Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 31 replies
  • Subscribers 34 subscribers
  • Views 2357 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG / XGS ongoing issues list

Steve Klassen

Hi there,

I've been hesitant with moving from SG to XGS. I did dip my toe into the XG pool by setting up one location with an XG Firewall, however the experience was poor. So I'm currently planning a hardware refresh with SG for the next 3 years as I still think XGS is half-baked. I'm aware that XG is old, and XGS is a newer version and might be better, than XG, however...

Issue #1 - I have had many issues with our XG router not renewing it's WAN IP when the ISP changes it. I hear this is still an issue in XGS.

Issue #2 - There is no release/renew for any interfaces. I hear this is still an issue in XGS. And yes, a workaround is to assign a static IP, and then remove it... but if SOPHOS can't correct something simple like this for years... I can only imagine what other issues that I don't know about are also still un-fixed. 

Issue #3 - I use one of our SG devices as an internal relay for our Copiers. I have a consultant that deals with SOPHOS across many client businesses, and they've told me that they gave up on using the mail relay on XGS as it has been unreliable. They moved their clients to a paid mail-relay-service because of how poorly it works. 

These are some of the issues I recall off the top of my head. I'd be interested in feedback on these issues.

Also if anyone knows of other problems like these, that I may not be aware of, please add them to this list.

Thanks 



This thread was automatically locked due to age.
Parents
  • 0

    Let me rephrase this: 

    1. This should be fixed by now, based on the PPPoE Protocol. There are certainly some scenarios, which could still lead to this problem (if the ISP is doing something odd). 

    2. You can simply save the interface without change - This will reload the interface and essentially doing the same like "Turn off/on" on UTM. 

    3. Mail relay is a question, what they do. SMTP Auth is not implemented on SFOS. This means: you cannot do a smtp auth against the firewall. You could do a host based relay. SFOS uses Exim like UTM does. BTW: SMTP Auth is a poor design decision IMO - You do not have a summarized Email summary / logs. I would always recommend to send all Emails first to the Email server. 

    __________________________________________________________________________________________________________________

  • 0 in reply to LuCar Toni

    That is good news the PPPoE user interfaces now have a automatic renew on link failure, but what about the non PPPoE users who have a standard DHCP addressing function from their ISP/RSPs that is still broken. Using link manager to indicate a link has failed only sends notifications does not cause the address renew request to be sent.

    Ian

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

  • 0 in reply to rfcat_vk

    Hi DHCP client (XG) will not send new IP requests until its lease time is over. Making the modem ON/OFF or plugging/unplugging the physical link will not trigger any renewal events. This is how the DHCP client works in SFOS as per DHCP RFC. On interface update event we forcefully restart the DHCP client which will generate the request again.

    Regards,

    Vishal Ranpariya
    Technical Account Manager | Sophos Technical Support
    Sophos Support Videos | Knowledge Base  |  @SophosSupport | Sign up for SMS Alerts |
    If a post solves your question use the 'This helped me' link.

  • 0 in reply to Vishal_R

    Thank you for the explanation, but that does not work in real life. The time to live is an artificial XG parameter, the time to live used by the ISP/RSP is way shorter eg if you disconnect and reconnect a short time eg less than a minute you will usually be assigned a new IP address. So maybe it is time for Sophos to move away from the theoretical document to a real world process and reduce the stress on your customers?

    Ian

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

Reply
  • 0 in reply to Vishal_R

    Thank you for the explanation, but that does not work in real life. The time to live is an artificial XG parameter, the time to live used by the ISP/RSP is way shorter eg if you disconnect and reconnect a short time eg less than a minute you will usually be assigned a new IP address. So maybe it is time for Sophos to move away from the theoretical document to a real world process and reduce the stress on your customers?

    Ian

    XG115W - v19.5.1 mr-1 - Home

    If a post solves your question please use the 'Verify Answer' button.

Children
No Data
Unfiltered HTML