Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • SFOS Virtual Applicane default password not working

    I have setup the SFOS virtual appliance on MS Hyper-V, all is fine but stuck at password authentication. The default administrator password 'admin' is not working.
  • Locked myself out, need help to get back in

    Hello all, I did something incredibly stupid, i activated a erroneous NAT rul and i locked myself out. Is there anyway i can undo this form the console? Any help would be greatly appreciated.
  • Access SOPHOS from WAN in DHCP environment

    Hi, We have a SOPHOS XG firewall configured in a remote office. Its don't have the dedicated WAN IP. its getting WAN IP from DHCP. How i can access the firewall from outside ? Kindly advice regarding the issue. hanks in advance. With Regards…
  • Problem acces sophos by Google chrome

    When I try to access through the internal ip of sophos on port 4444, google chrome gives me the following error: ERR_EMPTY_RESPONSE I have tried to access through Firefox and it works correctly, I have deleted history and cookies and it follows the…
  • Login to Admin interface fails on first attempt when capture visible

    Hi, This appears to be an 18.5 MR1 issue. When I login to any of our XG appliances externally (don't worry, we're using IP restrictions :) ) and the capture box is on the login screen, the login will fail the first time. The second login attempt…
  • I cannot access my cophos xgs8

    I have configured my WAN and DMZ but now i can no longer access my sophos box after bridging my port 1 with port 4. Its shows not internet and the LAN 172.16.16.16:4444 cant access the GUI interface, please any suggestions will help. I dont want to resort…
  • Configuring remote XGS 116

    I am configuring a remote XGS 116 via Sophos Connect at the moment, primarily with the aim of setting up VPN connections. I have configured both IPsec and SSL VPN modes and have successfully connected to IPsec. I can't test SSL yet as I need to login…
  • SSL VPN connected, login web page available, login refused

    I was recently testing remote SSL VPN access and connected successfully from a Mac using OpenVPN. I was able to then go to the admin login web page, and when I entered the login and password -- from a password manager, so no possibility of typo -- it…
  • Disable ping and http/https access to Vlan interface IPs?

    Hi all, Is it possible disable ping and http/https access to VLAN interface IPs? Is this to be performed via FW rules?
  • [Resolved] How to ssh into Core switch from Mgt PC, using XG210 to perform InterVLAN routing

    Hello all, I'm stuck at the following, hope to get the community's help. I have the following network configured. I am trying to ssh into the CORE SWITCH from the MGT PC but to no avail. XG210 is currently configured to perform InterVLAN routing via…
  • Appliance Access and Broadcast

    Broadcast packet are normal into LAN zones. It's possible to quit messages logs (Appliance Access - Denied) originate from LAN Zones (like TCP port 137 that reach firewall) and keep active message logs (Appliance Access - Denied) originate from WAN…
  • XG 86 REV1 Can't get into appliance anymore.

    I have an XG86 that was installed quite some time ago. I can no longer log in to the appliance with name and pw that used to work. I was getting alerts to upgrade the OS. It appears I am locked out. Any ideas?
  • How / is the built-in 'Support Access' function protected to ensure no-one but Sophos can access?

    Hi All, I understand that turning Support Access on allows Sophos to connect in for support-related works etc., but is this functionality secured so that only Sophos can make use of this access by way of only accepting connections from known Sophos…
  • XG115 web gui timeout issue

    I received a replacement XG115 device from Sophos (old v2 from 2018) as the old one failed and it seems to have an issue. I restored the backup fine and it seems to pass traffic ok (will know more tomorrow when users are in the office) but the web interface…
  • SSH login to XG with powershell

    Hello Community, has anybody a working Powershell script to connect to the XG Firewall? I'm testing with POSH-SSH module. If I try to connect to the XG with this command "New-SSHSession -ComputerName firewall" I get after entering my credentials this…
  • Sophos XG Admin Password lost

    Hi all Unfortunately, the link from Ifferara in this post doesn't work here: https://community.sophos.com/sophos-xg-firewall/f/discussions/75632/xg105-admin-password-lost I have the following XG Version: SFVH (SFOS 18.0.5 MR-5-Build586) Is it possible…
  • SSH disabled on WAN port and LAN port but get notification of so many different public IP access to ssh

    Hello, We disabled ssh access on WAN port and LAN port, but we get mail notification of many different public IP try to login via ssh.. Below notification which we gets. Message: User 'root' failed to login from '61.177.173.16' using ssh because…
  • HTTP ERROR 404 or 502,403

    Hello we get 404, 403 or 502 errors daily. We need to turn the device off and on continuously for about 40 days in this way. We cannot get support from our seller.
  • Web gui not accessible - Firewall ist starting - Sophos XG - Tomcat Server DEAD can't be restarted

    Sohos XG 18.0.5 MR-5-Build 586 Hi, I'm not able to connect to my Sophos XG via web gui and SSH. The web gui states 'Firewall is starting' all the time. SSH states 'remote side unexpectedly closed network connection'. I followed the steps in this…
  • From SSL VPN Client - Unable to Log into Remote Site Sophos Web - Invalid Traffic

    From SSL VPN Client at Head Office to a Remote Sophos unable to connect to Web Interface either on 4444 or 443. I am able to SSH to the device with no issues. All of the firewall rules are in place at both ends, have multiple sites that work with…
  • unable to ssh

    Hi Am able access the firewall web GUI but not able to access the CLI using SSH and it is showing access denied. Anyone help me on this. Thanks in Advance
  • Nach Restore SSH nicht möglich

    Hallo in die Community nachdem ich eine XG230 aus einem Restore in Betrieb genommen hatte, bin ich nun wieder per WebAdmin fleissig am administrieren. Ich habe aktuell DREI AdminUser mit denen ich in den WebAdmin kommen, User und Kennwort sind also…
  • WAN port respond to admin port only (i.e. 443 and 4444)

    We can only access port 4434 and 4444 from WAN interface. We setup forwarding (i.e. port 81 to internal DVR). Port forwarding doesn't work. Can anyone help, please?
  • password at boot

    Hi, I install the HW-18.0.5_MR-5-586 but i have a prompt password at boot. I think it's ok for the first boot, but after restored by utm migrated configuration, il have still the promt for the admin password . I reimage 3 times but it didn't change…
  • I can only access the web GUI from the same subnet.

    Hello All, I am new to Sophos and I am attempting to configure an XG310 to work in Active-Passive as our backup to our primary FW. I went through the initial setup and assigned a static IP to the FW but I can only access the web GUI from the same subnet…