https://community.sophos.com/utm-firewall/f/utm-manager-formerly-acc/57104/sg135-not-connecting-to-sum-anymoreHello Guys, we are using SUM 4.300-4 with 9 Sophos SG Devices. The Setup was working like a treat and fine till 23th June. Only one Device now (SG135 - 9.312008) has problems and is not able to connect to the sum anymore. There was nothing changed inen-USTelligent Community 12https://community.sophos.com/thread/210826?ContentTypeID=1Thu, 02 Jul 2015 06:56:05 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:9dea2bb8-d64d-4182-babe-13706c5491c8RedVision81now&nbsp;i&nbsp;found&nbsp;the&nbsp;issue,&nbsp;when&nbsp;i&nbsp;disconnect&nbsp;our&nbsp;secound&nbsp;wan&nbsp;uplink&nbsp;(KDG100)&nbsp;it&nbsp;works&nbsp;without&nbsp;any&nbsp;problems: <br /> <br />Main&nbsp;SG315&nbsp;has&nbsp;2&nbsp;Uplink&nbsp;Interfaces: <br />1&nbsp;x&nbsp;MNet&nbsp;10&nbsp;(static&nbsp;IP)&nbsp;-&nbsp;SUM&nbsp;through&nbsp;2nd&nbsp;static&nbsp;IP <br />1&nbsp;x&nbsp;KDG100&nbsp;-&nbsp;Cable&nbsp;(dynamic&nbsp;IP)&nbsp;&nbsp;188.x.x.x.&nbsp;&nbsp;For&nbsp;Internet&nbsp;Only <br /> <br />SG135&nbsp;has&nbsp;1&nbsp;Uplink&nbsp;Interface: <br />1&nbsp;x&nbsp;KDG100&nbsp;-&nbsp;Cable&nbsp;(dynamic&nbsp;IP)&nbsp;&nbsp;188.x.x.x <br /> <br />But&nbsp;since&nbsp;the&nbsp;KDG100&nbsp;on&nbsp;the&nbsp;Main&nbsp;SG315&nbsp;gots&nbsp;a&nbsp;new&nbsp;IP&nbsp;Adress&nbsp;which&nbsp;is&nbsp;now&nbsp;in&nbsp;the&nbsp;same&nbsp;subnet&nbsp;and&nbsp;also&nbsp;using&nbsp;the&nbsp;same&nbsp;remotegateway&nbsp;as&nbsp;the&nbsp;KDG100&nbsp;Connection&nbsp;on&nbsp;the&nbsp;SG135,&nbsp;they&nbsp;always&nbsp;want&nbsp;to&nbsp;connect&nbsp;this&nbsp;way,&nbsp;because&nbsp;it&nbsp;is&nbsp;the&nbsp;shortest.&nbsp;Thats&nbsp;why&nbsp;my&nbsp;Multipath&nbsp;Rules&nbsp;(Sophos&nbsp;Web&nbsp;Admin&nbsp;and&nbsp;SNMP)&nbsp;are&nbsp;not&nbsp;working&nbsp;anymore&nbsp;too&nbsp;just&nbsp;for&nbsp;this&nbsp;device.<div style="clear:both;"></div>https://community.sophos.com/thread/210825?ContentTypeID=1Thu, 02 Jul 2015 05:32:48 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:89438a66-5b06-4c2f-8f6a-3a38e023e58bRedVision81any&nbsp;ideas&nbsp;why&nbsp;the&nbsp;firewall&nbsp;log&nbsp;from&nbsp;our&nbsp;main&nbsp;SG310&nbsp;gots&nbsp;flodded&nbsp;with&nbsp;this&nbsp;nat&nbsp;matches?<br /><br />again&nbsp;only&nbsp;this&nbsp;SG135&nbsp;with&nbsp;188.x.x.x.x&nbsp;which&nbsp;trys&nbsp;to&nbsp;connect&nbsp;to&nbsp;the&nbsp;sum&nbsp;but&nbsp;is&nbsp;not&nbsp;successful,&nbsp;but&nbsp;for&nbsp;me&nbsp;the&nbsp;nat&nbsp;rule&nbsp;looks&nbsp;correct,&nbsp;and&nbsp;it&nbsp;still&nbsp;works&nbsp;with&nbsp;the&nbsp;other&nbsp;SGs&nbsp;and&nbsp;it&nbsp;also&nbsp;worked&nbsp;one&nbsp;week&nbsp;ago<div style="clear:both;"></div>https://community.sophos.com/thread/210824?ContentTypeID=1Thu, 02 Jul 2015 05:17:48 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:26298318-cc30-4945-a1c1-5eefa772b314RedVision81i&nbsp;think&nbsp;i&nbsp;should&nbsp;check&nbsp;again&nbsp;on&nbsp;our&nbsp;main&nbsp;SG310,&nbsp;it&nbsp;seems&nbsp;i&nbsp;have&nbsp;an&nbsp;idea. <br /> <br />keeping&nbsp;you&nbsp;posted...