Unable to download archive logs via ssh

Hi Adrian De Santi 

Thank you for reaching out to the Community! 

Could you please let me know if you are trying to upload logs to the FTP server?

There are two different methods to download files from the XG that are listed in the following KBA: Sophos XG Firewall: How to capture packets and download the Packet Capture.

Thanks,

Hi Thanks for your response we are using this method https://community.sophos.com/kb/en-us/123337

However, have noticed the following;

o   All files named x.log have permissions -rw-r--r--. This means read access to all, read/write to the owner (user root).

o   All files named x.log.0 have permissions -rw-------. This means only the owner (user root) can access them. Since we are logging in as user admin, we clearly don’t have read permissions on the rotated log files

What's the best method to access the files and download with scp?

Hi Adrian De Santi 

I have replicated this in my LAB, and it appears the files with permission "-rw-------" can't be downloaded or copied with SCP. 

I would suggest you to use FTP to upload log files form XG to FTP server.  You could use the following command: curl -T filename.log.0 ftp://<UserName>:<Password>@<FTP Server>

Thanks,

Hi Adrian De Santi 

I have replicated this in my LAB, and it appears the files with permission "-rw-------" can't be downloaded or copied with SCP. 

I would suggest you to use FTP to upload log files form XG to FTP server.  You could use the following command: curl -T filename.log.0 ftp://<UserName>:<Password>@<FTP Server>

Thanks,