Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Active Sync Stops Working After a Couple Weeks. Rebooting Fixes it.

No other way to describe this other then the subject line.  Both on 16.05 MR2 and now 16.05 MR3 the firewall just stops responding to Active Sync requests from random cell phones (both Android and iPhone).  Other external services all work, internet access works, etc but Active Sync just stops responding externally for random users.  Rebooting the firewall restores service back to normal.

 

This has happened twice so far, once on Mr2 and once on MR3.  We did the MR3 upgrade on April 9th and we had the issue this afternoon (4/24).  Rebooted and everything was back to normal.

 

Any ideas or is this a known issue?  When the problem was happening I opened up the Log Viewer and didn't see anything wrong or being blocked.  And again a reboot restored the service.

 

Side note - This is happening on a XG310.  We have in total 160 cell phone users so there is a decent amount of active sync traffic at any given time.  Nothing else needs to be rebooted (email server, phones, etc) only the XG.

 

 

-Allan



This thread was automatically locked due to age.
  • Allan,

    what about the waf.log inside /var/tslog ?

    Anything interesting there?

    Thanks

  • So in my var\tslog folder I don't have a waf.log.   Closest I have is a waf_timer.log but that didn't have anything of use in it.   Anything else I can check or anthing I can check next time it starts happening?    Here is the contents of that directory:

     

    XG310_WP01_SFOS 16.05.3 MR-3# ls
    1                                    ddc.log                              l2tpd.log                            sandboxd.log
    SNIPPED_S2S_VPN.log        dgd.log                              lcd.log                              sig_upgrade.log
    VPN.log                              dgd.log.0                            licensing.log                        sigdb.log
    WINGc.log                            dhcpd.log                            mdev.log                             sigmigration.log
    WINGc.log.0                          dhcpd6.log                           migration.log                        skein.log
    access_server.log                    dnsd.log                             mrouting.log                         smbnetfs.log
    apache.log                           dropbear.log                         msync.log                            sslvpn.log
    apiparser.log                        error_log.log                        nasm.log                             sslvpn.log.0
    applog.log                           error_log.log.0                      networkd.log                         sysinit.log
    av.log                               firewall_rule.log                    ntpclient.log                        syslog.log
    avd.log                              fqdnd.log                            openvpn-status.log                   tmclient.log
    avd.log.0                            ftpproxy.log                         ospfd.log                            tomcat.log
    awarrenhttp.log                      fwlog.log                            pimd.log                             u2d.log
    awarrenhttp_access.log               garner.log                           pktcapd.log                          uma.log
    awarrenmta.log                       hbtrust.log                          postgres.log                         up2date_av.log
    awarrensmtp.log                      heartbeatd.log                       pptpvpn.log                          validation.log
    awed.log                             hostapd.log                          radvd.log                            validationError.log
    bgpd.log                             hotspotd.log                         readobject.log                       validationError.log.0
    bwm.log                              hwmon.log                            red.log                              vhost.log
    clientless_access.log                improxy.log                          regen_client_bundle.log              vpncertificate.log
    crreportdb.log                       ips.log                              reportdb.log                         waf_timer.log
    csc.log                              ipsec.log                            reportmigration.log                  warren.log
    cschelper.log                        ipsec_Key_Bank_Site_to_Site_VPN.log  reverseproxy.log                     wc_remote.log
    ctasd.log                            ipsec_LSI_Site_to_Site_VPN.log       reverseproxy.log.0                   wifiauth.log
    ctipd.log                            iview.log                            ripd.log                             zebra.log
    ctsyncd.log                          iview.log.0                          sandbox_reportd.log

     

    I did check the system.log and I get tens of thousands of these:

    Apr 25 01:47:07 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:07 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:07 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:07 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:07 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:07 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:07 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:07 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:08 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:08 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:08 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:08 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:08 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:08 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:08 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:08 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:08 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:08 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:08 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:08 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:08 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:08 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:08 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:08 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:08 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:08 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number
    Apr 25 01:47:08 (none) local7.err wafgr[3355]: failed to convert ruleid to integer: - is not a decimal number

     

    Not sure what thats about but you can see the time stamps...there are alot repeating over and over.

     

    -Allan