Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 7 replies
  • Subscribers 41 subscribers
  • Views 5306 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Can't access Admin GUI unless I SSH first

Rich Grodzicki

I have two home deployments of Sophos Firewall v20, one at home and one at a family vacation home. I've set up VPN, routes, and rules between without issue. But the strangest issue that I can't seem to resolve is that with the vacation home the Admin GUI on HTTPS port 4444 is inaccessible (no response) unless I SSH to the host first, then it's accessible just fine. I've poked around the rules everywhere and I can't seem to find anything that may affect this. This is true from ALL networks, local and remote. My only reliable way to connect to the GUI is via Sophos Central. I've gone as far as disabling all of my rules/VPNs/routes and using default configuration and it still isn't accessible without an initial SSH connection. Any thoughts as to what may be causing this?

Thanks,

Rich



This thread was automatically locked due to age.
Parents Reply
  • +1 in reply to emmosophos

    I've tried accessing the device both remotely through my VPN as well as locally.

    However, I have solved the issue and it was my own doing. I had some advanced-firewall bypass-stateful-firewall-config directives in place to mitigate some asymetric routing issues that were not configured properly. After removing those directives I was able to access the WebGUI just fine. I then recreated the directives properly (and more specifically) and things continue to work. It seems bypassing the stateful firewall for a subnet also bypasses the WebGUI. Strange that SSH'ing to the host re-enabled the WebGUI.

    Thanks for trying to help!

Children
Unfiltered HTML