Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 27 subscribers
  • Views 1988 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

ATP problem

Reda_Admin

Hi all,

i'm facing a strange problem with ATP:

we have 2 sites connected via VPN, both with a virtual appliance in v.18 MR 4.

In site 1 there's a software running on a windows server that every day connects to some devices in site 2 through port 80 and 502 (modbus).

When ATP is disabled everyhing works fine, if i enable ATP (in "log only" mode) in site 1 and/or site 2 the connection is not working, but i have no logs written anywhere.

Is there a way to troubleshoot this strange behavior, maybe via CLI?

When both appliances were in v.17.5 everything was fine.

Thank you

michele



This thread was automatically locked due to age.
Parents
  • +1

    Hello Reda,

    Thank you for contacting the Sophos Community!

    Do you see anything in the IPS.log or in the GUI when the issue happens?

    You could try running this command from the console of the XG 

    console> set ips ac_atp exception fwrules 2 (Substitute the 2 for the Firewall rule used by your IPsec)

    Regards,

Reply
  • +1

    Hello Reda,

    Thank you for contacting the Sophos Community!

    Do you see anything in the IPS.log or in the GUI when the issue happens?

    You could try running this command from the console of the XG 

    console> set ips ac_atp exception fwrules 2 (Substitute the 2 for the Firewall rule used by your IPsec)

    Regards,

Children