Sophos Firewall

Discussions Tunnel between 2 Sophos XG

Sophos Firewall requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 4 replies
Subscribers 27 subscribers
Views 322 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Tunnel between 2 Sophos XG

GernotMeyer over 4 years ago

Hi,

we have 2 XG Systems (both 18.4). There is a Tunnel that stops working sometimes between both.Tunnel shows "up"!

There is no error in system log.

FW log from sender logs the packets but they are not arrive on the target.

Tunnel off and tunnel on and it's all fine again.

Any idea how to solve this? Where to search for hints?

Because tunnel down and up solves the data flow I guess it should be one of the Sophos XGs. Or not?

Thanks for hints!

This thread was automatically locked due to age.

0 LuCar Toni over 4 years ago

You can check on both appliances the drop packet capture and the tcpdump. Does any of both appliances drop the packets or use the wrong route?

BEcause if you restart the tunnel, it sounds like the route is not applied and traffic will be routed differently.
Cancel
Vote Up 0 Vote Down

Cancel
0 GernotMeyer over 4 years ago in reply to LuCar Toni

Thanks for reply. What should cause the route failure? How can a route change when doing nothing?

As I wrote: The source XG logs the correct firewall rule. the destination XG logs nothing (also no drop).
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to GernotMeyer

Do you see any kind of interface in the logviewer, which are used?
Cancel
Vote Up 0 Vote Down

Cancel
0 GernotMeyer over 4 years ago in reply to LuCar Toni

Source Sophos: always LAN Port as source and WAN Port as destination

Destination Sophos: always IPSec0 as source and LAN as destination.

but this is common...
Cancel
Vote Up 0 Vote Down

Cancel