Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG Home keeps crashing

Hi all,

 

since some weeks the Sophos XG Home firewall is restarting for no appearent reason.

I am (of course) completely disconnected from the internet. Some minutes later the web interface says "Firewall is starting".
I am running the XG on a Windows Server 2016 Hyper V with the 2 GB RAM and 2 vCPUs. The Firmware is up to date: SFOS 16.05.5 MR-5

This has been working quite well for a long time. I think the problems have been started with version 16.05.3, but I am not 100% sure.

I was also searching for some logs, but haven't found any hint. Is there any particular log file for system crashes?
I even do not know if the firewall is crashing ... Maybe it's a regular reboot?

Thanks for your help



This thread was automatically locked due to age.
Parents
  • I'm not using XG Home, but I haven't had any such problems with the XG OS itself.  If you run it in a brand new virtual machine on a new install, does that work?

  • Thanks for your reply.
    I would like to better understand why this is happening. If this is caused by some configurtion it will occur again. Maybe it's related to the connected interfaces. And that's not easy for me to reproduce.

    But of course, if there is no other idea I'll definitely do that.

  • Is there any other idea? Are there any particular log files I can double check?

    Today the Sophos started again and that is quite anoying ...

  • Hi,

    a couple of things to check

    1/. how often is your server updating, currently MS is pumping out security updates almost daily

    2/. 2gb of ram is on the small side even for an XG

    3/. check your NIC power settings both server and XG

    4/. check your XG disk capacity

    5/. check your CPU usage

  • Hallo,

    thanks for your answer. I actually might found something.

    1/. how often is your server updating, currently MS is pumping out security updates almost daily
    Windows is downloading the update, but it is not automatically installing it. I also thought about that, but I am pretty sure it's not the Hyper V which is restarting, as other VMs are still reachable when XG is down.

    2/. 2gb of ram is on the small side even for an XG
    Sorry, my first post was not accurate. The VM has min RAM of 2GB and max RAM of 6GB (max for XG Home). The RAM usage is at ~80%. Should I increase the min RAM?

    3/. check your NIC power settings both server and XG
    Nothing special here. The server has 4 integrated NICs. Windows is allowed to suspende the device to save energy and the device can wake up the computer.
    Where can I check the power settings on the XG?

    4/. check your XG disk capacity
    That's an interesting point I never thought of it. The vDisk has a size of 100GB. Actually 99.63GB are in use.
    Obviously the disk is full. Which size do you recommend for the XG Home? Can I make a clean up? I think after the first installation the disk was used by ~40%

    5/. check your CPU usage
    The XG has 4 vCPUs. The usage is about 1-2%.

     

    Today a new firmware update was released. I'll install this update during the day.

     

    thanks for your help.

  • Hi,

    I can see two possible issues,

    1/. set all NICs to no power saving.

    2/. the XG and UTM require fixed memory, so go for 4gb and check your daily reports to see if your memory usage is getting towards your limit.

  • Hallo,

    I'll increase the RAM to 6GB. I was initially thinking that XG can handle dynamic RAM - my fault.

    What do you think about the disk usage? Could this be a problem? Do the XG require more than 100GB?

  • Disk usage is fine unless you are generating lots of reports. 100gb should be fine because at every restart the logs are set to 0.

    You need to remember that the XG and UTM are running realtime stuff and can't wait for a lower priority system to assign resources.

  • Thanks for your help.

    I have disabled dynamic RAM and icreased the RAM size to 6GB. The RAM usage is now ~40%.
    I've also updated SFOS to the latest release (SFOS 16.05.6 MR-6)

    I'll keep an eye open, whether the problem occurs again in the next days.
    I will post the outcome of my tests ...

  • Again, thanks for your help.

    I have not recognized any outage since I've increased the RAM to 6GB.

Reply Children