Hi
I have a XG 135 running SFOS 17.5.8 MR-8 and it has very recently started to randomly auto reboot during the day. It has happened twice now on two separate occasions.
All I can see in the logs is that the device has started, and no reason given for the sudden reboot, and all statistics eg under Firewall Rules have reset to zero?
Anyone else experiencing this?
Louis
Hi Louis Swanepoel Sorry for the inconvenience caused!I would recommend the below steps.1. Check for system graphs and verify CPU and other resources usage for the approximate time of issue occurred.- https://community.sophos.com/kb/en-us/1231862. Please share the output of the below commands from Sophos SSH Console in the log file- https://community.sophos.com/kb/en-us/133678
console> system diagnostics show sysmsg
console> system diagnostics show syslog lines 1000
Regards,
KeyurCommunity Support Engineer | Sophos Support Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts | If a post solves your question use the 'This helped me' link
Incident happened at just before 08:47in the morning.
Graphs seem normal at the time except for a brief spike on boot which I think is normal
I had a look at the console log output as suggested and with my limited understanding, I can see nothing specific at the time of incident. I would prefer not sharing them publicly as they contain sensitive ip addresses and info
We haven't seen reboots, but we've seen our 430 just completely lock up and not pass traffic. After it happening twice within a two week span Sophos support sent me a replacement unit. I'm not sure if it's actually a hardware or software issue, support didn't say.
Yeah... mine locks up too for a minute or so where zero traffic will pass and then it hard reset/reboots itself
Hi Louis Swanepoel Thank you for sharing the details.The graphs seem to be normal, you can PM us the log file if you have captured.Please make sure that SSH and other device access from the WAN zone are disabled and proper IPS is applied if DNAT configuration is there in the firewall.To capture the logs for such instance in the furure we need to follow the below given steps but I hope it won't happen at all.1. The device needs to connect over the serial console access- https://community.sophos.com/kb/en-us/1306932. It will capture all the logs and allow us to analyze in such situation.
Case Logged on ID:#9305406
Hi Louis Swanepoel Thank you for sharing case number, I will keep an eye on the service request number.
So support logged in to my XG and the response I got was:
"I have checked logs using access id but there is no specific information available to get reason of reboot. Also after Oct 9, device is up and running fine"
So my XG 135 has done this now at least once a week for the previous two weeks... This is now week 3 and I am waiting to see if it happens again
I just had the issue happen again with the replacement 430. Same symptoms. Traffic stopped, the hard drive activity light on the front panel was solid, and the front panel lcd would not respond. The port activity lights were blinking as if traffic was passing. I had to hard power the unit to get our network back up. This is becoming very annoying. We will see what support says this time.
I've had similar problems with a software Appliance last month.
After reinstallation with iso image, everything is working fine now, no freezes or restarts!
_______________________________________________
Sophos XG User
I am sorry but this is not a option for me and my XG 135 and neither do I think it is for JBO and his XG 430