Sophos XG auxiliary device produces IPSec down/up alerts in Sophos Central

Can you upgrade to MR5? This could potentially resolve this. If not, this could be the same issue like this post: https://community.sophos.com/sophos-xg-firewall/f/discussions/127867/switch-off-alerting-of-ipsec-tunnel-up-down

Depending on the issue: Because the second appliance should not generate any alerts anymore. 

See: https://docs.sophos.com/releasenotes/index.html?productGroupID=nsg&productID=xg&versionID=18.0

There are two fixes in MR5 to address this in the first place. But there is another root cause for Central alerts, but not generated by the second appliance. 

Can you upgrade to MR5? This could potentially resolve this. If not, this could be the same issue like this post: https://community.sophos.com/sophos-xg-firewall/f/discussions/127867/switch-off-alerting-of-ipsec-tunnel-up-down

Depending on the issue: Because the second appliance should not generate any alerts anymore. 

See: https://docs.sophos.com/releasenotes/index.html?productGroupID=nsg&productID=xg&versionID=18.0

There are two fixes in MR5 to address this in the first place. But there is another root cause for Central alerts, but not generated by the second appliance. 

Hi,

one remark from my side. Both of the clusters I mentioned above are running on latest version of MR-5.

Regards,
Bernd

But your Cluster are reporting this as the primary, not the AUX only, correct? 

Okay. Was wrong.
One of them is still on MR-4.

I updated the other one this morning from MR-4 ->MR-5 and there was some switching back and forth during the update.
 
Both are currently reporting from the active/primary node (only).

At the first step I'll try to update the appliances tomorrow and will come back with a feedback.

Hi,

the update to MR5 did not go as expected. But this topic is for another case / post.

There are no false alerts in central from the aux device since both devices run with the new version.

Many thanks for your support.