This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG106 to XG125 - RED Tunnels Drop 10x per day

XG106 and XG125 devices are brand new with dedicated business cable connections. XG106 is on v18, XG125s are on v17.5.

The XG125s are the RED Servers, and have up to 7 RED tunnels.

The XG106s are the RED Clients, and have up to 3 RED tunnels.

Each morning I clear the alerts in Sophos Central, then and by the following day I have around 100 alerts from all offices that the tunnels are up/down. Is this expected behavior?

We just switched all 8 offices to XG appliances a week ago from pfSense. We formally had Site-to-Site OpenVPN tunnels between all offices on pfSense; they would be up for months at a time.

This thread was automatically locked due to age.

Parents

0 Argo over 4 years ago

Please check that you are not using compression on the tunnels, if you are then turn it off, I had similar issues.
Cancel
Vote Up 0 Vote Down

Cancel
0 dan becker over 4 years ago in reply to Argo

All tunnels are using compression...
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 dan becker over 4 years ago in reply to Argo

All tunnels are using compression...
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Argo over 4 years ago in reply to dan becker

the bane of compression on Red Tunnels, suggestion - turn it off.
Cancel
Vote Up 0 Vote Down

Cancel
0 dan becker over 4 years ago in reply to Argo

I suppose that would help the CPU utilization also; on the XG106, they are all running about 60-80% CPU.

The XG106s are all 1-user home offices, simple firewall rules with web, application and IPS filtering enabled to WAN.
Cancel
Vote Up 0 Vote Down

Cancel
0 dan becker over 4 years ago in reply to dan becker

after compression is disabled on the RED server, do I have to re-download the provisioning file, and re-deploy on RED client side?
Cancel
Vote Up 0 Vote Down

Cancel
0 Argo over 4 years ago in reply to dan becker

I am not sure, I would expect so, I usually do this with Red unit, and this is all automatic.

it would also reduce the CPU utilisation.
Cancel
Vote Up 0 Vote Down

Cancel