Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

XG210 default username and password is not working and neither is HTTP?

I have a brand new out of the box XG210 appliance that I am trying to setup, but the default connection information does not work.

First attempt was to connect to http://172.16.16.16 which failed.  So I tried https://172.16.16.16 which worked, even though there is no mention of using HTTPS in the documentation.

I enter admin/admin for login details and get "Login Failed".

Does anyone have any clue what the default login information is for a brand new XG210 appliance?



This thread was automatically locked due to age.
  • Hello CaineLai,
    Depending on the system you are using to attempt to get into the management UI you might want to try a different browser. Firefox seems to work best to get started in my experience. Chrome & IE do not like to get you into the UI for the first time.
    That is however assuming that you are using a Windows Host.
  • Thanks, but I tried Firefox with same result, "Login Failed".
  • Hi CaineLai,

    All XG Firewall products, by default, SHOULD have the same login at the start, which you've already mentioned: admin/admin.

    It might be that the product was damaged or there was an error with this particular device.

    Please contact https://doc.sophos.com/support/help/en-us/contact/index.html. They'll help you out!

    Sorry for the inconvenience!

    Cheers,

    DJ Kim

  • I would love to, but I have been on hold for over 40 minutes now... ?
  • admin console is:
    https://172.16.16.16:4444

    Without the port, you get the user portal, which will not accept the admin un/pw.

    --

    Chavous Camp

    UTM, SMC, SGN Certified Engineer / XG Certified Architect

  • While this is the correct answer, it boggles my mind that Sophos would deliver a printed manual in the box and not have this information in it. The manual specifically states to use http://172.16.16.16 to access the admin console.

    "Start the browser and enter the management IP address of the device's LAN port your PC is connected to: http://172.16.16.16"

    But you can't access HTTP at all. Only HTTPS.

    Then when HTTPS is accessed using https://172.16.16.16, the end user is supposed to magically know that the login page they are presented with is not the admin console? And that maybe they should try all the available ports on the box until they hit port 4444?

    In case you can't tell, I am not at all pleased. I am also not pleased that it took me until today to get an answer on this via either Telephone support (which was totally unavailable, I hung up after 90 minutes on hold), email support, your support portal, or any other means.
  • Hi CaineLai,

    I'm very sorry to hear that you ran into this frustrating situation.  I believe there was an early run of Getting Started Guides that did not include the port 4444, so this addendum was added to the box.  

    It's possible this got missed in a perfect storm like situation in your case.  On behalf of Sophos, sorry for all the trouble you went through!

    We have since corrected the documentation so it includes the 4444.

    Also, you may not have noticed, since the screens look similar, but accessing the device on https://172.16.16.16 on the default port 443, is the user portal login where users can get access to the device to get various clients or manage email quarantine, etc.  The design team tried to make that clear, but perhaps we can do more to distinguish it from the admin console login.

    And to help others that might come across this in the future, we're working on a series of "Getting Started" and "How To" videos for XG Firewall that should start rolling out in January.  I know this doesn't help you in this situation, but we do recognize that the whole out-of-box experience is important and want to make sure customers have a great experience right from the start.

    We'll let everyone know via the Sophos blog and these forums when those videos are available.

  • Thank you for that Chris, it explains a lot.

    However, this statement is not correct:
    "accessing the device on 172.16.16.16 on the default port 80, is the user portal login"

    I believe you meant to say "accessing the device on 172.16.16.16 on the default HTTPS port 443, is the user portal login", as there is no port 80 HTTP web server running at all on the XG 210.
  • Haha... yes, good catch! I'll update that. :)
  • Hi CaineLai,

    I would like to apologize for the amount of time you had to wait on the phone line; we had a very high amount of traffic yesterday and that contributed to your extended wait.

    I also apologize for the additional time you had to wait to receive a response from our Email support and the community forums.

    Sorry for all the trouble and confusion.

    Sincerely,

    DJ Kim