SFW-169.sig from Sophos downloads. The Upload starts and then I see a red message banner saying: New firmware could not be…

Hello everyone, since the update to V21 the DHCP relay no longer works. Can anyone help here?

Dead Community, Dead Sophos Team, now with the 2. gen XGS devices, i would like to upgrade my current XGS 107 FW, where i already have a 3 year subscription for Xstream. Is it possible to migrate the current license(s) to the new device without…

Whenever I upload a firmware, and see that banner I'm a bit shocked and ask myself if I clicked the wrong button and the machine will now reboot? Can you change the text so it shows uploading, not applying?

Is it possible to download the packet capture created via the GUI?

When trying to create a custom web report on one of our XGS136, sometimes it works sometimes not. And If you are using a time frame from 8-10 e.g. no results shown. etc. or when switching from summary to detail, detail does not show anything. …

I hope this message finds you well. I am reaching out to request assistance with an issue I am encountering related to a proxy error with the sophos XG 330 (Fw1=SFOS 17.5.12 MR-1). I’ve noticed that when I try to connect to the web console, I receive…

What's "best practice" regarding HA link network? - at the moment my HA link network (physical port / peer2peer) is zone DMZ -> not cool because SSH access for DMZ zone must be activated or HA will not work anymore -> SSH access from DMZ zone on all HA…