This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Change SSH default port in Sophos XGS

Hi Experts.

I'm willing to know if It is possible to change SSH default port to other than port 22 (port range available is 1:65535). The reason is to increase security on SSH access.

In Sophos UTM Firewall this change is very simple to do (Management>Shell Access>SSH Daemon Listen Port (box "port number" and apply), but in Sophos XGS I did not find any related configuration.

My system is: Sophos XGS 3300 appliance, SFOS 20.0.1 MR-1-Build342.

Thanks a lot!

This thread was automatically locked due to age.

Top Replies

Mayur Makvana 3 months ago +4 verified

Hello, Thank you for contacting Sophos Community! Unfortunately, currently we cannot change the SSH port of Sophos OS. This is marked as Feature request and ID for this is SFSW-I-1387 for tracking…

+1 Mayur Makvana 3 months ago

Hello,

Thank you for contacting Sophos Community!

Unfortunately, currently we cannot change the SSH port of Sophos OS. This is marked as Feature request and ID for this is SFSW-I-1387 for tracking it in future.

We suggest creating the local ACL rule for allowing access of the firewall.

Mayur Makvana
Technical Account Manager | Global Customer Experience
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +4 Vote Down

Cancel
0 LuCar Toni 3 months ago

Changing a port does not really increase the security. Port scanner will find the open port within minutes.
You should remove the access of SSH and limit the access via device control to only privileges networks / hosts

__________________________________________________________________________________________________________________
Cancel
Vote Up +4 Vote Down

Cancel
0 Antonio Ferreira1 3 months ago in reply to Mayur Makvana

Hi Mayur and thaks for the feedback.

The access to the Firewall is not the problem, I can access normaly via web gui and SSH. However, accessing Firewall shell via SSH default port 22 it is not a safe way to work. To me is very weird that in Sophos UTM this feature is available and it was retired in Sophos XGS. Anyway, I hope in next updates it can be solved. Thanks.
Cancel
Vote Up 0 Vote Down

Cancel
0 Antonio Ferreira1 3 months ago in reply to LuCar Toni

Hi Lucar and thanks for the feedback. You suggestions are very useful and was already applicated. However I still hopeless that can change SSH default port.
Cancel
Vote Up 0 Vote Down

Cancel
0 Antonio Ferreira1 3 months ago in reply to Antonio Ferreira1

It is not clear to me that such a simple configuration is not available.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni 3 months ago in reply to Antonio Ferreira1

It is quite easy to explain: there is no “real benefit” In changing the port of SSH while it has implications within the system itself.
so to speak: it gives false hope of security while it needs extra work of implementation.
So there was never a real use case of changing it and if there is no use case, there is likely no prioritisation.

__________________________________________________________________________________________________________________
Cancel
Vote Up +1 Vote Down

Cancel
0 Mayur Makvana 3 months ago in reply to Antonio Ferreira1

Hello,

Thank you for the feedback. This is well taken and the status of feature request ID is set to valid for future consideration.

Mayur Makvana
Technical Account Manager | Global Customer Experience
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel