This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Firewall Notification System

Hi,

we are recently getting notifications very often:

Application Control daemon not running - restarted

and

Up2Date prefetch failed: All 4 Authentication Servers failed

Firewall is SG330 with latest firmware.

Any ideas what is causing this?



This thread was automatically locked due to age.
Parents
  • Hi, 

    Take a took at the afc.log, kernel.log, and up2date.log for more information about the errors. Please refer to, Sophos UTM Logfile information.

    This will give you some insight and alongside, you can post the logs here and to the support team to help you find the root cause. 

    Thanks

  • afc.log:

     

    2018:01:22-12:53:22 fw-sophos-1 afcd[4412]: libnavl: W: ValidateTransaction: No valid Web transaction for this connection - abandoning flow
    2018:01:22-12:54:34 fw-sophos-1 afcd[4412]: libnavl: W: ValidateTransaction: No valid Web transaction for this connection - abandoning flow
    2018:01:22-12:55:56 fw-sophos-1 ulogd[4269]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="1" outitf="eth7" mark="0x203c" app="60" srcmac="x" srcip="x" dstip="x" proto="17" length="132" tos="0x00" prec="0x00" ttl="63" srcport="6881" dstport="6881" 
    2018:01:22-12:55:56 fw-sophos-1 ulogd[4269]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="1" outitf="eth7" mark="0x203c" app="60" srcmac="x" srcip="x" dstip="x" proto="17" length="132" tos="0x00" prec="0x00" ttl="63" srcport="6881" dstport="6881" 
    2018:01:22-12:56:44 fw-sophos-1 afcd[4412]: libnavl: W: ValidateTransaction: No valid Web transaction for this connection - abandoning flow
    2018:01:22-13:00:19 fw-sophos-1 afcd[4412]: libnavl: W: ValidateTransaction: No valid Web transaction for this connection - abandoning flow
    2018:01:22-13:02:08 fw-sophos-1 afcd[25377]: _afc_cfg_file_plugin_parse: 1912 protocols registered
    2018:01:22-13:02:08 fw-sophos-1 afcd[25377]: libnavl: E: InitInstance: Error initializing instance of plugin HPACK_UTIL
    2018:01:22-13:02:09 fw-sophos-1 afcd[25377]: loaded plugin '/var/sec/chroot-afc/lib/afc/vineyard.so'
    2018:01:22-13:02:09 fw-sophos-1 afcd[25377]: _afc_cfg_file_plugin_parse: 1912 protocols registered
    2018:01:22-13:02:09 fw-sophos-1 afcd[25382]: AFC ready.
    2018:01:22-13:02:10 fw-sophos-1 ulogd[4269]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="1" outitf="eth7" mark="0x103c" app="60" srcmac="x" srcip="x" dstip="x" proto="17" length="327" tos="0x00" prec="0x00" ttl="63" srcport="6881" dstport="24331" 
    2018:01:22-13:02:10 fw-sophos-1 ulogd[4269]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="1" outitf="eth7" mark="0x203c" app="60" srcmac="x" srcip="x" dstip="x" proto="17" length="132" tos="0x00" prec="0x00" ttl="63" srcport="6881" dstport="8999" 
Reply
  • afc.log:

     

    2018:01:22-12:53:22 fw-sophos-1 afcd[4412]: libnavl: W: ValidateTransaction: No valid Web transaction for this connection - abandoning flow
    2018:01:22-12:54:34 fw-sophos-1 afcd[4412]: libnavl: W: ValidateTransaction: No valid Web transaction for this connection - abandoning flow
    2018:01:22-12:55:56 fw-sophos-1 ulogd[4269]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="1" outitf="eth7" mark="0x203c" app="60" srcmac="x" srcip="x" dstip="x" proto="17" length="132" tos="0x00" prec="0x00" ttl="63" srcport="6881" dstport="6881" 
    2018:01:22-12:55:56 fw-sophos-1 ulogd[4269]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="1" outitf="eth7" mark="0x203c" app="60" srcmac="x" srcip="x" dstip="x" proto="17" length="132" tos="0x00" prec="0x00" ttl="63" srcport="6881" dstport="6881" 
    2018:01:22-12:56:44 fw-sophos-1 afcd[4412]: libnavl: W: ValidateTransaction: No valid Web transaction for this connection - abandoning flow
    2018:01:22-13:00:19 fw-sophos-1 afcd[4412]: libnavl: W: ValidateTransaction: No valid Web transaction for this connection - abandoning flow
    2018:01:22-13:02:08 fw-sophos-1 afcd[25377]: _afc_cfg_file_plugin_parse: 1912 protocols registered
    2018:01:22-13:02:08 fw-sophos-1 afcd[25377]: libnavl: E: InitInstance: Error initializing instance of plugin HPACK_UTIL
    2018:01:22-13:02:09 fw-sophos-1 afcd[25377]: loaded plugin '/var/sec/chroot-afc/lib/afc/vineyard.so'
    2018:01:22-13:02:09 fw-sophos-1 afcd[25377]: _afc_cfg_file_plugin_parse: 1912 protocols registered
    2018:01:22-13:02:09 fw-sophos-1 afcd[25382]: AFC ready.
    2018:01:22-13:02:10 fw-sophos-1 ulogd[4269]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="1" outitf="eth7" mark="0x103c" app="60" srcmac="x" srcip="x" dstip="x" proto="17" length="327" tos="0x00" prec="0x00" ttl="63" srcport="6881" dstport="24331" 
    2018:01:22-13:02:10 fw-sophos-1 ulogd[4269]: id="2019" severity="info" sys="SecureNet" sub="packetfilter" name="AFC Block" action="drop" fwrule="1" outitf="eth7" mark="0x203c" app="60" srcmac="x" srcip="x" dstip="x" proto="17" length="132" tos="0x00" prec="0x00" ttl="63" srcport="6881" dstport="8999" 
Children
No Data