[Guide] How to "brand" the Sophos User Portal

Note: Modifying system files is risky and is not supported. A re-image of the device would be required before any form of Support can be provided. Also note that performing a firmware upgrade on a device will reset all system file changes.

This post comes without any warranty! Always make a backup before doing anything!

You know the Sophos XG UserPortal, right? It is functional but ugly and always the same.

What about a "branding" like this?

1. Prerequisites

You need:

• Putty -> https://www.putty.org/
• WinSCP -> https://winscp.net/eng/download.php
• A graphic editor you like (e. g. Photoshop)
• Sophos XG Firewall (No sh1t Sherlock!)
• Credentials for the Sophos admin user

You also have to enable the SSH access from the Zone your computer are. Also enable the UserPortal for this zone to check you changes.

2. Lets go

First of all, make a backup of you Sophos XG. Don´t ask! Do it! Not later, right now!

Before you can upload some images, you have to create some. If you want to replace the "TwoHead" Image on the right, create a Image file with the following specifications:

W: 600 Pixel
H: 520 Pixel
Format: JPG (Not JPEG)

If you also want to change the Sophos logo above the login fields, you have to create a second image with these specifications:

W: 132 Pixel
H: 27 Pixel
Format: PNG

Now we upload the images to the XG. We do this using WinSCP to connect to the Sophos XG with the "admin" credentials. The UserPortal Images are stored in "/usr/share/webconsole/images" and in "/usr/share/webconsole/images/logo". You don´t have access to upload the Images directly in there (also as "admin" user).

Upload your Images in the "/temp" path. First I upload my image with should replace the image with the two heads on the right. I´ve named the file "bannerUP_brand.jpg"

Before we move the "branded" images to the right location we make copy of the original files using SSH, Putty and the advanced shell. Create the copy with the following commands:

• cp /usr/share/webconsole/images/bannerUP.jpg /usr/share/webconsole/images/bannerUP.jpg.copy
• cp /usr/share/webconsole/images/logo/group-small-on-dark.png /usr/share/webconsole/images/logo/group-small-on-dark.png.copy

Now we have to move the file to the right place using SSH, Putty and the advanced shell. You can move the file using this SSH command:
mv /tmp/<YOUR-FILE-NAME>.jpg /usr/share/webconsole/images/bannerUP.jpg
e. g. at my sample:  mv /tmp/bannerUP_brand.jpg /usr/share/webconsole/images/bannerUP.jpg

If we want to change the Sophos logo above the login fields, we also upload out new logo to the "/tmp" folder. I´ve named the file "group-small-on-dark_brand.jpg" After the upload we also move the image to the right location. You do this with this command:
mv /tmp/<YOUR-FILE-NAME> /usr/share/webconsole/images/logo/group-small-on-dark.png
e. g. at my sample: mv /tmp/group-small-on-dark_brand.png  /usr/share/webconsole/images/logo/group-small-on-dark.png

At this point we are done and reload the UserPortal page in our browser.

Happy branding!

Greetings from Germany