Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 5 replies
  • Subscribers 29 subscribers
  • Views 2941 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG-Firewall(Auxiliary) goes into failure!

Dirk Herold
We have got two XG310 with HA (passive/active).
Both unit works fine for 1,5 years.
For two weeks the Auxiliary went into failure (frozen unit).
After a restart of the unit it works fine for about 3 hours.
Then it goes into failure.
I did open a case and I got a replacement unit.
I changed the unit and the issue appears again.
Anyone an idea?


This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to Dirk Herold

    Hi Dirk,

    1) There are some logs regarding HA. Check them for suspicios things.

    2) Maybe Heat is an issue? Is the firewall always crashing at the same time?

    3) Check the logs of the switches the firewall is connected to for some strange behaviour (all connected ports)

    4) Put a PC in the heartbeat network and do a permanent ping to the heartbeat interfaces (is the firewall really dead?) Monitor what happens on heartbeat link by mirroring the ports. Is your heartbeat going through the dumb switch? Usually it is a good idea to connect the ports of the firewall directly.

    5) Remove the HA and reconfigure it again.

    6) The most dangerous one: If you can afford some downtime: Make a backup of your configs. Make the auxiliary unit the active one. See what happens after some hours. Which firewall is going down?

    Best regards,
    Bernd

  • 0 in reply to BeEf

    Hi Bernd,
    thanks you.
    1)How do I get to the HA logs?
    2)No, it is air conditioned.
    3)I checked it already, nothing.
    4)
    5)rebooting the auxiliary unit, deactivating HA on the primary and automatically on the secondary, after a short time the same failure appears on secondary/auxiliary
    6) I have it done with the original secondary unit already. With the same result. The faulty went into the error

    Kind regards.

  • 0 in reply to Dirk Herold

    1) Unfortunately we just sent back our test setup and start with the implementation in 1-2 weeks so I currently do have only single firewalls and our SG 330 Cluster (which works completely different). 

    I guess this might help: https://community.sophos.com/kb/en-us/132211#High%20Availability

    6) So you mean the faulty secondary becomes the primary and crashes after some time and the other firewall (that never crashes) becomes primary again?

    Another proposal: Take out the secondary, install it with a standard image and test whether it crashes. If this is the case it must be a hardware problem (even though your already got it replaced).

    BTW: Are you 100% sure your really got back another firewall? Maybe the did some tests, were not able to reproduce it and send you back the original one. Or mistakenly send you back the original one instead of the replacement.