STAS, collector not reachable after reboot

Hi guys,

I'm run into a tricky issue with the STAS. Everything is working fine until I reboot the SFOS 17.0.2 MR-2 (appliance software on KVM). Ater the reboot the XG keep the user in learning mode, dropping traffic, until the user is marked as unauthenticated.

There are the errors on access_server.log:

cta_requester_init: ip=10.100.0.25 port=6677
net_open: server couldnt connected: Error: 0xffffffff
IN NET_CLOSE: Closing SOCKET 26
TSSO_client_init: network connection failed
cta_requester_init: TSSO_client_init failed for server 10.100.0.25:6677

If I delete the collector IP in the authetication section (or via console) and add it again the system works.

The collector is reachable via a static route. This below is a synthetic network diagram:

Sophos Collector is reachable from the XG (and vice-versa), all the traffic is accepted.

Thank You!

Best Regard

Andrea