This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Cannot Upgrade or Backup

Hi, 

probably need separate posts but after spending 4+ hours on live chat to eventually be told they cannot help and then they just ended the session! I have turned to these forums.

1, I am running SFOS 18.0.3 MR-3

2, I cannot Download SW-18.0.4_MR-4.SFW-506 as when I click the download button nothing happens (have restarted) Support are unable to link me to a download location to download manually, when I try myself I get asked for my product licence username and password which I do not have (never have)

3, I cannot backup any longer via the internal mail server (have done ok since March last year but now it has just stopped working and there is nothing in the log viewer)

"Failed to send the test mail on the email address. For more details, refer to the log viewer"

4, Unable to get a connection to my FTP server (I use it all the time for other purposes) I am presuming this is because I cannot set a port number. 

"Backup could not be sent due to incorrect server configuration"

If anyone can help with any of these issues I would really appreciate it!

 

Thank you



This thread was automatically locked due to age.
Parents Reply Children
  • I am sorry, i missed this one. /dev/var/ is basically the reporting and config section, which seems to be full. Can you purge Logs and check if this clear up space? 

    __________________________________________________________________________________________________________________

  • Just carried out a manual purge but no difference 

  • Ok, so I am a bit stuck, I cannot take a backup as the disk is full, I want to create a new larger VM to resolve this and restore a backup so has kindly recommended deleting the tslog folder but he cannot guarantee it will not cause problems, do you/anyone know if I can do this, take a backup, then recreate?

  • The best thing you can do right now is create a new VM for Sophos XG with a bigger disk.

    Having only 15GB of space will always cause you issues.

    Also, is there anything inside the /var partition that can be deleted without causing any damage to the installation ? Because right now he can't do a backup since the partition is full.


    If a post solves your question use the 'Verify Answer' button.

    Ryzen 5600U + I226-V (KVM) v20 GA @ Home

    XG 115w Rev.3 8GB RAM v19.5 MR3 @ Travel Firewall

  • There are certain things, stored in /var/ which could be eventually be deleted. 

    PS: Purging of the database take some time. It might be now some free space available. 

    Do you use Email in XG? The quarantine database is stored in this folder.

    Also /log/ is mapped into /var/. Check /log/ with ls -lh. 

    __________________________________________________________________________________________________________________

  • Hi, 

    var is still full unfortunately so the purge did not do anything, here is the result of the /log directory

