Multiple Firewalls WAN going offline intermittently for 2-15 minutes at a time

We use a program called PingPlotter for this sort of issue - https://www.pingplotter.com/

As it is a trace route program rather than a ping program, you can see which part of the network is dropping the traffic. Be aware though, prior to 18 MR-4, XGs don't respond to trace route traffic so you have to setup a separate monitor for the XG IP itself if you want to check the traffic isn't getting blocked before it reaches the XG (this issue was fixed in MR4).

Have you checked the logs to see if anything is logged at the time of the outages. For instance, all our 100 series XGs drop traffic for 2-4 minutes every time there is an IPS or ATP update. This is considered normal behaviour!

Thanks JasP

We use something similar, at the time of the drops the last hop out is the firewall, and the last hop in is the external IP prior to the firewall. So it does suggest something between the WAN interface on the firewall, the bridged router and the fibre going back to where the circuit terminates.

Quite a tricky one, just wanted to float it out there as like I say, it may have nothing to do with the XGs, just wondering if anyone else was having similar problems.

Thanks for your input.

You could perform something like a ring buffer tcpdump, which will overwrite itself on XG. 

Logging such tcpdump into /tmp/ and analyse it after a downtime should give you insights. 

You could perform something like a ring buffer tcpdump, which will overwrite itself on XG. 

Logging such tcpdump into /tmp/ and analyse it after a downtime should give you insights.