This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Adminportal + SSH on WAN Interface

Hey Folks,

I have a problem and actually dont know how to fix it.

I have setuped a new Sophos XG 19.5.X, configured everything I want to but now I see that i am able to access ssh and adminportal from external network and that should not be possible.

My Setup:

FritzBox 1.1.1.1 => exposed Host // Sophos WAN Interface 1.1.1.2 => Sophos LAN Interface 1.1.1.254

How is this possible?

Dennis

This thread was automatically locked due to age.

Parents

0 Vivek Jagad 11 months ago

Hello Dennis Braun ,

Thank you for reaching out to the community, have you created any ACL ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Dennis Braun 11 months ago in reply to Vivek Jagad

HEy

thanks for your answer and input.

No I havent created an ACL, should I?
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 11 months ago in reply to Dennis Braun

Yes that would be my recommendation !

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Dennis Braun 11 months ago in reply to Vivek Jagad

I would create the rule like this:

So block everything coming from WAN on #PortA & #PortB which tries to use the listed services.

You would agree?
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Dennis Braun 11 months ago in reply to Vivek Jagad

I would create the rule like this:

So block everything coming from WAN on #PortA & #PortB which tries to use the listed services.

You would agree?
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data