Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 15 replies
  • Subscribers 30 subscribers
  • Views 3563 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG in VMware : Request Timed Out for ping after long pause..

huud

Hi,

I installed the XG in VMware and resumed the XG VM from a pause of about 1-2 hours and now the firewall is unreachable, and the devices cannot ping the interfaces either but devices in the same network can ping each other.

The Sophos console cannot ping its interfaces either.

It only came to work after a restart, and this is not the first time I'm noticing this, will go through the settings to see if there's anything.

Is there any timeout or inactivity setting ?

Thanks.



This thread was automatically locked due to age.
Parents
  • 0

    Hi  

    Are you using Sophos XG Home edition?

    There are no specific settings in the XG for VMware but you can check for admin inactivity - https://community.sophos.com/kb/en-us/123195

  • 0 in reply to Keyur

    Hi  

    Yes I'm using the Home Edition, and I'm starting to think if this is due to snapshot restore (checking that now as I just restored a snapshot of the firewall and the devices don't ping at all).

  • 0 in reply to huud

    Can you log in via Shell (Console) in Vmware and go to the advanced shell.

    Check the ifconfig MAC Addresses of the Ports to the Vmware Switch Settings. Are all ports correctly matched or did Vmware / XG mixed up the Ports? 

  • 0 in reply to LuCar Toni

    Im trying to gain access to the device but for some reason cannot access it.

  • 0 in reply to LuCar Toni

    LuCar Toni said:

    Can you log in via Shell (Console) in Vmware and go to the advanced shell.

    Check the ifconfig MAC Addresses of the Ports to the Vmware Switch Settings. Are all ports correctly matched or did Vmware / XG mixed up the Ports? 

    I can confirm the ports arrangement in VMware correspond appropriately to the MAC address in the XG ports.

  • 0 in reply to huud

    The issue came to be pausing VMs in VMware Workstation, and when Sophos XG VM resumed after a few hours is unable to attain connectivity, but the bigger problem is that even after restarting the firewall the connectivity does not occur sometimes.

  • 0 in reply to huud

    Pausing a VM is always hard to deal for a virtual machine. 

    In V18, Sophos updated the Vmware Tools, maybe this will resolve this issue. As i do not recommend to suspend the VMware anyways.

    BTW: Maybe check the time settings of XG. Suspending the VMware could create issues with the certificates and the dates. 

  • 0 in reply to LuCar Toni

    I'll test the v18 and see.

    As for date and time they are from an NTP server.

  • 0 in reply to huud

    As we do not take about vmware workstation, instead ESXi, i would suggest to take a look at the Vmware Database. Maybe there is an issue about this problem. 

    I know in fact, that in the latest vmware workstation, there is a problem about the VMware NAT adapter, which simply drops all traffic until you restart the host service. Maybe there is a similar issue with your setup. 

    If you could recreate this issue and perform a tcpdump on XG, you could see, if the packets actually arrives at your Interface or not. 

  • 0 in reply to LuCar Toni

    Thanks for pointing those 2 out.

    I'll go through vmware database and Sophos dump as well.

    Appreciate your help, thanks a lot.

  • 0 in reply to huud

    Hi huud,

    what does the screenshot of the logs mean in relation to the initial ping problem?

    Normal TCP Connections should time out after a while. If the firewall is suspended for a while the connections will time out ...


    This does not explain the ping issue, though.


    Possibly it helps to clear the arp table of the client and/or the switch.


    I'd always make an explicit deny rule at the end of the firewall rules. This schould contain all zones (and not the zone any). It is not the same as having no deny rule at all .... 

  • +2 in reply to huud

    Hi  

    The Sophos XG whether its Home edition or paid for version, does not support pausing of the VM or snapshot.

    This is true for all versions of the XG for now.  There are plans to change this in future versions of the SFOS OS.

    Your best option going forward now, is a rebuild and restore from backup if you have.  Please ensure you disable snapshots and any other backup technologies running on the VM for this guest.  You must use the XG's builtin backup option.

    Thanks!

Reply
  • +2 in reply to huud

    Hi  

    The Sophos XG whether its Home edition or paid for version, does not support pausing of the VM or snapshot.

    This is true for all versions of the XG for now.  There are plans to change this in future versions of the SFOS OS.

    Your best option going forward now, is a rebuild and restore from backup if you have.  Please ensure you disable snapshots and any other backup technologies running on the VM for this guest.  You must use the XG's builtin backup option.

    Thanks!

Children
No Data