IPSEC Failover group not created

Hi MMASLOUH,

Thank you for reaching out to the Community! 

We sincerely apologize for the inconvenience! Could you please provide the support case number for this issue you reported? I will help you out with the follow-up. 

What is the current firmware version on your firewall, and did you notice any spike in resource utilization? 

Also, just for testing, try to log out from the firewall and login, then try to configure the IPsec connection group.

Thanks,

Hi

The firmware version is: SFOS 17.5.14 MR-14-1

The resources utilization seems fine.

I tired to restart the device but i get the same problem.

Hi MMASLOUH,

Could you please replicate the issue and collect the following logs from your firewall. 

SSH into the XG firewall by following this KBA: Sophos XG Firewall: How to SSH to the firewall using PuTTY utility

• To connect using SSH, you may use any SSH client to connect to port 22 of the SFOS device.
• Select option 5 Device Management.
• Select option 3 Advanced Shell.

Run the following command to collect applog: tail -f /log/applog.log 

Run the following command to collect garner: tail -f /log/garner.log 

You also need to put the CSC service in debugging and collect csc logs. 

Run the following command to put the csc service in debug: csc custom debug

Note: Run the same command to remove the service from debugging. 

Run the following command to collect csc logs: tail -f /log/csc.log 

Thanks,

Hi

i have to put the CSC service in debugging before i replicate the issue, right ?

Hi MMASLOUH,

Yes, put the CSC service in debugging before replicating the issue. 

Thanks,

Hi MMASLOUH,

I followed up with you via PM; please provide the screenshot of the failover IPsec group configuration that you were trying to configure on your firewall. 

Thanks,

Hi

I sent you the screenshot.

it was my mistake, i kept the same interface for both tunnels.