Help! Firewall is "reachable" from Internet, but not able to connect to VPN or internal servers

Hi Edmund,

Thank you for reaching out to Sophos Community.

To verify, were you able to access the CLI via SSH/telnet?

• Sophos Firewall: Unable to access the GUI

Was the firewall registered to Sophos Central?

• Firewall Management

Hi Erick, thanks for your quick answer.

SSH/telnet is disabled for WAN interface. I am currently not at the site and noone is there.

Firewall is not registered in Sophos Central.

Hi Edmund,

"user portal and admin portal is not reachable from internet without VPN"

The following settings are disabled or not applicable, right?

• HTTPS for WAN zone 
• WAN IP Gui

I could be wrong. However, I would recommend reaching out to Sophos Support for this urgent matter.

 Erick Jan 

Can't remember the settings. but anyway thanks for your support, I have a home edition installed.

Seems like I need to send my mother in law to power cycle the firewall, and next time try to use the HA feature.

Erick Jan 

It turned out, that the problem was the RADIUS server which was not running.

I configured the Remote access (SSL-VPN) to first use the RADIUS server (on  top) and then local users (below) to authenticate.

I could not logon to SSL-VPN, not even with local users! How can  this be?

Can you show us the service Port? 
And why do you now use Central as a emergency option just in case? 

What service port do you mean? Authentication - Services:

"Master" is the external RADIUS Server. My expectation would be that if that is not available, at least local users are able to log on. But that ends also in a timeout.

I guess that is due to the Radius timeout I configured - its pretty long with 60 Seconds, to have some time to confirm with Duo Auth Proxy.

Possibly I just need to reorder the 2 auth sources and streamline the local user list.

I will have a look at central.