Sophos ap55 with ISP router

I believe you can register your AP with Sophos Central and control it from there. That's actually the better solution than using the Sophos XG (SFOS) software to control it. And I think that at some point XG stopped supporting the older AP55.

(If you really, really want to control the AP from your VM, your VM needs to intercept the AP's initial packets to the IP 1.2.3.4, which requires Wireless Security (I think that's it) to be on and requires nothing between the AP and the VM to discard or improperly route that packet.)

i tried what you said but even with sophos central i get this error

translation: ap did not connect to cloud within the timeout

i dont know what else to do, packages are not blocked from the firewall, ap has full connection to the internet 

Does your AP55 have a sticker on it that it is "Sophos Central ready"?

Yes it does

The leds are blinking green fast and orange slow, both at the same time

Can you have a look at the router, if it handed out a DHCP lease to the AP55 at all?

it did, the ap has an IP and it does respond to ping 

i've added a network card to the VM and directly connected the AP, it's still not working but now i can see this in packet capture 

/resized-image/__size/1280x960/__key/communityserver-discussions-components-files/163/5710.sophos.png

shouldnt the IP be 1.2.3.4?

and what is that destination?

That is boostrap-protocol, udp 68 is the client searching for a server (udp 67 is the server reply).

is there any other pre-config i have to do before trying to add an AP?