Unblock IP that had to many failed login attempts

Hi, i know there is no web interface for remving and ip address that have been blocked from many login attemps but i want to know if i can unblock an ip address by Sophos CLI o OS cli via ssh console.

Or a way to reset the ban easily (or all ip banned).

We would like to keep the login attempt policy strict but have a fast fallback in case something get blocked.

IE: External Techs, they don't remeber they have to put MFA code after the password, they realized it too late but now they have to wait 60 minutes to login...



Added TAGs
[edited by: Raphael Alganes at 2:09 PM (GMT -7) on 26 Mar 2025]
  • Hello, 

    Unfortunately, there should be no option to do this manually. You may customize the number of "unsuccessful attempts" and "block login access" in minutes to a reasonable amount for future instances. 

    On the other hand, if you are keen to have this feature, you may reach out to Support and have this Feature Requested and then linked under your account. 

    Regards,

    Raphael Alganes
    Community Support Engineer | Sophos Technical Support
    Sophos Support Videos Product Documentation  |  @SophosSupport  | Sign up for SMS Alerts
    If a post solves your question use the 'Verify Answer' link.