Does anyone experience the same issue? Since I noticed this several years, I have to reboot the unit in order for any changes I make to the Firewall or the IPSec VPN to take effect. It is a trouble because this unit is in use pretty much 24 hours a day. The current firmware version is 4.3.4-2 but it was doing with 3.#.#-#. I have tried the following troubleshooting but there was no luck. 1. Tested with our backup unit -> same issue observed and this confirmed the issue was not a hardware specific issue) 2. Factory reset and restored from the saved configuration file -> same issue observed 3. Factory reset the unit and mannually configured the unit from scratch -> same issue observed I wonder if this is how I should expect with this unit... Any help or advice would be appreciated.

Hi Mammonth1,Welcome to the community! The configuration can take effect immediately if make some change for firewall or ipsec vpn,no need to reboot device. Here is the recommended method if need to edit firewall or ipsec vpn:1.Disable firewall or ipsec vpn policy2.Edit policy3.Enable policy Thanks.

Yes, that how I make changes because it will not let me make any changes otherwise. Any change that I make in Firewall or IPSec VPN still requires a hardware reboot for the new change to take effect.It is very inconvenient in our 24 hours operation. I did not have any issue like this with our other firewalls such as Juniper, Nortel and Cisco, but only with SRX5308 I have to reboot every time I make changes. Even after deleting the VPN policy and look at the log, the deleted policy is active. It is very odd.Again, I always disable the policy before making a change then re-enable it. Has anyone had the same issue?

Mammoth1, Have you tried to perform a factory reset the SRX5308 then reconfigure it from scratch? If not yet, kindly try it and observe same problem occurs. Regards, DaneA NETGEAR Community Team

Yes, as said in my original post, I have done exactly as you asked. I reset it to the factory default and MANUALLY configured from scratch. It still does the same thing. I made a small change to the IPSec VPN a few days ago and it has not been taken effect. I will have to reboot it today but that causes the whole company operation to be interrupted. The strange thing is though, when it is rebooted, the WAN never come back up no matter how long I wait. I have to reboot it twice for the WAN to come back up. This behavior is very identical on both of our SRX5308 units. Just as an additional information... And the most odd behavior is that Deleted IPSec VPN tunnel or Firewall rule stays effective until I reboot the unit. It is very odd and very difficult to check the changes I am making...

As I was Googling for a similar issue, I found this. I believe this is due to the very same cause or bug. As my case, a change made to the unit will not be reflected until rebooting it. My issue is very same. Please look at the link. Thank you...https://community.netgear.com/t5/VPN-Firewalls/SRX5308-scheduled-reboot-active-after-disabling/td-p/975189

SRX5308 - Requires REBOOT every time setting changed in Firewall or IPSec VPN.

21 Replies

Dan_Z
NETGEAR Expert
Apr 13, 2017
Hi Mammonth1,

Welcome to the community!

The configuration can take effect immediately if make some change for firewall or ipsec vpn,
no need to reboot device.

Here is the recommended method if need to edit firewall or ipsec vpn:
1.Disable firewall or ipsec vpn policy
2.Edit policy
3.Enable policy

Thanks.
- Mammoth1
  Aspirant
  Apr 13, 2017
  Yes, that how I make changes because it will not let me make any changes otherwise.
  Any change that I make in Firewall or IPSec VPN still requires a hardware reboot for the new change to take effect.
  It is very inconvenient in our 24 hours operation. I did not have any issue like this with our other firewalls such as Juniper, Nortel and Cisco, but only with SRX5308 I have to reboot every time I make changes.
  Even after deleting the VPN policy and look at the log, the deleted policy is active. It is very odd.
  Again, I always disable the policy before making a change then re-enable it.
  Has anyone had the same issue?
  - DaneA
    NETGEAR Employee Retired
    Apr 19, 2017
    Mammoth1,
    
    Have you tried to perform a factory reset the SRX5308 then reconfigure it from scratch? If not yet, kindly try it and observe same problem occurs.
    
    Regards,
    
    DaneA
    
    NETGEAR Community Team
DaneA
NETGEAR Employee Retired
Sep 27, 2017
Mammoth1,

I apologize for the inconvenience this has caused you. I believe that all of the troubleshooting steps were already exhausted. If ever the 2 SRX5308 you have are still within the hardware warranty, I suggest you to open a chat or online case with NETGEAR Support and let them know your concern. You might need to submit a .doc or .pdf copy of the Proof of Purchase or Sales Invoice of the 2 SRX5308 for warranty verification. If ever the 2 SRX5308 are still within hardware warranty, an online replacement will follow.

Regards,

DaneA

NETGEAR Community Team
- Mammoth1
  Aspirant
  Sep 27, 2017
  Thank you for your response and advice.
  However, I am afraid that replacing both units will not resolve the issue, because both units behaves the same way. And I factory reset both units and manually re-programmed from scratch. When I called Netgear support and reported this buggy behavior, I was asked to pay $ to do anyting beyond. I am really stuck. Can you remotely diagnose? Thank you.
  - DaneA
    NETGEAR Employee Retired
    Sep 28, 2017
    Mammoth1,
    
    We do have a working SRX5308 in our laboratory. What I can do is load the config file from your SRX5308 to our SRX5308 and check if I'll encounter the same problem as yours. Kindly send me the config file of your SRX5308 by providing me a download link. Be reminded to give me the password or change the password to the default password before sending me your config file so that I could login to the web-GUI of our SRX5308 once I load the your config file to check the configuration as well.
    
    Regards,
    
    DaneA
    
    NETGEAR Community Team

Forum Discussion

SRX5308 - Requires REBOOT every time setting changed in Firewall or IPSec VPN.

21 Replies

Related Content

ProSafe Srx5308 Firewall

RS700 firewall

Bridge 2 Networks with SRX5308 Help

srx5308 remote firmware upgrade and now firewall inaccessible

Firewall nur für das LAN

NETGEAR Academy

ProSupport for Business