Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Upgrade: UTM120 -> SG125 gone bad

I got a new SG125 (V9) appliance and attempted to replace my old UTM120 (V8) with it.
I uploaded the last settings backup into the SG125 and when I checked all the settings seemed to have come over correctly and everything appeared fine.

When I did the physical replacement and put the new appliance on the network everything seemed to work. Our site to site VPN was up, internet surfing and file uploading worked, etc... I thought everything was golden.
Then I found there was no inbound email traffic. Nothing was coming in over the LAN and anyone attempting to send or receive emails from outside the LAN was getting connection errors. I attempted to telnet to the appliance over port 25 from the WAN side and couldn't connect. Then I tried the LAN side and was able to connect and sent an email manually with no problems. 

One final thing I attempted was setting up a firewall rule to pass all traffic. While that ran, I tried connecting from the WAN side again and checked the log but there were no connection attempts showing.

* I am using the SMTP Proxy in simple mode (no profiles) which then either relays (when applicable) emails or delivers to the internal email server.
* NAT and Firewall settings are all the same between the appliances. Nothing is blocking or changing inbound email ports.

...and yet somewhere, somehow all the email ports are being blocked...

In the end I had to put the old 120 back in place. [:(]

Does anyone have any ideas what I might be missing or should check?

Thanks
-- 
Loren McDonald


This thread was automatically locked due to age.
Parents
  • Thanks for letting us know.

    That's on my standard list of instructions for every installation.  Hard to believe that your reseller didn't mention that in advance.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Thanks for letting us know.

    That's on my standard list of instructions for every installation.  Hard to believe that your reseller didn't mention that in advance.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?