About a year ago we swapped firewalls from Meraki to Sophos XG. Since we made this change we have had frequent email alerts generated since some of the Unifi access points are not able to properly communicate with the controller which is located in the cloud (AWS). The access points eventually reconnect to the cloud controller. We have a mix of Unifi AP HD, Unifi AP-LR, and Unifi AP-AC Mesh
The Access points are still online as I can ping them and can log into them using ssh. This issue started right away with one of our locations when we swapped out but recently a couple other locations are now doing the same thing even though before we didn't have this issue after we swapped firewalls.
I have tried several different things to fully resolve this:
1. Created a firewall rule to allow traffic from the access points to the URL of the cloud controller.
2. Created an exception to IPS for SID 40145 and applied to firewall rule created above. https://community.ui.com/questions/L3-Adoption-issues-Server-Reject/f0272c12-21bf-45e1-ad1a-d21e237248cd
3. Removed several access points from the controller and factory reset the access point. Then re-adopt the access point through SSH using the set-inform option. This works for a while but eventually the access point will start doing the same thing
4. Bypassed stateful inspection from the Access Point network to the IP address of the cloud controller as well as bypassed stateful inspection from the cloud controller to the network with the access points - This actually made things worse as all access points were showing as offline on the controller after I made this change, so I deleted both of these and the access points came back.
Has anyone else run into this issue with Sophos XG and Unifi equipment? Usually I will see two or maybe three devices at a time show offline but they will eventually reconnect.
For this firewall, I am running 18 MR3 but will update to 18 MR4 soon.
This thread was automatically locked due to age.
