Sophos Firewall

Discussions XG Firewall Gateway alerts

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 6 replies
Subscribers 27 subscribers
Views 1084 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG Firewall Gateway alerts

Chris Portal over 4 years ago

Hi,

We have an XG-135 firewall that is emitting frequent down/up alerts on it's WAN port.

At one point, the firewall became unresponsive and had to by physically reset.

That may or may not be related to the alerts.

We have multiple public IP addresses assigned to the WAN port.

Is it possible to detect which address is causing the alerts?

Regards,

Chris P

This thread was automatically locked due to age.

Top Replies

rfcat_vk over 4 years ago in reply to Chris Portal +1

Hi Chris, i am asking about this setting. Ian

0 rfcat_vk over 4 years ago

Hi Chris,

the alert will be generated by the port you are testing in the WAN management tab.

You could also review the system logviewer for any hints.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Chris Portal over 4 years ago

Hi Ian,

All log viewer reports is our ISP's gateway address as the destination IP.

I was looking for a way to figure out which of the public IP's on the port might be the source of the issue, if that even makes sense.

Regards,

Chris P
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to Chris Portal

Which gateway IP address are you monitoing in WAN MANAGER?

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 Chris Portal over 4 years ago in reply to rfcat_vk

I had been focusing on the ISP gateway address. The three sub port addresses also appear in the log, mostly with "Could not associate packet to any connection", "Bad TCP checksum" or "Invalid packet" messages.

Chris P
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to Chris Portal

Hi Chris,

i am asking about this setting.

Ian
Cancel
Vote Up +1 Vote Down

Cancel
0 emmosophos over 4 years ago

Hello Chris,

Thank you for contacting the Sophos Community!

You can check the dgd.log, however please provide the screenshot rfcat is requesting.

Regards.
Cancel
Vote Up 0 Vote Down

Cancel