This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG Firewall freezes up completely every month or so, nothing in logs so I can't determine the cause

At one of our client sites, an XG firewall works flawlessly most of the time, but every month or so it just stops working.  You can't ping it, it stops routing traffic, just nothing.  When you physically look at the firewall it looks fine and the activity lights blink.  Every time I've tried to track down a cause, I haven't been able to find one.  For example, in the system logs, those are normal up to the point where it stops functioning, and the logs don't resume until after a power cycle.  I have most of the logging enabled so it should catch at least something.  Any ideas to the cause of the freezing, or why nothing is caught in the logs?



This thread was automatically locked due to age.
Parents
  • Hi  

    I would request you to connect the device over serial console cable and enable log capturing in the putty as a session output, you have to keep it connected until the issue occurs to capture the logs that can provide an RCA behind this. - https://community.sophos.com/kb/en-us/123197

    You may also run fsck as well.

    Check file system integrity of all the partitions. Turning ON this option forcefully checks the file system integrity on
    next device reboot. By default, check is OFF but whenever device goes in failsafe due to following reasons, this check
    is automatically turned ON:

    • Unable to start Config/Report/Signature Database
    • Unable to Apply migration
    • Unable to find the deployment mode

    fsck-on-nextboot[ off | on | show ]

    Once the check is turned ON, on the boot, all the partitions will be checked. The check will be turned OFF again on
    the next boot.

    If the option is ON and the device boots up due following reasons, then file system check will not be enforced and
    option will be disabled after boot:

    • Factory reset
    • Flush Device Report

    Please also check system graphs for CPU usage.

  • Hi Keyur, thanks for the reply.  I'm not onsite so the serial cable connection will have to wait.  I did check the system graphs though, take a look.

    Notice how it just drops off completely.  All the graphs show this for that time slot.  I'll connect with Putty and turn on fsck for next boot.

Reply
  • Hi Keyur, thanks for the reply.  I'm not onsite so the serial cable connection will have to wait.  I did check the system graphs though, take a look.

    Notice how it just drops off completely.  All the graphs show this for that time slot.  I'll connect with Putty and turn on fsck for next boot.

Children