This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

403 Error when Trying to Register Home Use XG Firewall

Hello All,

Attempting to evaluate switch from SG UTM  to XG Firewall (SW-SFOS_17.0.8_MR-8-209), but I am unable to complete the registration process due to the following error:

When attempting to connect to https://eu-prod-utm.soa.sophos.com I receive a 403 error as below:

 ,{"errorCode":"ITSERVICELAYER_CLIENT_AUTHENTICATION_ERROR", "message":"IIS error: HTTP 403.0 - Forbidden", "statusCode": 403}

 I am able to ping from the device advanced console to the same url with no errors.

I have also registered the home use serial number through mysophos.com and attempted to get to a 'synchronize' option within the XG Firewall web gui, but it just brings up the registration window each time, which fails at the last step of connecting/re-directing through the web site above.

I'm a long time home user of the SG UTM product, but this registration failure has me stumped.  I've already read through multiple XG registration threads here and I couldn't find one that addressed this specific problem.

Thanks in advance for any help you can provide.

PD



This thread was automatically locked due to age.
Parents
  • Hi,

    Can you please post the whole licensing.log?

    Thanks

  • ManBearPig,

    I'd be glad to get the log if you can help me find it.  Is it saved in the file structure on the device?  Do I go through the device console or advanced device console?  Thanks in advance.

    PD

  • All,

    Using the shell to the advanced shell options through the web gui finally worked to get to the log directory and pull the following from the licensing.log:

    INFO      Jan 23 16:48:14 [0]: --requestType = 1

    INFO      Jan 23 16:48:14 [0]: --serial = C01001xxxxxxxxx

    INFO      Jan 23 16:48:14 [0]: --deviceid = 95c51753-4a40-4c4f-8e5e-af060db5d86c

    INFO      Jan 23 16:48:14 [0]: --model = SF01V

    INFO      Jan 23 16:48:14 [0]: --vendor = SO01

    INFO      Jan 23 16:48:14 [0]: --upgradedFrom = 0

    INFO      Jan 23 16:48:14 [0]: --fwversion = 17.0.8.209

    INFO      Jan 23 16:48:14 [0]: --cert = /_conf/certificate/licensing/mfgr_vendor_SO.pem

    INFO      Jan 23 16:48:14 [0]: --token = Token-Id:SO-D5C052A8

    INFO      Jan 23 16:48:14 [0]: --key = /_conf/certificate/licensing/mfgr_vendor_SO.key

    INFO      Jan 23 16:48:14 [0]: URL : eu-prod-utm.soa.sophos.com/.../applianceactivation

    INFO      Jan 23 16:48:14 [0]: request : { "serialNumber": "C01001xxxxxxxxx", "deviceId": "95c51753-4a40-4c4f-8e5e-af060db5d86c", "model": "SF01V" , "deviceFirmwareVersion" : "17.0.8.209", "vendorCode": "SO01" }

    ERROR     Jan 23 16:48:28 [0]: curl_easy_perform(6) failed: Couldn't resolve host name

    ERROR     Jan 23 16:48:28 [0]: licensing_do_activation() : Problem in contacting Server

    { "status": "6", "statusmessage": "No internet connection. Check your internet connection as described in the product documentation." }

     

      Again, as stated in my first post I was able to ping https://eu-prod-utm.soa.sophos.com and here is also a screen capture of the error:

     

     

    Other than the system date-time being incorrect, I need help figuring out what is causing these errors.  In the meantime I will get into the BIOS of the hardware and get the date-time corrected and try once again to register this device.

    Again, thanks in advance for any help.

    PD

  • All,

    Correcting the date-time seems to have resolved the problem.  Registration was finally successful and I can now see if XG Firewall will meet my needs.

    Cheers,

    PD

Reply Children
No Data