This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Adminportal + SSH on WAN Interface

Hey Folks,

I have a problem and actually dont know how to fix it.

I have setuped a new Sophos XG 19.5.X, configured everything I want to but now I see that i am able to access ssh and adminportal from external network and that should not be possible.

My Setup:

FritzBox 1.1.1.1 => exposed Host // Sophos WAN Interface 1.1.1.2 => Sophos LAN Interface 1.1.1.254

How is this possible?

Dennis

This thread was automatically locked due to age.

0 Vivek Jagad 9 months ago

Hello Dennis Braun ,

Thank you for reaching out to the community, have you created any ACL ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Dennis Braun 9 months ago in reply to Vivek Jagad

HEy

thanks for your answer and input.

No I havent created an ACL, should I?
Cancel
Vote Up 0 Vote Down

Cancel
0 Dennis Braun 9 months ago

What also is a bit weird

Both request, intern like external lands on Port A and Port A is the LAN Adapter.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 9 months ago in reply to Dennis Braun

Yes that would be my recommendation !

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Dennis Braun 9 months ago in reply to Vivek Jagad

I would create the rule like this:

So block everything coming from WAN on #PortA & #PortB which tries to use the listed services.

You would agree?
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk 9 months ago in reply to Dennis Braun

Hi,

there would appear to be a problem with your WAN and LAN addressing they are on the same network?

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 EAP

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Dennis Braun 9 months ago in reply to rfcat_vk

Yes, my router and the sophos firewall is in the same network.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk 9 months ago in reply to Dennis Braun

Is the xg in bridge mode?

ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 EAP

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Dennis Braun 9 months ago in reply to rfcat_vk

Hey,

thanks for reply !!

I am not sure tbh, where can i check it?
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk 9 months ago in reply to Dennis Braun

Hi,

you would be referring to the port as a BR0 which you aren't so I suspect you are using router mode. I would suggest you change the IP range of one the ports and I think that will fix the external access issue. Also you will need a NAT rule.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 EAP

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel