XG 210 rev 2 Web Port Admin Password reset?

Hi James,

Thank you for reaching out to Sophos Community.

Kindly check the following

• Reset your admin password from web admin console
• Reset your admin password using the CLI

Hi Erick!

I have successfully reset and changed the password using the CLI, following all the requirements, however I am still unable to use that password to login to the web admin console. It returns "Login failed."

Hi James,

Can log in connecting locally?

Please try Connect to the Sophos Firewall from the CLI

• system appliance_access enable

Also, check access_server.log if this will give us more details.

https://docs.sophos.com/nsg/sophos-firewall/20.0/help/en-us/webhelp/onlinehelp/AdministratorHelp/Logs/TroubleshootingLogs/LogFileDetails/index.html#authentication

Hi Erick,

Here is the output from the web admin portal authentication attempt found in access_server.log:

ERROR Sep 23 13:23:26 [4144162624]: check_auth_result: VPN/SSLVPN/MYACC Authentication Failed
ERROR Sep 23 15:09:26 [4144162624]: check_auth_result: VPN/SSLVPN/MYACC Authentication Failed
MESSAGE Sep 23 15:09:26 [4144162624]: (update_admin_access_table): Admin user authentication fail from IP 192.168.1.66
ERROR Sep 23 15:11:56 [4144162624]: check_auth_result: VPN/SSLVPN/MYACC Authentication Failed
MESSAGE Sep 23 15:11:56 [4144162624]: (update_admin_access_table): Admin user authentication fail from IP 192.168.1.66
ERROR Sep 23 18:53:47 [4144162624]: check_auth_result: VPN/SSLVPN/MYACC Authentication Failed
MESSAGE Sep 23 18:53:47 [4144162624]: (update_admin_access_table): Admin user authentication fail from IP 192.168.1.66
ERROR Sep 23 18:53:53 [4144162624]: check_auth_result: VPN/SSLVPN/MYACC Authentication Failed
MESSAGE Sep 23 18:53:53 [4144162624]: (update_admin_access_table): Admin user authentication failed from IP 192.168.1.66
ERROR Sep 23 19:01:19 [4144162624]: check_auth_result: VPN/SSLVPN/MYACC Authentication Failed
MESSAGE Sep 23 19:01:19 [4144162624]: (update_admin_access_table): Admin user authentication fail from IP 192.168.1.66

Additionally, when I attempt to run "system appliance_access enable" I receive error: /bin/sh: system: not found

It's as if the admin password reset / change that is being performed via console is not affecting the web admin portal admin user account.

Kind regards,

James Stockton

Hi Erick,

Here is the output from the web admin portal authentication attempt found in access_server.log:

ERROR Sep 23 13:23:26 [4144162624]: check_auth_result: VPN/SSLVPN/MYACC Authentication Failed
ERROR Sep 23 15:09:26 [4144162624]: check_auth_result: VPN/SSLVPN/MYACC Authentication Failed
MESSAGE Sep 23 15:09:26 [4144162624]: (update_admin_access_table): Admin user authentication fail from IP 192.168.1.66
ERROR Sep 23 15:11:56 [4144162624]: check_auth_result: VPN/SSLVPN/MYACC Authentication Failed
MESSAGE Sep 23 15:11:56 [4144162624]: (update_admin_access_table): Admin user authentication fail from IP 192.168.1.66
ERROR Sep 23 18:53:47 [4144162624]: check_auth_result: VPN/SSLVPN/MYACC Authentication Failed
MESSAGE Sep 23 18:53:47 [4144162624]: (update_admin_access_table): Admin user authentication fail from IP 192.168.1.66
ERROR Sep 23 18:53:53 [4144162624]: check_auth_result: VPN/SSLVPN/MYACC Authentication Failed
MESSAGE Sep 23 18:53:53 [4144162624]: (update_admin_access_table): Admin user authentication failed from IP 192.168.1.66
ERROR Sep 23 19:01:19 [4144162624]: check_auth_result: VPN/SSLVPN/MYACC Authentication Failed
MESSAGE Sep 23 19:01:19 [4144162624]: (update_admin_access_table): Admin user authentication fail from IP 192.168.1.66

Additionally, when I attempt to run "system appliance_access enable" I receive error: /bin/sh: system: not found

It's as if the admin password reset / change that is being performed via console is not affecting the web admin portal admin user account.

Kind regards,

James Stockton

Hi James,

To indicate you weren’t able to access this Firewall via the web, kindly do a reset again or firmware reimage and then test again from the 172.16.16.0/24 network if possible.

Hi Erick,

I was chatting with a colleague yesterday who also recommended that I update the firmware. I am going to work on that in a few hours and see if it helps.

The current SFOS image on the device is 16.0.1.2.HF04290 and I understand the current version is 20.x.

Hopefully that helps. I will update here with the results. 

Kind regards, 

James Stockton 

Hi James,

Thank you for the information.

Hi Erick,

It seems I'm running into challenges at every turn.

It seems that if a device has already been claimed in Sophos Central, there is no way to transfer ownership in such a way that the web admin will be functional for another user. I could work around this probably by installing the Sophos XG Home on it. I may investigate this path as I have seen other conversations in the Community referring to the process.

With regard to the Firmware update... 

I downloaded the current firmware HW-20.0.2_MR-2.SF300-378.sig from https://download.sophos.com/firmware/HW/index.html then used the SFLoader to Load New Firmware via the web browser and receive error "Firmware validation failed."

I have been searching and so far not found any article about this. If you would have thoughts it would be helpful.

Thank you again for all of your assistance, I greatly appreciate it!

Kind regards,

James Stockton

Hi James,

For transfer of ownership, the registered owner would need to reach out to Sophos Support/Customer Care to have this transferred to you.

For Sophos Home. You may see the following link for reference, and it would be good for studying/home purposes, as you would not need a paid license.

 Sophos Firewall Home 

Thank you very much, Erick!