SDWan Disconnect when ISP in third site has issues

Hi John Nickell 

If sites are connected with IPSec VPN, the issue is fixed with the latest firmware version 

Below the link is Sophos release note : 

https://docs.sophos.com/releasenotes/index.html?productGroupID=nsg&productID=xg&versionID=19.0 

Firmware link: https://community.sophos.com/sophos-xg-firewall/b/blog/posts/sophos-firewall-v19-mr1-re_2d00_release-build-365-is-now-available 

Regards

Yes the connection is IPSec, I'm not sure if it's "flapping", willing to try it.  We've had a bumpy rollout with the Sophos config I'd like to let the MR1 release get it's bake in before deploying it. 

I get "No Upgrades available".

All the firewalls registered with valid licenses under Administration > Licensing?

Please login https://id.sophos.com/  Click on MySophos-->Network Protection -->View Device 

Please check if the firmware is available on Sophos Licensing Portal ?

Refer the link : https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/BackupAndFirmware/Firmware/FirmwareDownloadFirmware/index.html#download-firmware 

Above link is to check the latest firmware is available on portal or not

if you get no Upgrades available on Sophos XG contact your partner to confirm model hardware is supported as migration path is not available for the Sophos XG you have checked

Regards

The devices have valid licenses. I suspect they're just not in the 'ring' to get the new update yet? Is that possible?

Please Go to System-->Admininstration --->Backup and Firmware -->Firmware  and click on check for new firmware under  latest available firmware click on Check new firmware and check status on all the three firewall 

Regards

Hi John,

We release firmware updates through a phased mechanism, described here:

https://community.sophos.com/sophos-xg-firewall/b/blog/posts/firewall-firmware-release-process-and-timeline

We are currently in the staging step for v19.0 MR1, which explains why your devices show no update available. However you should be able to download the update manually on MySophos and apply it to your firewalls. 

bobbylam Thanks, I'd seen the staging document and figured we'd get the update in the next couple of weeks. We've got 3 or 4 production affecting issues on the current release of 19, but they are not constantly impacting us so I want to avoid rushing to update to MR1 until it's had a chance for others to beta test it. 

I'm continuing to monitor this, and will update when it becomes available in the Full rollout stage phase for sure, I just don't want to rush into a new set of issues.

I'll update this thread with our findings when we do update.

John Nickell said:

I get "No Upgrades available".

same with message for 

Site B is an XGS2300
Site C is an XGS126.?

Regards

yes, I will update here when the updates are available to me through the standard release cycle.

If the firmware is not available as per the standard release cycle or if you have upgraded the firmware to the latest and still facing the issue , as a troubleshooting step can you try disabling Firewall Acceleration from the console and share the status of your observation?

SSH to the XG using Putty go to option 4 and execute the below command : 

console > system firewall-acceleration show

console > system firewall-acceleration disable

Thanks and Regards

We performed the update to MR1 this evening and this issue is still present. It was after an exhausting support session to get to that point so I didn't get any additional troubleshooting done. I did confirm that we are still seeing this issue on MR1.

We performed the update to MR1 this evening and this issue is still present. It was after an exhausting support session to get to that point so I didn't get any additional troubleshooting done. I did confirm that we are still seeing this issue on MR1.