Sophos XG SFOS 18.0.4 MR-4 Notifications

Hi Benjamín Burga Polo, Thank you for reaching out to community team..!! It seems you are receiving email alerts during SA rekeying as well. Can you please check and confirm IPSec logs ( strongswan.log, charonlog) or from GUI Log viewer ( System > IPSec) for last few email alerts received during SA rekey events? 

Hi Vishal!

Thank you for your answer. Very kind from you.

This is a tipical email received and a similar log:

I hope this info can help.

Do you know what I need to change to solve it?

Have a nice day

Hi Vishal!

Thank you for your answer. Very kind from you.

This is a tipical email received and a similar log:

I hope this info can help.

Do you know what I need to change to solve it?

Have a nice day

Hi Benjamín Burga Polo, As of now there is one open issue with "NC-55213 -IPsec tunnel up/down - several email notifications are sent when the connection is terminated on Responder".

Can you please open a support case investigation ? So support team may validate your issue getting match with this one  or not by checking required logs file, so based on the issue identification next action can be decided.

Thank you Vishal.

Following your advice, I have opened a case with support Sophos team.

Have a nice day

I have the same issue. I ended up turning off the VPN notifications and will wait for a release from Sophos.