Why does sophos XG not recognise that I have a connection

Hi Ashruf,

SSH into the XG -- go to option 5 then 3. 

Run the command tail -f /log/licensing.log 

Reproduce the synchronization and it will tell you where it is failing. 

I would recommend opening a support case for this as well. 

Thanks,

The log revealed the following

INFO Jan 02 09:46:11 [0]: --requestType = 1
INFO Jan 02 09:46:11 [0]: --serial = C01001Y7K2P42CC
INFO Jan 02 09:46:11 [0]: --deviceid = 566c840b-f906-4655-8f32-1afc770ed7df
INFO Jan 02 09:46:11 [0]: --model = SF01V
INFO Jan 02 09:46:11 [0]: --vendor = SO01
INFO Jan 02 09:46:11 [0]: --upgradedFrom = 0
INFO Jan 02 09:46:11 [0]: --fwversion = 17.5.1.347
INFO Jan 02 09:46:11 [0]: --cert = /_conf/certificate/licensing/mfgr_vendor_SO.pem
INFO Jan 02 09:46:11 [0]: --token = Token-Id:SO-D5C052A8
INFO Jan 02 09:46:11 [0]: --key = /_conf/certificate/licensing/mfgr_vendor_SO.key
INFO Jan 02 09:46:11 [0]: URL : eu-prod-utm.soa.sophos.com/.../applianceactivation
INFO Jan 02 09:46:11 [0]: request : { "serialNumber": "C01001Y7K2P42CC", "deviceId": "566c840b-f906-4655-8f32-1afc770ed7df", "model": "SF01V", "deviceFirmwareVersion": "17.5.1.347", "vendorCode": "SO01" }
ERROR Jan 02 09:46:12 [0]: curl_easy_perform(60) failed: Peer certificate cannot be authenticated with given CA certificates
ERROR Jan 02 09:46:12 [0]: licensing_do_activation() : Problem in contacting Server
{ "statusmessage": "Operation failed due to an unknown error. Please contact Support.", "status": "510" }

I applied the workaround at https://community.sophos.com/kb/en-us/132458 but the error stays the same.

Perhaps try rebooting and if the issue persists, try the KB steps once more.

If that does not resolve things and the logs are the same, I would suggest opening a support ticket to investigate what is going on at a deeper level. 

Is there any HTTPs Inspection between XG WAN and the Internet? 

Any Kind of Proxy? 

He can try this command:

openssl s_client -showcerts -connect eu-prod-utm.soa.sophos.com:443

then paste the output here. 

I would suggest he doesn't have the XG DNS setup correctly.

Ian

I would suggest he doesn't have the XG DNS setup correctly.

Ian

Next Guess: Do you have the proper Timezone selected? 

I have my DNS setup by DHCP and I made no changes to the default config.

Like mentioned in the Log.

You need to restart the Appliance.

It should come up and after login into the webadmin, the appliance should ask for a activation and everything should work fine. 

I just ran the registration using chrome and it went through. Not sure why firefox gave me all this trouble. Thanks for the help all.

I have noticed issues with registration if you have an adblock add-on to your browser before. 

Can confirm UBlock broke XG registration for me.