Change SSH default port in Sophos XGS

Hello,

Thank you for contacting Sophos Community!

Unfortunately, currently we cannot change the SSH port of Sophos OS. This is marked as Feature request and ID for this is SFSW-I-1387 for tracking it in future.

We suggest creating the local ACL rule for allowing access of the firewall.

Changing a port does not really increase the security. Port scanner will find the open port within minutes. 
You should remove the access of SSH and limit the access via device control to only privileges networks / hosts 

Hi Mayur and thaks for the feedback.

The access to the Firewall is not the problem, I can access normaly via web gui and SSH. However, accessing Firewall shell via SSH default port 22 it is not a safe way to work. To me is very weird that in Sophos UTM this feature is available and it was retired in Sophos XGS. Anyway, I hope in next updates it can be solved. Thanks.

Hi Lucar and thanks for the feedback. You suggestions are very useful and was already applicated. However I still hopeless that can change SSH default port.

It is not clear to me that such a simple configuration is not available.

It is quite easy to explain: there is no “real benefit” In changing the port of SSH while it has implications within the system itself. 
so to speak: it gives false hope of security while it needs extra work of implementation. 
So there was never a real use case of changing it and if there is no use case, there is likely no prioritisation. 

Hello,

Thank you for the feedback. This is well taken and the status of feature request ID is set to valid for future consideration.