Unable to Register XGS4300 To Sophos Cloud

Hello NeonSky,

Thank you for reaching out to the community, please refer the following useful KB articles below:

1.) Use the super admin credentials to register with Sophos Central: https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/SophosCentral/HowToArticles/CentralManageXG/index.html

2.) Use OTP to register with Sophos Central: https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/SophosCentral/HowToArticles/CentralRegisterOTP/index.html

3.) Log file details: https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Logs/LogFileDetails/index.html
To check the logs related to centrla
==================
Command lines:
Status: central-register --status
Register: central-register --unregister
Backend Register: /bin/central-register --register -u *EMAIL_OF_CENTRAL_ACC* -p *PASSWORD_OF_CENTRAL_ACC* -s *SERIALNUMBER_OF_XG*

====================
Under the centralmanagement.log see if the sophos urls is able to resolve through your ISP ?
====================
Check the service SSOD via cmd: service -S | grep ssod 
is running or not ?

Hi,

Thanks for the response.

No luck with backend registration either + verified I was doing the other two methods correctly as per the KB.

In centralmanagement.log, looks like it's not resolving due to an SSL verification error?

Also below is output of the service:

Here are my SSL rule settings:

Yup NeonSky that's right utm.cloud.sophos.com fails can you try the registration process with another ISP ? 

Hi,

Not sure I can unfortunately.  Unsure as how this is working perfectly well in other areas of the office but not resolving here only.

To give a bit of background, I have just connected this at the bottom of the chain if you like so as not to disrupt any of the existing network architecture until it is set up properly and ready to be put in out-of-hours.

Basically this is plugged from a switch port into port 2 which is bridged to port 4 which has a laptop plugged in.  Laptop gets an ip via DCHP and has full internet access when plugged in this way so not sure what to make of that.

Do I have other options?

Thanks,

Joe

Hi,

Not sure I can unfortunately.  Unsure as how this is working perfectly well in other areas of the office but not resolving here only.

To give a bit of background, I have just connected this at the bottom of the chain if you like so as not to disrupt any of the existing network architecture until it is set up properly and ready to be put in out-of-hours.

Basically this is plugged from a switch port into port 2 which is bridged to port 4 which has a laptop plugged in.  Laptop gets an ip via DCHP and has full internet access when plugged in this way so not sure what to make of that.

Do I have other options?

Thanks,

Joe

what is the current status of time and valid license on Sophos XG ?

Please Go to System-->Admininstration --->Licensing | Time 

Are able to view Device on https://id.sophos.com ?

Regards

Please find this info:

Time is correct and matches where I'm sat.

I can't see it on https://id.sophos.com/ 

NeonSky said:

I can't see it on https://id.sophos.com/ 

Not able to see your same appliance on above link under  MySophos-->Network Protection -->View Device? 

If you can plan to reboot and check? reboot the firewall with fsck-on-nextboot from Sophos XG SSH CLI console

Regards

Not showing in there, and an attempt to register it shows this:

Also can't get that command to run.  Filesystem is read-only so can't do the old sudo touch /forcefsck way either.

Have tried in option 4 console as well as 5 > 3 for advanced shell.

Thanks,

Joe

Check licensing.log as this issue is resolved by Sophos Support contact Customer Care

Regards

Under the console [option 4 in the ssh menu] 
#system diagnostics show disk
And share the results ?

NeonSky said:

Also can't get that command to run

console>system fsck-on-nextboot show

console>system fsck-on-nextboot on