Sophos RED 15 will request call to restart

Hi JUBIN BMS KLANG 

That is expected behavior as mentioned in this KBA Sophos XG Firewall: RED (Remote Ethernet Device) technical training guide. If the RED loses connection to the XG for any reason (either XG has rebooted or lost internet or RED has lost internet connection), the RED stops routing traffic.

Hi Jaydeep, 

I think you has misunderstood my question. 

i am encountered when Internet is down at HQ "XG firewall" location , internet at branch will been impact too. 

that is 2 difference site , HQ internet down and Branch internet should be normal without issue and of cause the RED tunnel will disconnected because can't get the communicate with HQ site. 

I just want to commit when tunnel is down and internet still normal. 

thank you 

ray 

Its quite a common case and by design.

https://community.sophos.com/products/unified-threat-management/f/remote-ethernet-device-red/57531/branch-office-down-if-utm-down

UTM and XG act in the same way.

If the XG is down, not reachable, the RED will reboot until it can reach the XG. 

And in this time window, the traffic will not be forwarded. 

Hi, 

Can set it do not reboot the RED when not reachable? 

thank you 

ray 

Not Possible.

Mean to said whatever i configure the Sophos RED mode from standard/split or Transparent/split also will reboot automatically when HQ - XG Site internet down ? 

no matter branch internet is stable once HQ XG site down will impact the branch internet ? Branch internet will down is because the Sophos red keeping reboot up and down again and again until the XG tunnel up only stable :( 

thank you 

Maybe you could think about to replace the RED with a smaller XG Box and use IPsec instead.

Would resolve your issue at all and you do not need any subscription on XG to build up a IPsec Tunnel. 

Would lead to more granular configuration. 

Maybe you could think about to replace the RED with a smaller XG Box and use IPsec instead.

Would resolve your issue at all and you do not need any subscription on XG to build up a IPsec Tunnel. 

Would lead to more granular configuration.