This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SD-RED 20 CONNECT AND DISCONNECT

Hi

I've set up 2 reds in different branches , from sophos xg i can see the reds link going UP for few time around 5min and it goes Down .
See in attachemernt
Any help please how to approch this problem

This thread was automatically locked due to age.

Parents

0 Erick Jan over 2 years ago

Hi,

Thank you for reaching out to Sophos Community.

Can you check the red.log to see if there might be any information that might assist us to further check.

Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Erick Jan over 2 years ago

Hi,

Thank you for reaching out to Sophos Community.

Can you check the red.log to see if there might be any information that might assist us to further check.

Erick Jan
Community Support Engineer | Sophos Technical Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 support support18 over 2 years ago in reply to Erick Jan

XG135_XN03_SFOS 19.0.0 GA-Build317# tail -f /log/red.log
Wed Dec 28 12:59:51 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 12:59:53 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:00:21 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:00:23 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:00:36 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:00:38 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:01:07 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:01:09 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:01:23 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:01:24 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Wed Dec 28 13:01:25 2022Z REDD INFO: Red devices: Connected: 0 Disconnected 2 En
abled: 2 Disabled: 0
execute_command_tcp: read(): Interrupted system call
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:02:42 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:02:44 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:03:26 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:03:27 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Wed Dec 28 13:03:28 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:03:30 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:04:12 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:04:14 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Wed Dec 28 13:04:15 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:04:17 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:04:57 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:06:11 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:06:13 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:06:26 2022Z REDD INFO: Red devices: Connected: 0 Disconnected 2 En
abled: 2 Disabled: 0
Wed Dec 28 13:06:36 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:06:37 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:06:54 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:06:56 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:07:22 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:07:24 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:07:40 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:08:20 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:08:22 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:09:20 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:09:22 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:10:06 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:10:08 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:10:28 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:10:30 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:10:52 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:10:53 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:11:14 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:11:16 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:11:27 2022Z REDD INFO: Red devices: Connected: 0 Disconnected 2 En
abled: 2 Disabled: 0
Wed Dec 28 13:11:36 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:11:38 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:12:54 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:12:56 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:13:40 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:13:41 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:13:42 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Wed Dec 28 13:13:43 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:14:26 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:14:26 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:14:27 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Wed Dec 28 13:14:28 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:15:12 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:15:14 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:16:20 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:16:22 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:16:28 2022Z REDD INFO: Red devices: Connected: 0 Disconnected 2 En
abled: 2 Disabled: 0
Wed Dec 28 13:16:37 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:16:40 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:17:11 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:17:13 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:17:24 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:17:26 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:17:58 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:18:00 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:18:44 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:18:46 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:19:19 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:19:21 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:20:04 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:20:06 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:20:44 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:20:46 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:20:51 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:20:53 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:21:29 2022Z REDD INFO: Red devices: Connected: 0 Disconnected 2 En
abled: 2 Disabled: 0
Wed Dec 28 13:21:30 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:21:32 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:22:15 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:22:17 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:22:45 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:22:47 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:23:32 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:23:34 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:24:15 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:24:17 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Wed Dec 28 13:24:18 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:24:19 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:25:01 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:25:41 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:25:43 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:26:16 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:26:18 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:26:30 2022Z REDD INFO: Red devices: Connected: 0 Disconnected 2 En
abled: 2 Disabled: 0
Wed Dec 28 13:26:39 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:26:41 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:27:25 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:27:27 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:27:41 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:27:43 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:28:27 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:28:29 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:29:12 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.117.90.115': SSL accept attempt failed
Wed Dec 28 13:29:14 2022Z REDD INFO: server: New connection from 196.117.90.115
with ID R20003XFP9R32B3 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Wed Dec 28 13:29:24 2022Z REDD ERROR: server: Can not do SSL handshake on Socket
accept from '196.70.26.10': SSL accept attempt failed
Wed Dec 28 13:29:26 2022Z REDD INFO: server: New connection from 196.70.26.10 wi
th ID R20003XQHDFWBD4 (cipher ECDHE-RSA-AES256-GCM-SHA384), rev1
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Reading REDv2 key from STDIN:
Cancel
Vote Up 0 Vote Down

Cancel
0 LHerzog over 2 years ago in reply to support support18

is your red firmware on XG up2 date?

Please post SFOS Version and current RED Firmware.

Can not do SSL handshake sounds like one side is not accepting the Cipher ECDHE-RSA-AES256-GCM-SHA384 or Hostname

I would dump the connection attempt:

tcpdump -i any host 196.117.90.115 -n -w /tmp/red.pcap

download the file from XG with scp tools and and analyze that file in wireshark

I suggest, you remove some company details from your screenshots.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 2 years ago in reply to support support18

Hey support support18 , Please share us the syslog.log !

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel