Change Zones From CLI

Hi Kamel,

Thank you for reaching out to Sophos Community.

Can you try to enable appliance access if this will let you access the GUI by enabling WAN access?

system appliance_access enable

Note: This will cause a network interruption, override the configured Appliance Access, and allow access to all the services.

•  Sophos Firewall: What to do when the Web Admin is not accessible 

Hello Erick,
Thanks for your reply.

The problem is that I need to change the zone from LAN to WAN and WAN to LAN, so even if I enabled access from all ports, it will not work because if I added the WAN IP to the LAN port, I still can't access it from this port as it's the wrong zone type. 

all I need to do is reverse Wan to Lan or Lan to Wan,
If there is any way to do it from the CLI, it will resolve my issue.

Thank you.

There is not a way to change this, as we do not allow default password (admin) on the WAN. 

Can you setup an device to access the SFOS appliance via LAN? 

Kamel Gamal said:

I still can't access it from this port as it's the wrong zone type

What do you mean by that?

With "system appliance_access enable" you are able to access appliance from "WAN" zone too.

That is not fully correct: Because if you have the default password on the appliance, even with this Switch, SFOS does not allow the access to WAN. This is to protect the appliance from being exposed and being attacked. 
WAN Access is only possible after changing the password, which means, you should get access to LAN. 

That is not fully correct: Because if you have the default password on the appliance, even with this Switch, SFOS does not allow the access to WAN. This is to protect the appliance from being exposed and being attacked. 
WAN Access is only possible after changing the password, which means, you should get access to LAN.