    SFVH_SO01_SFOS 18.0.3 MR-3# ls -lh                                              
    -rw-r--r--    1 root     0              0 May  6  2020 VPN.log                  
    -rw-r--r--    1 root     0          27.6M Jan 15 17:06 WINGc.log                
    -rw-r--r--    1 root     0           9.0M Jan 15 17:25 access_server.log        
    -rw-------    1 root     0              0 Dec 21 04:03 access_server.log.0      
    -rw-r--r--    1 root     0              0 May  6  2020 apache.log               
    -rw-r--r--    1 root     0         696.0K Jan 15 17:25 apache_access.log        
    -rw-------    1 root     0           1.6M Nov 19 22:40 apache_access.log.0      
    -rw-r--r--    1 root     0              0 May  6  2020 apiparser.log            
    -rw-r--r--    1 root     0          20.8K Nov  1 05:32 app-feedback.log         
    -rw-r--r--    1 root     0         200.0K Jan 14 01:06 appcached.log            
    -rw-r--r--    1 root     0           8.6M Jan 15 17:25 applog.log               
    -rw-------    1 root     0              0 Nov 28 17:43 applog.log.0             
    -rw-r--r--    1 root     0              0 May  6  2020 av.log                   
    -rw-r--r--    1 root     0         221.1M Jan 14 01:06 avd.log                  
    -rw-r--r--    1 root     0          50.4M Jan 15 17:25 awarrenhttp.log          
    -rw-r--r--    1 root     0              0 May  6  2020 awarrenhttp_access.log   
    -rw-r--r--    1 root     0              0 May  6  2020 awarrensmtp.log          
    -rw-r--r--    1 root     0         192.0K Jan 14 01:05 awed.log                 
    -rw-r--r--    1 root     0          12.6K Jan 14 01:06 bgpd.log                 
    -rw-r--r--    1 root     0          11.7K Jan 14 01:06 bwm.log                  
    -rw-r--r--    1 root     0           5.3K May  6  2020 catUpdateLog             
    -rw-r--r--    1 root     0              0 May  6  2020 centralmanagement.log    
    -rw-r--r--    1 root     0          10.3M Jan 15 17:24 charon.log               
    -rw-r--r--    1 root     0              0 May  6  2020 chromebook-sso-backend.lo
    g                                                                               
    -rw-r--r--    1 root     0           9.6K Jan 14 01:06 clientless_access.log    
    -rw-r--r--    1 root     0          28.0K Jan 14 01:05 confdbstatus.log         
    -rw-r--r--    1 root     0              0 May  6  2020 crreportdb.log           
    -rw-r--r--    1 root     0         239.8M Jan 15 17:25 csc.log                  
    -rw-------    1 root     0         217.5M Oct 21 19:00 csc.log.0                
    -rw-r--r--    1 root     0           1.5M Jan 14 21:59 cschelper.log            
    -rw-------    1 root     0           5.4M Sep 13 00:00 cschelper.log.0          
    -rw-r--r--    1 root     0              0 May  6  2020 csd.log                  
    -rw-r--r--    1 root     0          37.9K Jun  9  2020 ctasd.log                
    -rw-r--r--    1 root     0         334.8K Jun 11  2020 ctipd.log                
    -rw-r--r--    1 root     0              0 May  6  2020 ctsyncd.log              
    -rw-r--r--    1 root     0           5.0M Jan 14 22:58 ddc.log                  
    -rw-r--r--    1 root     0           8.4M Jan 15 17:25 dgd.log                  
    -rw-------    1 root     0          20.0M Jan  6 12:51 dgd.log.0                
    -rw-r--r--    1 root     0         262.1K Jan 14 01:06 dhcpd.log                
    -rw-r--r--    1 root     0              0 May  6  2020 dhcpd6.log               
    -rw-r--r--    1 root     0         341.4K Jan 15 17:04 dnsd.log                 
    -rw-r--r--    1 root     0           3.9M Jan 15 17:25 dnsgrabber.log           
    -rw-------    1 root     0              0 Jan 14 05:32 dnsgrabber.log.0         
    -rw-r--r--    1 root     0              0 May  6  2020 eacd.log                 
    -rw-r--r--    1 root     0              0 May  6  2020 entity.log               
    -rw-r--r--    1 root     0         156.0K Jan 15 17:25 error_log.log            
    -rw-r--r--    1 root     0         212.0K Jan 14 01:06 firewall_rule.log        
    -rw-r--r--    1 root     0           2.1M Jan 14 01:06 fqdnd.log                
    -rw-r--r--    1 root     0              0 May  6  2020 fqdndebug.log            
    -rw-r--r--    1 root     0           1.2M Jan 14 01:06 ftpproxy.log             
    -rw-r--r--    1 root     0              0 May  6  2020 fwcm-eventd.log          
    -rw-r--r--    1 root     0              0 May  6  2020 fwcm-heartbeatd.log      
    -rw-r--r--    1 root     0              0 May  6  2020 fwcm-updaterd.log        
    -rw-r--r--    1 root     0          10.2M Jan 15 17:25 fwlog.log                
    -rw-------    1 root     0              0 Jan 12 10:53 fwlog.log.0              
    -rw-r--r--    1 root     0          84.9M Jan 15 17:25 garner.log               
    -rw-------    1 root     0              0 Jan 14 20:04 garner.log.0             
    -rw-r--r--    1 root     0              0 May  6  2020 ha_pair.log              
    -rw-r--r--    1 root     0              0 May  6  2020 ha_tunnel.log            
    -rw-r--r--    1 root     0              0 May  6  2020 hbtrust.log              
    -rw-r--r--    1 root     0              0 May  6  2020 heartbeatd.log           
    -rw-r--r--    1 root     0              0 May  6  2020 hostapd.log              
    -rw-r--r--    1 root     0           1.6K Jan 14 01:05 hotspotd.log             
    -rw-r--r--    1 root     0          67.4M Jan 15 00:05 ips.log                  
    -rw-r--r--    1 root     0              0 May  6  2020 ipsec.log                
    drwxr-xr-x    2 root     0           4.0K Oct 28 00:01 ipsec_conn               
    -rw-r--r--    1 root     0          18.9K Jan 14 01:06 ipsec_monitor.log        
    -rw-r--r--    1 root     0          30.5M Jan 15 17:23 iview.log                
