[SOPHOS AP55C ] Unable to migrate Sophos AP55C from Sophos XG105 to Sophos Central Wireless

Hello there,

Thank you for contacting the Sophos Community

Make sure you are disabling the Wireless module from the XG

(System >> Administration >> Device Access. And Disable all of the Wireless Protection for all of the Zones)

Regards,

Hello,

Thank you for your help !

I have disable Wireless Protection for all zones but it still doesn't work.

I thought it could have been the router but there is no router between the firewall and the provider. It is the firewall that acts as the router.

Regards,

Raphaelle B

Hello there,

Thank you for the screenshot.

Have you also disabled Wireless Protection from Wireless >> Wireless Settings >> Global Settings?

If the issue remains, if you do a tcpdump do you see the packets leaving the XG?

Regards,

is there a DHCP server, serving IP addresses for the AP?

Is it on XG?

If this is on XG, you can see, if it received an IP address.

If it did not receive IP address, check this KB and enable DHCP global scope 

Next, check the IP address it received in Firewall, TLS and Webfilter logs. Probably there is a port or URL to Sophos central beeing blocked or beeing intercepted by HTTPS decryption.

Make sure all ports are open and all requested URL by the AP are excluded from TLS and HTTPS scanning.

Check this thread for ports and URL required from documentation AND a port beeing undocumented and needed, at least for APX, maybe also for 55C.

Also, there is a need for the APs to allow NTP to ANY address.

Hello,

I have disabled Wireless protection on Global Settings + Device access

But it still dosn't work :/

Regards,

Raphaelle B

Hello,

Thanks for your reply.

It's on XG yes. He is the DHCP server and my AP received an IP : 

The AP works fine when i add it on XG.

I have read your post and add an firewall rule that allow all services for the AP : 

But it still doesn't work too :/ 

Regards,

Raphaelle B

Hi,

you don't need a NAT.

Ian

Please confirm, the logs I mentioned do not show any blocks for the Source IP.

Hello,

Thanks for your reply.

I have unchecked the NAT Masquering on the firewall rule like you said.

I have re tried the attribution but it's already weird.

I have check the Policy tests : 

prod.hydra.sophos.com and apu.sophos.com doesn't work but i throught it's normal.

Weird things: 

The AP communicate only with DNS i don't know if its weird too ? I think, it's only because it wait to be assigned.

Regards,

Raphaelle B

Hello, 

Here you are in my last post.

Regards,

Raphaëlle