Problem Installation VM GX SOPHOS

Hi Valerio,

take a look at this thread at the end:

https://community.sophos.com/sophos-xg-firewall/f/discussions/136423/sophos-xg-ovf-vmdk/505832#505832

Pick the sf_virtual.ovf and the two vmdk-files.

Hi Thomas,

done as you asked, i took a fresh installation with sf_virtual.ovf but nothing changes, its strange that form virtual sophos I can ping my pc but not vice versa, I still can't reach the https port and port 4444. suggestions?

Thank you.

Valerio

Yes you right.. so the Port2 is our WAN, Port6 is our LAN configured with GW 192.168.46.254 and Port7 is configured whith GW 10.10.10.254 and those ports are connected into vmware, im trying to access into virtual XG IP 192.168.46.41 on the same subnet of 192.168.46.0/24 from my PC which has ip 192.168.46.44

In which zone is the IP 192.168.46.41 sitting on the virtual XG?

Please share following screenshots from virtual XG:

Network -> Interfaces

Administration -> Device access

Yes, the zone is WAN and not LAN, is it possible to change it from console?

Thank you

Valerio

Admin Portal is not activated per default on WAN zones (and should never be for security reasons).

The virtual XG should have a second interface which is sitting on the LAN zone - on default this is accessable with https://172.16.16.16:4444

As far as know there is no command to open it with console, maybe a Sophos Staff Member knows it.

Take a look at this documentation:

Interfaces - Sophos Firewall

EDIT: here is another one:

Device access - Sophos Firewall

Hi, the strange thing is when i enable the comand "sys appliance_access enabled" i can see the user portal interface and on port 444 i see

sorry port 4444

Check the part of "Check and restart services"

Sophos XG Firewall: What to do when the Web Admin is not accessible - Recommended Reads - Sophos Firewall - Sophos Community

Hello, yesterday i follow your link but everything is ok, port 4444 is opened and i also restarte services like apache and tomcat and they are in running state. is it possibile change 4444 default port of gui from cli? thanks

Easiest way is to give you temporary access to the LAN interface on your virtual XG and change everything from GUI.

Valerio Baroni said:

We have a physical firewall XG310 connected on 2 LAN ports towards the vmware esxi, a 10.10.10.0/24 network and the other on the 192.168.46.0/24 network and a single WAN port.

Please try this 

console>set advanced-firewall bypass-stateful-firewall-config del source_network [source network IP] source_netmask [source subnet mask] dest_network [destination network IP] dest_netmask [destination subnet mask]

console>show advanced-firewall

Regards

Valerio Baroni said:

We have a physical firewall XG310 connected on 2 LAN ports towards the vmware esxi, a 10.10.10.0/24 network and the other on the 192.168.46.0/24 network and a single WAN port.

Please try this 

console>set advanced-firewall bypass-stateful-firewall-config del source_network [source network IP] source_netmask [source subnet mask] dest_network [destination network IP] dest_netmask [destination subnet mask]

console>show advanced-firewall

Regards