Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firewall Connection Lost in Sophos Central

Dears

I facing problem to manage my firewall from Sophos central as error below

The firewall is not responding to the login request as fast as expected. Please wait a while and try again, or check that the firewall is not experiencing any internet connectivity issues.

Note : Wan Link is up & internet is good 



This thread was automatically locked due to age.
Parents Reply Children
  • Hi Lucar,

    it`s not fixed.

    Our Case ID 05794975 

    BR Gerd

  • same here.

    Received a bunch of alert mail, this morning again. Firewalls still showing as disconnected in log.

    2022-10-19 08:51:41Z INFO central-connect[23154]:221 main:: - Polling for SSO to PIC-URI [https://utm-cloudstation-eu-central-1.prod.hydra.sophos.com]/sophos/api/v1/firewalls/C420xxxx0F/sshTunnel  Timezone: Europe/Berlin
    2022-10-19 08:51:41Z INFO central-connect[23154]:271 main:: -  got response of poll for SSO. Status: disconnected backupExpected:
    2022-10-19 08:52:11Z INFO central-connect[24424]:221 main:: - Polling for SSO to PIC-URI [https://utm-cloudstation-eu-central-1.prod.hydra.sophos.com]/sophos/api/v1/firewalls/C420xxxx0F/sshTunnel  Timezone: Europe/Berlin
    2022-10-19 08:52:11Z INFO central-connect[24424]:271 main:: -  got response of poll for SSO. Status: disconnected backupExpected:
    

    "got response of poll for SSO. Status: disconnected" logged permanently.

    Should be connected, I guess. At least yesterday there  were some lines showing connected.

    2022-10-18 12:20:25Z INFO central-connect[23376]:221 main:: - Polling for SSO to PIC-URI [https://utm-cloudstation-eu-central-1.prod.hydra.sophos.com]/sophos/api/v1/firewalls/C420xxxxx0F/sshTunnel  Timezone: Europe/Berlin
    2022-10-18 12:20:30Z INFO central-connect[23376]:271 main:: -  got response of poll for SSO. Status: connected backupExpected:

  • The poll request is for SSO. Essentially if you want to login to the firewall from Central (SSO), the firewall will poll this request (Therefore you see this 1/6 attempt to login). This should not be related to the issue you are seeing here. 

    In log viewer / Central audit you should see somebody using the SSO on 12:20 (UTC+0) for this firewall. 

    __________________________________________________________________________________________________________________

  • yes, it was me yesterday. Thanks for pointing that out. So SSO here is for active remote administration from Central.