Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

  • Error with loggin access Web Sophos EXSi

    Hello! I'm new in the forum. I started working with a client, where he has "Sophos Firewall" virtualized on VmWare EXSi 6.7 (Firmware: SFOS 19.0.1 MR-1-Build365). The previous infrastructure technician left de company, and wrote in .txt a username (admin…
  • XGS - V19.0.2 - WAN Side Telnet (23) Open!

    Hi Guys, hi Sophos .... Why is Telnet on Port 23 on WAN open?
  • 17.5 to 18.5 Migration changes default IP for web login

    We have a problem with migrating our configuration from 17.5 > 18.5 The IP which we used to login through the weblogin has changed from 192.168.85.4 to 192.168 .89.10 The topology looks like this [FW-ASA]-[FW-SPHS] | [USER] So there are three interfaces…
  • Cannot ping or access web GUI of XG Firewall but can access console

    Hi All, I have this problem where I can access our xg Firewall through console connected via micro-usb, but I can't ping the firewall nor access it through the web GUI (I know if I can't ping it, I can't access it). The only changes I made before…
  • XGS107s behind XGS3100 can't be remoted using central

    We have (3) XGS107 which offices use to connect to our hub. At our hub we have XGS3100. The XGS107's function as routers. The XGS107 traffic must pass through the XGS3100, to get to Sophos Central. We were able to access the XGS107's via central for…
  • Sophos XG 230 Admin and user setting

    we have a problem, the problem is after we did a firmware update from 17.5.9 MR-9 to 18.0.6 and now it's on firmware 18.5.4 MR-4, to access "Admin and user settings -> admin console and end -User interaction ". before we updated the firmware (17.5.9)…
  • Unable to log in to web management due to firmware update notification

    This is far from the first time I've seen this, but switching to another browser usually does the trick. I have an XG125 running 18.5.3 MR-3. When logging in, a notification pops up prompting to update to 19.0.1, but only half loads and is unable to be…
  • warning page access to web console admin sophos xg

    Hi all, today i need to understand something about sophos certificates just at the beginning of the year it was impossible for me to access the administration console of sophos, so I emptied the cache of the browser then I was able to authenticate…
  • Emergency access to remote Sophos Firewall if tunnel is down

    Hi there, I am new to the Sophos Firewall product, and so my question might sound stupid for all the wizards here... I like the security hints and warnings the firewall shows when configuring insecure settings, such as the access to the configuration…
  • XG Firewall - rebooted and now get a 503 error when attempting to log in

    First the firewall wouldn't accept new exclusion rules, so I made it reboot. When it rebooted I now get a 503 error when attempting to log in. I am remote to the office and will need to go in and pull the power and force a reboot, but has anyone else…
  • Admin password with 2FA not synced in HA

    For the second time now we face an issue that we cannot login to XG with SSH. Either as admin or with the ssh keys we entered in WebAdmin. XG430 (SFOS 19.0.1 MR-1-Build365) This was first noticed when we upgraded from 18.5.4 to the current version…
  • Denied packets when accessing Sophos XG GUI

    Working with Sophos XGS 126. Whenever I access the Firewall's GUI, which I can access fine, I notice that multiple Denied Packet are being logged. I am not sure if this is normal behavior, and I haven't noticed this before we updated to the SFOS 19…
  • Not Turn Off User Portal

    On my Sophos firewall, wan still appears to be open even though I have closed the user portal in the wan section under device access. please help. only sslvpn is on in wan
  • Administrative access from IP Address (LAN_IP) !!?

    Hi all, Today i discover that some lan IP try to access to FW web admin ( I don't know if this alert confirms what I think) web admin or other traffic But some differents ip try this, It's not very common but it's remarkable What happen exactly…
  • CVE-2022-3226

    Hello everybody. What is Sophos' recommendation for mitigating CVE-2022-3226 until the 19.5 update is released to everyone? nvd.nist.gov/.../CVE-2022-3226
  • What am I doing wrong?

    Hi all, I have just installed the firewall for home use version 19 and I can't get it to connect to the internet and I can't even access the firewall web interface. I have a n68-vs3 fx motherboard and a realtek pci card. The pc is connected to the motherboard…
  • Sophos XG Admin port number problem

    I changed my firewall admin PORT NO Default to 6667 but after change when I'm trying to login in admin portal that says that site can't be reachable. But when i'm ping with port no in PowerShell through this command tnc ip address -port 6667 . Show condition…
  • XG 210 Admin Password Reset via COM Port

    Doesn't appear anybody knows the original admin user account password, so I'm trying to reset it via the COM port on the front of our XG 210 firewall. Once we reset it I'll then login via GUI to do the official reset per all the materials I've read. …
  • after upgrade to 19.0.1: logins with admin user no longer possible

    is there something about known issues with the default admin after upgrading? Webadmin and SSH logins are no longer working after we upgraded from 18.5.4 to 19.0.1. On several locations this issue has not been seen but on our XG430 we cannot login afterwards…
  • Sophos XGS Web Admin WebSocket Problems

    Randomly, we cannot access any of our Firewall Web Admin portals via the IP address , but we can SSH into them just fine. We are getting a ERR_SOCKET_NOT_CONNECTED error, I am guessing something in regards to the SSL . However, we did not change anything…
  • Installes Software-Appliance-Image in old XG105 no ping to 172.16.16.16 and no DHCP

    Good morning, I installed the Software-Appliance Image on an old XG105, to use it at home with the Home Use Licence. Now the appliace is starting and I can login with display and keybord. LAN1 is on, but I can not ping 172.16.16.16. And I did not…
  • HowTo Login to XG 19.0.0 GA ? - Blank Message Box

    How do i login to a XG 19.0.0 GA? After i login to the firewall i am presented with a white message box. I tried to switch the URL, but i am redirected to the login page and get the same white message box after login? I tried Edge, Chrome and Chrome…
  • Cannot access Firewall admin via Https on adjacent lan network

    Firewall Https is giving a connection refused when trying to connect via a Lan network connected to the lan network connected to the firewall. firewall is on lan network 10.10.1.0/24 Computer is on 10.3.1.0/24 connected via a router on the lan side…
  • CVE-2022-3236 - Sophos Firewall RCE - Sept 2022

    It is good that Sophos has released fixes for this RCE vulnerability and we know that making sure Webadmin and the User Portal are not exposed to the Internet at large effectively mitigate the threat, but are there any IOCs that can be hunted for to determine…
  • New code injection vulnerability in the User Portal and Webadmin of Sophos Firewall

    Surprised there is no 'banner' announcement of this in the community forum (I learnt about it from a third party security mailing list). I've said it before but I will say it again, I think it is a major failing of Sophos not to have a security alert…