Hi, we are using standalone firewall, recently we purchase one more firewall XGS3300 we want to put both firewall in HA i read some KB article what they suggest 1.existing firewall connect DMZ Zone port to new firewall 2.model version ports…

Hello, I need assistance with bulk renaming various objects such as IP Hosts and IP Host Groups on Sophos Firewall through the API. Could someone guide me on the best practices or provide a step-by-step procedure for this task? Thank you in advance…

Getting the following error requesting Lets Encypt certificate "type":"urn:ietf:params:acme:error:connection" "detail":"xx.xx.xx.xx: Fetching xxxxxxxxxxxx/.../mhmbdFphj1tfMCrRkrqqrp2CrgNY54ipSQeI66mcGFQ: Timeout during connect (likely…

Hi, Good day! I'm currently experiencing an issue where I can’t access my GUI. I checked the Tomcat service, and it shows as "stopped." I’ve tried restarting it several times, but it still won’t start. I even attempted a factory reset, but the Tomcat…

Hi, we are using xgs3300 that is connected with Sophos central existing device is fully configured and in production we are planning to add one more device for ha. 1.if i will add one more device in ha the existing configuration backup i need to…

I have a question regarding updating a HA setup from Firmware SFOS 19.5.3 MR-3-Build652 to SFOS 20.0.2 MR2-Build378. Since this is an update to a different version, does the same principle apply here where the Auxiliary is updated first, followed by the…

we face a problem wtih XGS 4300 Performance , and becomes to red , the internet speed decreasing ,we resolving the issue after rebooting the device, what should be done to solve this where this accruing contentiously

I have a HA cluster where it happens now second time that the Aux node was not able to join the cluster or went into fault state after a time of Primary node being down. First it happened while HA initial setup. LuCar Toni fixed it via remote access…

There's a thread from two years ago about provisioning HA-Cluster using Sophos Central ( Lite-Touch provisioning HA-Cluster ) The text is still (or again) showing in central and in documentation ( https://docs.sophos.com/nsg/sophos-firewall/21.0/help…

I need to log in to our router via SSH because the web console lacks the ability to disable SIP ALG. But when I try to login it claims my password is wrong - even though I just used it 2 minutes ago to access the web console. SSH is enabled for the…

hi, we had an incident where when of our devices had an attempt of access but with failure due to wrong password trials. I an suspecting that this device was on an unknown network outside our organization due to work from home policy we have. Is there…

Documentation says for HA active-passive you should select a preferred primary device, because " only the initial primary device holds the licenses and supports services, such as FastPath offloading. ". Does this mean if auxiliary appliance is currently…

Dear good evening, I have a firewall migration requirement for a client who has a Sophos XG450 firewall in version SFOS 19.0.2 MR-2 Build472 and wants to migrate to a new XGS4500 computer. Is it possible to do this migration by generating a backup…

Hi, i was just wondering if it's possible with the latest SFOS to backup and restore from a XG 210 to a XGS 2300 and from a XG 230 to a XGS 2100? Thnaks alot!

Hi, We have configured a HA in the site and it was working fine from last one year, HA degraded yesterday, Primary device is showing faulty All the cable connections are working fine, How to resolve this issue ? What would be the reason for…

We manage 241 firewalls via Central for our customers. We have management from the internet locked down. When performing a packet capture in the WebUI, there is a "Display Filter" button. If I want to filter on a specific rule, I have entered the Rule…

Hi, I recently acquired a used XG135. When I got it, I plug an ethernet cable on Port1 and the light was on and told myself that all was ok then. So I decided to make a reset factory, and since then the Port1 never show up. No lights, no connection…

Hi, I'm facing a new issue: After deploying new Firewall the fresh instance cannot be synchronized with Central. Device keeps hanging on state connected The default certificate seems to be invalid (Namibia???) After editing the default authority and…

Hi, I had install SFOS on my own old PC for some time, but did not connect /join Sophos Central after more then 30 days. I was trying out DNS protection after watching this video from Sophos Techvids: https://techvids.sophos.com/watch/YKKJiTqRndLS1eKRKsdJqe…

Hi, we have problems on remote/branch offices with ISP, because PPPoE internet link is dropping sporadically, sometimes every few minutes, sometimes it is OK for whole month. Drop is not significant in time units, just a disconnect and reconnect usually…

Hi, we are using xgs-3300 due to user and throughput increase in firewall utilization also increase we are planning for upgradation If we purchase a higher model xgs series can we use the existing license or do we need to purchase separately. …

we have reinstalled the firmware for the firewall. and port 1 is not working it was damaged. we are trying to configure port 2 or 3 as LAN via the command line When we try to use interface configuration it is not allowing us to configure port 2 , we…

I have a current setup with a pair of XG210 in HA Active-Passive mode and am preparing to upgrade them to XGS2100 in the same HA configuration. I have a configuration backup from the active XG210 and have attempted to restore it to the new XGS2100 but…

Hello, Yesterday I tried to reimage a Sophos Firewall of ours but I didn't succeed. I followed the instructions as provided on https://docs.sophos.com/nsg/sophos-firewall/21.0/help/en-us/webhelp/onlinehelp/AdministratorHelp/BackupAndFirmware/Firmware…

Ok everyone, I am trying to get back to our HA setup and have a few questions. We have 2 X XGS3100's, the Primary unit is active and currently registered and subscribed. I fired up the second 3100 today, now it is only connected back to the switch thru…