This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos XG issues with Insteon Hub

I have been using the UTM for years and recently upgraded to the XG due to my license count quickly approaching 50...

Everything has been fine on XG and I have even noticed much better performance, particularly wireless.

Reason for my post is I noticed that my Insteon Hub which controls my smart light switches and various other smart devices is unable to connect to it's cloud service. I did not have to create any rules previously in UTM and there are minimal entries in the XG log all being allowed so I am really at a loss here and hoping someone else has already encountered this.

Any help would be appreciated (I am running v18.0.3)

This thread was automatically locked due to age.

Top Replies

rfcat_vk over 4 years ago in reply to uncled15 +1

Hi, from what you are saying is that your UTM does not have any tight firewall rules. From your description of the logviewer issue indicates that your device is not matching any firewall rule. Did…

0 rfcat_vk over 4 years ago in reply to shred

I have found that most IoT devices do not like decrypt and scan because you cannot install a CA on them.

A suggestion try putting a small switch between your device and the other network devices.

Ian
Cancel
Vote Up -1 Vote Down

Cancel
0 shred over 4 years ago in reply to rfcat_vk

Yeah, I'm not talking about enabling SSL/TLS inspection rules for an IoT device. Reference my post: "...despite the fact I have the device's cloud domain on the Local TLS exclusion list." I'm saying that simply enabling SSL/TLS inspection will break some IoT devices, even if those devices are excluded from decryption and scanning via exclusion rules. This is a known issue with one of my IoT devices that I can replicate 100% of the time that I created a thread for several months ago.

Again, simply enabling SSL/TLS inspection breaks some IoT devices, even if you don't have any rules specified to decrypt and scan and/or have them on an exclusion rule. In other words, they are not being decrypted and scanned.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to shred

For those that break I enable the web proxy even though they don't use it.

Ian
Cancel
Vote Up 0 Vote Down

Cancel
0 uncled15 over 4 years ago in reply to shred

Thanks for the reply. Yes I have toggled the SSL/TLS inspection to OFF and the result is the same, I have played with every setting I can find under IPS as well and the only way I have been able to get it to allow the traffic is if I disable the IPS service which seems less then ideal.
Cancel
Vote Up 0 Vote Down

Cancel
0 uncled15 over 4 years ago in reply to uncled15

Very odd, even if i set the IPS policy to none or make a new empty policy and apply it to the firewall rule traffic is still denied. only if I stop the IPS service does it start to work.
Cancel
Vote Up 0 Vote Down

Cancel
0 LHerzog over 4 years ago in reply to uncled15

what is in the IPS logs? maybe packet flood. you cannot exclude packet flood by deselecting IPS Policy because it is global.

if it is flood, enter hosts here:
Cancel
Vote Up 0 Vote Down

Cancel
0 uncled15 over 4 years ago in reply to LHerzog

there is only 1 entry in the IPS log over a 24 hour period and it is not relevant
Cancel
Vote Up 0 Vote Down

Cancel