WAF no longer working after backup XG and then restore to XGS

Hello Michael Großmann ,

Thank you for reaching out to the community, may we know the firmware on XG 230 to XGS 2300 ?
As there has been a known issue where WAF might stop working after restoring a backup - NC-87676


Would suggest you to lock a support service request !

Hi Vivek Jagad,

all devices are on 19.0.1 MR-1 Build365

Best regards

Michael

Have you locked a support service request  yet ? if yes can you share the support service request number ?

Hi Michael Großmann 

Please log a support case, refer NC-87676 within knwon issue list, docs.sophos.com/.../index.html

I still found the following errors in reverseproxy.log:

(Several:) AH00112: Warning: DocumentRoot [/sdisk/waffiles/...] does not exist
AH00526: Syntax error on line ... of /cfs/waf/reverseproxy.conf:
Invalid encrypted key

So it seems to have something to do with the encryption key (sskm)?

I reset the sskm on the XG, created a new backup to file (with a new password) and uploaded it to the XGS (which I previously reset the firmware) directly during setup (and not after initial setup with "restore backup" from the GUI).

But I can only check tonight if everything works now.

Hello Michael Großmann 

The error "Invalid encrypted key" indeed related to  NC-87676, please check tonight and if it still does not work then raise support ticket.

root cause here is the database corruption for WAF profile/signature which is not being decrypted and hence does not allow reverse proxy service to start.

And this to add on to what Hardik_R  said, this might be a corruption too due to backup workflow, this is fixable with the help of support. 

what if you use a home version and cant open a support request?