Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 27 subscribers
  • Views 5039 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Mails don't pass through the firewall to Exchange server

ASG

HI All ,

I have a very weired case,

Suddenly 2 days ago XG Firewall Started to drop mail, even without any notification to the external senders.

the scenario was : XG firewall (SFOS 16.05.5 MR-5) running well for some time, but after new firmware (SFOS 16.05.6 MR-6) it worked well for couple of days ,

then all of a sudden any external mail form any source is not lost and not delivered to the exchange server.

 

i did some digging in the business policy .

the configuration is APPLICATION template (Email Servers SMTP), with Both SMTP/SMTPS enabled.+ ports allowed (25,465,587,143,993,443) - this configuration worked well for long time with no issue till the sudden issue happened,

to troubleshoot,

1- Excluded the firewall and published the exchange server with real IP ---- All Mail Came in well.

2- Disabled the SMTP Scan in the Policy -  ( Yahoo(uses SMTP) mails came in well but all others didn't )--

3- Disabled the current Policy .

4- Created new Policy using the Template (DNAT/FULL NAT/LOAD BALANCING), as this policy doesn't have SMPTS or SMTP SCANning. then all mails went through very well.

currently i am on this workaround . but of course as it doesn't scan the mail traffic ,i am getting all mails including SPAM

 

i guess it is a bug or some pattern update that made this issue.

And these are my current Pattern Versions

 

Did anyone face this issue before or have a clue how to resolve.

Kindly Advise,



This thread was automatically locked due to age.
Parents
  • 0

    Hi , 

    If the issue is experienced after the Firmware upgrade, I would recommend to roll back to MR5, Today MR-7 is released, Could you try to upload that instead. The reason of rollback is to enable to go to the previous version, so if you are experiencing the same issue on MR-7 you may roll back to MR -5 and open a support ticket to analyze this issue.

Reply
  • 0

    Hi , 

    If the issue is experienced after the Firmware upgrade, I would recommend to roll back to MR5, Today MR-7 is released, Could you try to upload that instead. The reason of rollback is to enable to go to the previous version, so if you are experiencing the same issue on MR-7 you may roll back to MR -5 and open a support ticket to analyze this issue.

Children
No Data