This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Adminportal + SSH on WAN Interface

Hey Folks,

I have a problem and actually dont know how to fix it.

I have setuped a new Sophos XG 19.5.X, configured everything I want to but now I see that i am able to access ssh and adminportal from external network and that should not be possible.

My Setup:

FritzBox 1.1.1.1 => exposed Host // Sophos WAN Interface 1.1.1.2 => Sophos LAN Interface 1.1.1.254

How is this possible?

Dennis

This thread was automatically locked due to age.

Parents

0 Dennis Braun 11 months ago

What also is a bit weird

Both request, intern like external lands on Port A and Port A is the LAN Adapter.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk 11 months ago in reply to Dennis Braun

Hi,

there would appear to be a problem with your WAN and LAN addressing they are on the same network?

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Dennis Braun 11 months ago in reply to rfcat_vk

Yes, my router and the sophos firewall is in the same network.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk 11 months ago in reply to Dennis Braun

Is the xg in bridge mode?

ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Dennis Braun 11 months ago in reply to rfcat_vk

Hey,

thanks for reply !!

I am not sure tbh, where can i check it?
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk 11 months ago in reply to Dennis Braun

Hi,

you would be referring to the port as a BR0 which you aren't so I suspect you are using router mode. I would suggest you change the IP range of one the ports and I think that will fix the external access issue. Also you will need a NAT rule.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 rfcat_vk 11 months ago in reply to Dennis Braun

Hi,

you would be referring to the port as a BR0 which you aren't so I suspect you are using router mode. I would suggest you change the IP range of one the ports and I think that will fix the external access issue. Also you will need a NAT rule.

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data