<div style="clear:both;"></div>https://community.sophos.com/thread/210823?ContentTypeID=1Thu, 02 Jul 2015 05:06:43 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:dea0ca9c-1667-4785-86ed-d86b6e36d4f6RedVision81yes&nbsp;i&nbsp;did <br /> <br />i&nbsp;can&nbsp;ping&nbsp;8.8.8.8&nbsp;but&nbsp;not&nbsp;our&nbsp;external&nbsp;mx-server&nbsp;and&nbsp;not&nbsp;the&nbsp;sum&nbsp;server<div style="clear:both;"></div>https://community.sophos.com/thread/210822?ContentTypeID=1Thu, 02 Jul 2015 05:01:28 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:ead977b6-1db1-4c54-b13f-0c616b500f55papa__01Have&nbsp;you&nbsp;inlucded&nbsp;all&nbsp;local&nbsp;networks&nbsp;(interfaces)&nbsp;in&nbsp;masquerading?<div style="clear:both;"></div>https://community.sophos.com/thread/210821?ContentTypeID=1Thu, 02 Jul 2015 04:53:53 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:2fa7b42c-eb6c-466b-90c3-e16d2fe99b44RedVision81Now&nbsp;i&nbsp;restored&nbsp;the&nbsp;entire&nbsp;SUM&nbsp;VM&nbsp;from&nbsp;our&nbsp;backup,&nbsp;same&nbsp;issue. <br /> <br />After&nbsp;using&nbsp;the&nbsp;PING&nbsp;tools&nbsp;from&nbsp;the&nbsp;SG135,&nbsp;i&nbsp;cant&nbsp;ping&nbsp;the&nbsp;external&nbsp;IP&nbsp;Adress&nbsp;of&nbsp;the&nbsp;SUM.&nbsp;From&nbsp;any&nbsp;other&nbsp;8&nbsp;SGs&nbsp;we&nbsp;have&nbsp;outside,&nbsp;it&nbsp;is&nbsp;possible. <br /> <br />This&nbsp;drives&nbsp;me&nbsp;crazy!<div style="clear:both;"></div>https://community.sophos.com/thread/210820?ContentTypeID=1Thu, 02 Jul 2015 03:50:01 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:c763fc4d-e3f8-42bf-a941-2eeb817f8bafRedVision811.&nbsp;i&nbsp;deleted&nbsp;all&nbsp;objects&nbsp;everywhere,&nbsp;and&nbsp;tried&nbsp;again&nbsp;-&nbsp;same&nbsp;error<br />2.&nbsp;then&nbsp;i&nbsp;did&nbsp;a&nbsp;reset&nbsp;of&nbsp;our&nbsp;sg135&nbsp;and&nbsp;restored&nbsp;a&nbsp;backup&nbsp;before&nbsp;the&nbsp;issue&nbsp;started.&nbsp;same&nbsp;error.<br />3.&nbsp;then&nbsp;i&nbsp;did&nbsp;a&nbsp;restore&nbsp;on&nbsp;the&nbsp;sum-manager&nbsp;with&nbsp;a&nbsp;backup&nbsp;before&nbsp;the&nbsp;issue&nbsp;started,&nbsp;the&nbsp;sg135&nbsp;connected&nbsp;once,&nbsp;but&nbsp;then&nbsp;got&nbsp;disconnected&nbsp;again&nbsp;(last&nbsp;contact&nbsp;10:18:59)<br /><br />in&nbsp;the&nbsp;accd.log&nbsp;there&nbsp;no&nbsp;hints&nbsp;too&nbsp;[:(]<br /><br />also&nbsp;changed&nbsp;the&nbsp;dns&nbsp;host&nbsp;object&nbsp;of&nbsp;the&nbsp;sum&nbsp;on&nbsp;the&nbsp;sg135&nbsp;to&nbsp;a&nbsp;static&nbsp;host&nbsp;object,&nbsp;interface&nbsp;&nbsp;also&nbsp;with&nbsp;the&nbsp;wan&nbsp;uplink&nbsp;interface&nbsp;happens&nbsp;the&nbsp;same.<div style="clear:both;"></div>https://community.sophos.com/thread/210819?ContentTypeID=1Thu, 02 Jul 2015 01:53:19 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:633d0605-8fec-4f32-8626-5f168ab0fbf6Scott_KlassenAnything&nbsp;in&nbsp;the&nbsp;SUM&nbsp;log&nbsp;for&nbsp;connections&nbsp;from&nbsp;that&nbsp;UTM?