short period of losing connection and reconnect

Hello Wesley,

Thank you for contacting the Sophos Community.

When this issue happens, does it affects all users at the same time?

Try disabling Firewall Acceleration and monitor if the issue persists.

console> set advanced-firewall tcp-selective-acknowledgement off
console> system firewall-acceleration disable

Regards,

Hi Emmanuel,

it affects users but not at the same time.

please have a look on the Pattern updates for IPS. This may cause interupts, mostly on small appliances.

Do the install times match your disconnects reported by the users?

what do you mean by install time?

I did the IPS update but it stilll did not fix the issue

no, I meant, check the date+time of last successful update on the screen - does this match the interruption?

no, it does not.

no, it does not.

They are broadcasts that the firewall will reject. They are not the cause of your failures.

Ian

any suggestion?

You write "Users are reporting short period of internet loss" is this only affecting WAN interruption or also inside LAN?

There are some text logs where you can find events of your WAN interface:

grep -C 10 "name of your wan connection" /log/garner.log

grep "name of your wan connection" /log/snmpd.log

Maybe it's detecting offline status.

If you are using STAS, make sure the setting "Restrict client traffic during identity probe" is set to No. The default (Yes) causes drops in connectivity.