Locked myself out, need help to get back in

RE: Locked myself out, need help to get back in

Peter-Paul Gras — Fri, 10 Dec 2021 16:40:09 GMT

So i managed to restore the FW. Turned out that it wasn't all that difficult after all.

Connected a screen and a keyboard to the FW machine, rebooted to the previous firmware version (SFOS 18.5.2 MR-1).
This also reverted the configuration to the status of the FW before the latest upgrade.
Logged in to the web admin page and re-applied the upgrade to SFOS 18.5.2 MR-2.

RE: Locked myself out, need help to get back in

Peter-Paul Gras — Fri, 10 Dec 2021 16:34:11 GMT

Thank you for your suggestion, just registered and added my FW tot Sophos Central.

RE: Locked myself out, need help to get back in

MarekDalke — Thu, 09 Dec 2021 07:50:39 GMT

Did you try to enter the above command and access the Admin Portal (Web GUI) to disable the NAT rule?

RE: Locked myself out, need help to get back in

Peter-Paul Gras — Wed, 08 Dec 2021 19:58:52 GMT

Hi Marek,
Thank you, but as far as i can see it doesn't solve my problem. I need to disable a NAT rule to re-enable contacting the management web site.

If nothing seems to work i see no other option than trying resetting through the CLI and then restoring from a recent backup.

RE: Locked myself out, need help to get back in

MarekDalke — Wed, 08 Dec 2021 12:25:56 GMT

console> system appliance_access show|enable|disable

It should help. For more information visit: https://support.sophos.com/support/s/article/KB-000038694

RE: Locked myself out, need help to get back in

Peter-Paul Gras — Wed, 08 Dec 2021 08:35:19 GMT

Thank you.
Thinking about it, i have a recent backup.
Can i restore this from CLI?

RE: Locked myself out, need help to get back in

LuCar Toni — Wed, 08 Dec 2021 08:33:06 GMT

Home can also integrate to Central without any problems. Central is for free in a base version (Simply start a trial and let all licenses expire, Wireless and FW Management will still stay). This would help in such situations.

But to get access to the firewall, you would have to manipulate the database to get this NAT rule out of play. Let me think about this.

RE: Locked myself out, need help to get back in

Peter-Paul Gras — Wed, 08 Dec 2021 08:30:23 GMT

Hello Tony, no I am a home user

RE: Locked myself out, need help to get back in

LuCar Toni — Tue, 07 Dec 2021 22:51:53 GMT

Do you have Central activated? Central should be still possible.

RE: Locked myself out, need help to get back in

Peter-Paul Gras — Tue, 07 Dec 2021 21:11:32 GMT

Hi Wayne, thats exactly what i'm looking for.
Thank you for clarifying that.

RE: Locked myself out, need help to get back in

Wayne Folta — Tue, 07 Dec 2021 21:02:55 GMT

I don't have an answer for you, but to be clear, you mean you can no longer access the firewall via the web interface, but you do have direct console access (or SSH or something)? So you're basically asking for a CLI-based way to de-active a NAT rule?