This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Central Add Firewall not working

Hello...We will be migrating many SG's to XG's and were considering using the SG to XG deployment tool.  However, there is a lot of legacy stuff that we do not want to come over so we are electing to programming them from scratch. However, if we attempt to "Add Firewall" via the partner portal using our credentials (accessing the customer portal) or logging in using the customer portal (both super admin accounts) when we attempt to Add Firewall (new one - not configured) we get the point to register and proceed we get an error in the bottom right saying "400 - A bad request was made".  This has been like this for a few days.  We called the customer care department and they indicated that we need to register it via mysophos which we did and it DID register.  However, it is still not in Sophos Central.  When we attempt to add it we still get the 400 error.  The support person indicated that we need to add it through mysophos and then manually program the XG's, bring them on like and then enable Sync in the XG.  But this completely defeats the purpose of adding the firewall first so we can create a zero/light touch file to USB to preprogram the firewall.  This will certainly make things much more difficult on our end to have to bring up each firewall (47 of them) and manually program them.

Is anyone else having this issue?  Am I missing something?  I thought zero touch was an option here.

Thanks for any info



This thread was automatically locked due to age.
  • Hello Michael,

    Thank you for contacting the Sophos Community!

    Are these firewalls showing under the partner account in mysophos >> Network Protection >> View Devices? 

    Do you happen to know if during your call with Customer Care a ticket was created? if so can you share it with me?

    Regards,


     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support VideosProduct Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
  • Thanks for the reply. The 3 I added at the moment do show up under the CUSTOMER mysophos account. They also show up in our partner portal in sophos central under firewalls. But if we go into the customer admin portal via sophos central or directly into cloud.sophos.com as the customer (all super admin) it does not allow us to add a firewall under firewall management. I get the 400 error trying to add it.

    The case number from today is 03544765

    Thanks for any assistance. We are proceeding with manual configuration at the moment but we need to get these firewalls into sophos central. 

  • Are those appliances already registered? As far as i know, only "New" appliances can be added via Light touched. So you cannot add firewall, already registered / installed to CM with this process. 

    __________________________________________________________________________________________________________________

  • No they were not registered before we called support. We were following the instructions online for light touch since we really wanted to use it. When we were receiving the 400 error we called customer care and that is when they said to register via mysophos which seemed to contradict everything we read about light touch. Either way it still does not work. We manually configured 3 of the units so we can get up and running but we really want to get a resolution to this before we start on the rest of them.

    1. Does this work for anyone else? 
  • Hello...I checked this morning and this issue is still present.  I have not heard back from support on this issue so I am curious is this is happening to anyone else.?  Something is definitely wrong with this functionality. 

    Thanks for any info..We will just need to plan to configure manually since our SG licenses will be expiring any day.

    See below the error we are getting.

  • Is this a SG Firewall? This process is only available for new XG Hardware. 

    __________________________________________________________________________________________________________________

  • No...These are all XG's.  I was just saying that we are replacing about 47 old SG's with XG's and are trying to register the new XG's.  That is where the issue is. 

  • Hello Michael,

    Thank you for the Case ID, checking on it, looks like the case has been closed since yesterday.

    If you have a different case let me know. If you didn't agree to get this case close let me know. Also, I can provide you with some Trial Licenses for UTM if you need them. You can send me a PM.

    Regards,


     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support VideosProduct Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.
  • Thanks. The new case is 03546016

    It is still an open issue.. Thanks for the offer for the trial keys. I might take you up on it since there is no way we will get all the we deployed in time 

  • Hello Michael,

    Thank you for the new Case ID. I have left a note to reach out to you tomorrow! 

    Have you tried using a Super Admin account that is only on the Customer's Central Admin account?

    During Zero Touch the account needs to tie to the specific customer's instance.

    Regards,


     
    Emmanuel (EmmoSophos)
    Technical Team Lead, Global Community Support
    Sophos Support VideosProduct Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.