intermittent firewall connection

So on the screen capture above, you'll notice that the heartbeat stopped around 1:15am (Nov 19)

Hello Jeff,

Thank you for contacting the Sophos Community!

Please provide me the Case ID so I can follow-up!

What is the exact issue the customer is experiencing? The device stops processing traffic?

If so please try running this command and monitor if the issue resurfaces. (The command must be run from the Console of the XG, to which you will need to SSH and then press 5>4). 

console> system firewall-acceleration disable 

regards,

So the case ID is: 03351988. This case ID basically is asking how to check for system events, because I needed these events for further troubleshooting. 

Basically everyday the customer's firewall which we deployed loses it's heartbeat and will disconnect all of them from the internet. It has been straight 3 days where the first thing in the morning as soon as they arrive the office, they notice they don't have a connection and had to call us and the only way to resolve it is we had to ask them to reboot the device. Not sure if traffics stops processing because just like yesterday, the Central Admin report shows it stopped 1:15am.

Can we do remote ssh on this device?

Thanks

Jeff

Hello Jeff,

Thank you for the follow-up!

Yes, you can SSH remotely to the XG.

I would recommend you to create a Local ACL exception, for the Public IP where you are going to be connecting from, so this way you don't have to enable SSH on the WAN publicly.

Regards,

Do you have a Display at hand, which the customer can plug in before rebooting the appliance? 

So we can better understand, why the appliance hangs. 

No, the thing is prior to rebooting the device, it still has power/lights on it. FYI, it happened again this morning and they had to reboot to restore the connection. What's frustrating is, this community responds faster than the support/tickets. 

I just noticed a pattern on the logs prior it goes down, every time an AV definition upgrade then it stops there. I will test by turning of AV and see how it goes tom.

You should get a display to this device. Because the power LED etc could be on but the appliance could hang in a Boot loop or something like that. 

Quick question, does the Sophos XG firewall reboots after an AV definition upgrade? I checked the last 5 days of event logs and all shows the same pattern of after an AV definition upgrade, then the logs stops there

Hello Jef,

No, it doesn't reboot!

Regards,