&nbsp;&nbsp;It&nbsp;can&nbsp;be&nbsp;found&nbsp;from&nbsp;the&nbsp;shell&nbsp;at&nbsp;/var/log/accd.log<br /><br /><blockquote>maybe&nbsp;i&nbsp;will&nbsp;do&nbsp;a&nbsp;reset&nbsp;and&nbsp;restore&nbsp;the&nbsp;backup,&nbsp;if&nbsp;the&nbsp;deleting&nbsp;object&nbsp;procedure&nbsp;is&nbsp;not&nbsp;working&nbsp;too</blockquote>Please&nbsp;let&nbsp;us&nbsp;know&nbsp;how&nbsp;it&nbsp;goes.<div style="clear:both;"></div>https://community.sophos.com/thread/210818?ContentTypeID=1Thu, 02 Jul 2015 01:18:01 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:ea9f493f-a24f-4f74-ab6d-a4e8384f3460RedVision81removing&nbsp;objects&nbsp;is&nbsp;the&nbsp;only&nbsp;thing&nbsp;which&nbsp;i&nbsp;didnt&nbsp;try&nbsp;so&nbsp;far.&nbsp;but&nbsp;yes&nbsp;i&nbsp;disabled&nbsp;central&nbsp;managemnt&nbsp;rebooted,&nbsp;and&nbsp;activated&nbsp;it&nbsp;again,&nbsp;but&nbsp;same&nbsp;problem.<br /><br />nothing&nbsp;blocked,&nbsp;neither&nbsp;on&nbsp;the&nbsp;sg135&nbsp;nor&nbsp;on&nbsp;our&nbsp;sg315&nbsp;where&nbsp;the&nbsp;sum&nbsp;is&nbsp;behind.&nbsp;i&nbsp;can&nbsp;see&nbsp;the&nbsp;connection&nbsp;attempts&nbsp;and&nbsp;the&nbsp;matched&nbsp;dnat&nbsp;rule&nbsp;in&nbsp;the&nbsp;firewall&nbsp;log&nbsp;on&nbsp;our&nbsp;sg315.<br /><br />yes&nbsp;i&nbsp;read&nbsp;the&nbsp;thread&nbsp;already,&nbsp;but&nbsp;as&nbsp;i&nbsp;said,&nbsp;all&nbsp;other&nbsp;8&nbsp;utms&nbsp;are&nbsp;working&nbsp;like&nbsp;a&nbsp;treat&nbsp;and&nbsp;the&nbsp;setup&nbsp;of&nbsp;SUM&nbsp;Host&nbsp;defintion&nbsp;using&nbsp;a&nbsp;DNS&nbsp;Host&nbsp;is&nbsp;correct.&nbsp;i&nbsp;really&nbsp;dont&nbsp;understand&nbsp;why&nbsp;it&nbsp;worked&nbsp;for&nbsp;month&nbsp;and&nbsp;now&nbsp;there&nbsp;is&nbsp;a&nbsp;big&nbsp;issue.<br /><br />since&nbsp;the&nbsp;sg135&nbsp;isnt&nbsp;already&nbsp;in&nbsp;productive&nbsp;use,&nbsp;maybe&nbsp;i&nbsp;will&nbsp;do&nbsp;a&nbsp;reset&nbsp;and&nbsp;restore&nbsp;the&nbsp;backup,&nbsp;if&nbsp;the&nbsp;deleting&nbsp;object&nbsp;procedure&nbsp;is&nbsp;not&nbsp;working&nbsp;too.<div style="clear:both;"></div>https://community.sophos.com/thread/210817?ContentTypeID=1Wed, 01 Jul 2015 22:27:09 GMT4be5eb7d-caa4-4ff5-8e60-8f9463545a35:8f7ea922-40a0-4658-bcbb-76fff6bc3734Scott_KlassenHave&nbsp;you&nbsp;tried&nbsp;removing&nbsp;objects&nbsp;and&nbsp;disabling&nbsp;Central&nbsp;Management&nbsp;on&nbsp;the&nbsp;UTM,&nbsp;then&nbsp;deleting&nbsp;any&nbsp;entry&nbsp;for&nbsp;this&nbsp;UTM&nbsp;on&nbsp;the&nbsp;SUM?&nbsp;&nbsp;Then&nbsp;try&nbsp;re-enabling&nbsp;Central&nbsp;Management&nbsp;on&nbsp;the&nbsp;UTM.&nbsp;&nbsp;<br /><br />Check&nbsp;that&nbsp;the&nbsp;SUM&nbsp;Host&nbsp;information&nbsp;on&nbsp;the&nbsp;UTM&nbsp;is&nbsp;correct.&nbsp;&nbsp;Anything&nbsp;upstream&nbsp;of&nbsp;the&nbsp;UTM&nbsp;that&nbsp;may&nbsp;be&nbsp;blocking&nbsp;the&nbsp;connection?<br /><br />Check&nbsp;the&nbsp;thread&nbsp;at&nbsp;<a href="/products/unified-threat-management/astaroorg/f/54/t/40875">https://community.sophos.com/products/unified-threat-management/astaroorg/f/54/t/40875</a>,&nbsp;a&nbsp;couple&nbsp;of&nbsp;possible&nbsp;solutions&nbsp;related&nbsp;to&nbsp;host&nbsp;definitions.<div style="clear:both;"></div>