Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 7 replies
  • Answers 1 answer
  • Subscribers 6 subscribers
  • Views 1797 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Is shutdown of SG210 necessary in case of power outage

Erik Puscher

Hello community,

 

i am writing a emergency paper in case of a power outage.

A uninterruptible power supply will give a view minutes reaction time.

A plan for shutting down servers was made.

What about the SG210? Is it necessary or recommended to shutting down the device?

Or may i let the fading power do this?



This thread was automatically locked due to age.
Parents
  • 0

    SG has a running operating system with open files.

    I would prefer to shut down the system for planed power interruption.

    Also short power outages should be buffered by UPS.

    But mostly we have no (no much) problems after hard powering down the device.

    With HA at least one device is coming back online.


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

  • 0 in reply to dirkkotte

    Hey Dirk,

    thank you for your opinion. I will take that into account.

     

    Do you know if it is possible to create a local user who only is able to shut down the device?

    I found this https://community.sophos.com/kb/en-us/126703 but this is only for xg not for a utm SG210.

  • 0 in reply to Erik Puscher

    For webadmin you can create an administrator with restricted rights.

    Possible you can shutdown via REST-API using this administrator.

    If you wish to use SSH (i use a SSH-script to shutdown my test-system) you have to use the loginuser account and grant rights for shutdown for this user.

    @C:\Users\xxx\plink.exe -v -ssh loginuser@astaro.homelab.local -pw your_password -m "C:\Users\xxx\UNIX_commands.txt"

    UNIX_commands.txt:
    sudo /sbin/shutdown -h now

    But with cluster this would shutdown the Master only. You have to fire the same command after 15 sec again.

     


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

  • 0 in reply to dirkkotte

    Thanks again.

     

    "For webadmin you can create an administrator with restricted rights."

    How can I achieve this?

     

    In "Definitions & Users > Users & Groups > New User" I can create a local user account. But I don't see any group fitting an admin beside "SuperAdmins".

    SuperAdmins group is added in "Management > WebAdmin Settings > WebAdmin Access Configuration". Text says:

    In Allowed Administrators, specify the users and groups that should have full webadmin access to all areas.

    So for me it looks like there is no way to create a admin with restricted rights, only with full rights. Did i miss something?

Reply
  • 0 in reply to dirkkotte

    Thanks again.

     

    "For webadmin you can create an administrator with restricted rights."

    How can I achieve this?

     

    In "Definitions & Users > Users & Groups > New User" I can create a local user account. But I don't see any group fitting an admin beside "SuperAdmins".

    SuperAdmins group is added in "Management > WebAdmin Settings > WebAdmin Access Configuration". Text says:

    In Allowed Administrators, specify the users and groups that should have full webadmin access to all areas.

    So for me it looks like there is no way to create a admin with restricted rights, only with full rights. Did i miss something?

Children
  • 0 in reply to Erik Puscher

    within "Management/WebAdmin Settings/Accesscontrol" you can create differentiated admin-rules".

    these you can assign to users here.

    Don't add restricted users to "../general/allowed administrators" .... otherwise they get full admin rights.


    Dirk

    Systema Gesellschaft für angewandte Datentechnik mbH  // Sophos Platinum Partner
    Sophos Solution Partner since 2003
    If a post solves your question, click the 'Verify Answer' link at this post.

  • 0 in reply to dirkkotte

    Sadly there is no right for "Management" menu or better only the sub menu "shutdown/restart". 

    Only:

    Mail Manager
    Mail Protection Manager
    Network Protection Manager
    Remote Access Manager
    Web Application Protection Manager
    Web Protection Manager
    Wireless Protection Manager

    Those can't shutdown the utm.

    Looks like a account that is allowed for a shutdown must be a full admin.

  • 0 in reply to Erik Puscher

    Erik, I don't think this is an issue.  In all my years here and before with Astaro, I don't recall a single problem caused by power going out.  In fact, I regularly suggest switching power off and on to resolve some issue.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Unfiltered HTML