v19.0 upgrade risks

The Links are online. 
I have change the LAG at the Firewall from Auto-Negotiation to 10000 Full duplex -- >  The LACP link come up.

After then I change back the LAG interface to Auto-Negotiation. It works..


Then I restart the Firewall and no LACP Link come up.

Yes of course. The auto negotiation is only happening when the interface is coming up. If you change it later you have a running config and nothing will happen until you do a reboot.

After reboot the interface get the right speed but the LAG become no speed information.

Any idea?

Yes. Configure a fixed speed. There is no disadvantage doing that. 

Network devices behave sometimes different after updates etc. Probably some timing issue.
(I once had a similar issue when updating VMWare from 6.7 to 7.0. Took them more than a half year to fix this - never tested this though because we changed the way how the server was conneced from a (distributed) trunk to two single lines.)

Thank you for your support.

My system is now working very well.

My VPN clients can connect but no traffic to internal network. Still working on solution...

Hello Pedro,

maybe you are affected by this one: https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/132121/ssl-vpn-ipv4-lease-range-changes-in-sfos-v19

A patch can be requested for v18.5 MR3 and v19 systems prior to the next releases by opening a Support Case.