Sophos Firewall CLI health checks cheat sheet
Gather appliance version, uptime and resource diagnostics in Device Console.
Sophos Firewall SFOS Device Console, diagnostics syntax documented for 23.0. Not Sophos UTM or Advanced Shell.
Updated · Sophos · 7 min read
| Command | What it does |
|---|---|
system diagnostics show version-info | Identify appliance and firmware |
system diagnostics show uptime | Read system uptime |
system diagnostics show memory | Inspect memory diagnostics |
system diagnostics show disk | Inspect disk diagnostics |
Walkthrough
Connect through approved console or SSH access and select Device Console. Confirm command availability with built-in help for your SFOS release.
Step 1: Identify appliance and firmware
system diagnostics show version-info
Record the model, serial and firmware build. In an HA investigation compare both members before considering version-related behavior.
Step 2: Read system uptime
system diagnostics show uptime
Compare uptime with reported interruption times. Uptime is a clue about a restart; it does not explain why a restart happened.
Step 3: Inspect memory diagnostics
system diagnostics show memory
Capture the current memory picture and compare with a baseline for the same appliance. A single reading is insufficient to identify a leak.
Step 4: Inspect disk diagnostics
system diagnostics show disk
Review storage figures and errors alongside logs. Do not remove files from Advanced Shell based only on a utilization reading.