    -rw-------    1 root     0          27.9M Nov 15 00:17 iview.log.0              
    -rw-r--r--    1 root     0              0 May  6  2020 l2tpd.log                
    -rw-r--r--    1 root     0              0 May  6  2020 lcd.log                  
    -rw-r--r--    1 root     0         672.0K Jan 15 01:07 licensing.log            
    -rw-r--r--    1 root     0           7.1K Jan 14 01:05 mdev.log                 
    -rw-r--r--    1 root     0          10.3K Oct 27 23:59 migration.log            
    -rw-r--r--    1 root     0           3.0K Oct 27 23:59 migrationhash.log        
    -rw-r--r--    1 root     0              0 May  6  2020 mrouting.log             
    -rw-r--r--    1 root     0              0 May  6  2020 msync.log                
    drwxr-xr-x    2 root     0           4.0K May  6  2020 nSXLd                    
    -rw-r--r--    1 root     0          55.6K Jan 14 01:06 nSXLd.log                
    -rw-r--r--    1 root     0         469.4K Jan 14 01:06 nasm.log                 
    -rw-r--r--    1 root     0         228.0K Jan 14 01:06 nat_rule.log             
    -rw-r--r--    1 root     0           1.7M Jan 14 01:06 networkd.log             
    -rw-r--r--    1 root     0          79.7K Jan 15 15:40 ntpclient.log            
    -rw-r--r--    1 root     0              0 Jan 14 01:06 openvpn-status.log       
    -rw-r--r--    1 root     0          12.0K Jan 14 01:05 ospfd.log                
    -rw-r--r--    1 root     0              0 May  6  2020 pimd.log                 
    -rw-r--r--    1 root     0          34.5M Jan 15 17:25 pktcapd.log              
    -rw-------    1 root     0              0 Jan  6 17:55 pktcapd.log.0            
    -rw-r--r--    1 root     0         400.0K Jan 14 01:05 postgres.log             
    -rw-r--r--    1 root     0              0 May  6  2020 pptpvpn.log              
    -rw-r--r--    1 root     0              0 May  6  2020 radvd.log                
    -rw-r--r--    1 root     0              0 Jan 14 01:06 readobject.log           
    -rw-r--r--    1 root     0              0 May  6  2020 red.log                  
    drwxr-xr-x    2 root     0           4.0K May  6  2020 redis                    
    -rw-r--r--    1 root     0           9.1M Jan 14 01:06 reportdb.log             
    -rw-r--r--    1 root     0          11.8K Jan 14 01:16 reportmigration.log      
    -rw-r--r--    1 root     0              0 May  6  2020 reverseproxy.log         
    -rw-r--r--    1 root     0          28.0K Jan 14 01:06 ripd.log                 
    -rw-r--r--    1 root     0              0 May  6  2020 sac-feedback.log         
    -rw-r--r--    1 root     0          56.0K Jan 14 01:12 sandboxd.log             
    -rw-r--r--    1 root     0              0 May  6  2020 sessiontbl.log           
    -rw-r--r--    1 root     0           5.4K Jan  7 11:26 sig_upgrade.log          
    -rw-r--r--    1 root     0         280.0K Jan 14 01:06 sigdb.log                
    -rw-r--r--    1 root     0          12.4K Oct 28 00:00 sigmigration.log         
    -rw-r--r--    1 root     0          98.4K Jan 14 01:06 skein.log                
    -rw-r--r--    1 root     0              0 May  6  2020 smbnetfs.log             
    -rw-r--r--    1 root     0              0 May  6  2020 smtpd_error.log          
    -rw-r--r--    1 root     0          49.4M Jan 14 01:08 smtpd_main.log           
    -rw-r--r--    1 root     0              0 Jan 14 01:06 smtpd_panic.log          
    -rw-r--r--    1 root     0           1.9K Jan 14 01:08 smtpd_reject.log         
    -rw-r--r--    1 root     0           2.7M Jan 15 17:15 snireport.log            
    -rw-r--r--    1 root     0              0 May  6  2020 snmpd.log                
    -rw-r--r--    1 root     0           8.8K Jan 14 01:06 sophos-central.log       
    -rw-r--r--    1 root     0          11.7K Jan 14 22:23 sshd.log                 
    -rw-r--r--    1 root     0              0 May  6  2020 sslvpn.log               
    -rw-r--r--    1 root     0              0 May  6  2020 ssod.log                 
    -rw-r--r--    1 root     0          18.3K Jan 14 01:06 strongswan-monitor.log   
    -rw-r--r--    1 root     0          10.4M Jan 15 17:24 strongswan.log           
    -rw-r--r--    1 root     0            486 May  6  2020 strongswan_migration.log 
    -rw-r--r--    1 root     0              0 May  6  2020 sync.log                 
    -rw-r--r--    1 root     0         296.0K Jan 14 01:05 sysinit.log              
    -rw-r--r--    1 root     0          34.3M Jan 15 17:23 syslog.log               
    -rw-r--r--    1 root     0         412.0K Jan 15 00:32 tmclient.log             
    -rw-r--r--    1 root     0          17.3M Jan 15 17:24 tomcat.log               
    -rw-r--r--    1 root     0          50.9M Jan 15 17:17 u2d.log                  
    -rw-r--r--    1 root     0         918.8K Dec  2 23:49 up2date_av.log           
    -rw-r--r--    1 root     0           3.9M Jan 15 17:24 validationError.log      
    -rw-------    1 root     0           5.0M Sep 15 18:17 validationError.log.0    
    -rw-r--r--    1 root     0              0 May  6  2020 vhost.log                
    -rw-r--r--    1 root     0              0 May  6  2020 vmtool.log               
    -rw-r--r--    1 root     0              0 May  6  2020 vpncertificate.log       
    -rw-r--r--    1 root     0         884.0K Jan 14 01:06 warren.log               
    -rw-r--r--    1 root     0              0 May  6  2020 wc_remote.log            
    -rw-r--r--    1 root     0              0 May  6  2020 webproxy.log             
    -rw-r--r--    1 root     0              0 May  6  2020 wifiauth.log             
    -rw-r--r--    1 root     0              0 May  6  2020 xfrmi.log                
    -rw-r--r--    1 root     0          37.4K Jan 14 01:06 zebra.l
  • FormerMember
    0 FormerMember in reply to Martyn Campbell

