Automatic blocking access from wan

Question

Hi everyone, 
 
 I wasn't able to login on my firewalls today, just a few (only licensed ones), but vpn was connecting (so no problem with customers internet) 
 Then, i started to do some checklist to verify what was wrong. 
 
 Finally, see this: 
 
 Administration > Device Access 
 
 Two new rules: 
 Automatic IPv4 rule - Block admin console and user portal 
 Automatic IPv6 rule - Block admin console and user portal 
 
 Both above those that already existed, preventing me to access my customers. 
 
 Sophos, why you do this?

bobbylam · Accepted Answer

This was announced earlier this year: 
 Sophos Firewall: License Compliance in 2025 
 This only affects old XG devices without an active subscription (thus likely running older versions as they're not eligible for updates).

LuCar Toni · Answer

The point here is to make sure, the ACL is hitting at all times (deny the traffic from WAN). 
 As we state in the Link above: Local ACL will also not work. 
 Note: WAN-facing portals (Webadmin Portal and User Portal only) will also be turned off in the local service ACL exception rules .

Automatic blocking access from wan

Top Replies