Sophos XG auxiliary device produces IPSec down/up alerts in Sophos Central

Can you upgrade to MR5? This could potentially resolve this. If not, this could be the same issue like this post: https://community.sophos.com/sophos-xg-firewall/f/discussions/127867/switch-off-alerting-of-ipsec-tunnel-up-down

Depending on the issue: Because the second appliance should not generate any alerts anymore. 

See: https://docs.sophos.com/releasenotes/index.html?productGroupID=nsg&productID=xg&versionID=18.0

There are two fixes in MR5 to address this in the first place. But there is another root cause for Central alerts, but not generated by the second appliance. 

Hi,

one remark from my side. Both of the clusters I mentioned above are running on latest version of MR-5.

Regards,
Bernd

Hi,

one remark from my side. Both of the clusters I mentioned above are running on latest version of MR-5.

Regards,
Bernd

But your Cluster are reporting this as the primary, not the AUX only, correct? 

Okay. Was wrong.
One of them is still on MR-4.

I updated the other one this morning from MR-4 ->MR-5 and there was some switching back and forth during the update.
 
Both are currently reporting from the active/primary node (only).