    Hi ,

    Can you provide the output of the following command: 

    du -shaLc /var/* 2>/dev/null

    Thanks,

  • Hi!,

    SFVH_SO01_SFOS 18.0.3 MR-3# du -shaLc /var/* 2>/dev/null
    16.0K /var/WING
    20.0K /var/archieve
    29.7M /var/as
    117.8M /var/avira4
    4.0K /var/certcache
    69.2M /var/conan
    69.3M /var/conan_new
    4.0K /var/conf
    1.5M /var/cores
    3.9G /var/db
    4.0K /var/ddclient
    4.0K /var/empty
    351.1M /var/eventlogs
    32.0K /var/exim
    4.0K /var/fwcm_data
    940.0K /var/garner_db
    16.0K /var/lost+found
    3.9G /var/newdb
    31.3M /var/os
    4.0K /var/pdf
    4.0K /var/quarantine
    8.0K /var/quota_redis
    8.0K /var/run
    1.3M /var/sandbox
    188.9M /var/savi
    4.0K /var/sni_telemetry
    8.0K /var/sophos_feedback
    364.0K /var/spool
    0 /var/system_restore
    557.0M /var/tmp
    1.3G /var/tslog
    285.4M /var/u2d
    4.0K /var/upload
    4.0K /var/waffiles
    8.0K /var/webadmin
    10.8G total
    SFVH_SO01_SFOS 18.0.3 MR-3#

  • FormerMember
    0 FormerMember in reply to Martyn Campbell

    Hi ,

    Thank you for the update. I noticed that you already try to purge the GUI reports, and that didn’t work. But can you try to purge reports from the backend? Just be aware this process will restart the firewall; if it’s a production environment, do it during the maintenance window. 

    From the Main menu > Device Management(Option 5)  > Flush Device Reports(Option 4)

    Note: "This will restart the device and will take about 10 minutes to flush the reports. Meanwhile, the device won’t be reachable over the network."

    Thanks,