Hello! I am needing to configure access to the Web Admin Console from a DNS Host. I managed to configure the Local service ACL exception rule on the WAN and I can enter from an external IP, but I can't find a way to allow a dyndns for example. I have…

Hello! I'm new in the forum. I started working with a client, where he has "Sophos Firewall" virtualized on VmWare EXSi 6.7 (Firmware: SFOS 19.0.1 MR-1-Build365). The previous infrastructure technician left de company, and wrote in .txt a username (admin…

Hi Guys, hi Sophos .... Why is Telnet on Port 23 on WAN open?

We have a problem with migrating our configuration from 17.5 > 18.5 The IP which we used to login through the weblogin has changed from 192.168.85.4 to 192.168 .89.10 The topology looks like this [FW-ASA]-[FW-SPHS] | [USER] So there are three interfaces…

Hi All, I have this problem where I can access our xg Firewall through console connected via micro-usb, but I can't ping the firewall nor access it through the web GUI (I know if I can't ping it, I can't access it). The only changes I made before…

We have (3) XGS107 which offices use to connect to our hub. At our hub we have XGS3100. The XGS107's function as routers. The XGS107 traffic must pass through the XGS3100, to get to Sophos Central. We were able to access the XGS107's via central for…

we have a problem, the problem is after we did a firmware update from 17.5.9 MR-9 to 18.0.6 and now it's on firmware 18.5.4 MR-4, to access "Admin and user settings -> admin console and end -User interaction ". before we updated the firmware (17.5.9)…

This is far from the first time I've seen this, but switching to another browser usually does the trick. I have an XG125 running 18.5.3 MR-3. When logging in, a notification pops up prompting to update to 19.0.1, but only half loads and is unable to be…

Hi all, today i need to understand something about sophos certificates just at the beginning of the year it was impossible for me to access the administration console of sophos, so I emptied the cache of the browser then I was able to authenticate…

Hi there, I am new to the Sophos Firewall product, and so my question might sound stupid for all the wizards here... I like the security hints and warnings the firewall shows when configuring insecure settings, such as the access to the configuration…

First the firewall wouldn't accept new exclusion rules, so I made it reboot. When it rebooted I now get a 503 error when attempting to log in. I am remote to the office and will need to go in and pull the power and force a reboot, but has anyone else…

For the second time now we face an issue that we cannot login to XG with SSH. Either as admin or with the ssh keys we entered in WebAdmin. XG430 (SFOS 19.0.1 MR-1-Build365) This was first noticed when we upgraded from 18.5.4 to the current version…

Ola! Hoje tenho 400 firewall para gerência, tenho 24 técnicos: alguns podem ter acessos a certas coisas, outros não, gostaria de saber se existe alguma solução onde eu consiga formalizar o acesso de cada grupo e o firewall replica nos outros, sem precise…

Working with Sophos XGS 126. Whenever I access the Firewall's GUI, which I can access fine, I notice that multiple Denied Packet are being logged. I am not sure if this is normal behavior, and I haven't noticed this before we updated to the SFOS 19…

unable to reach login page of my SFOS instance on AWS. A troubleshooting screenshot (utility provided by AWS) seems to show boot has not completed. port 3400 scans as open but 22 and 4444 do not. No console provided by AWS gives me access. I have…

On my Sophos firewall, wan still appears to be open even though I have closed the user portal in the wan section under device access. please help. only sslvpn is on in wan

Hi all, Today i discover that some lan IP try to access to FW web admin ( I don't know if this alert confirms what I think) web admin or other traffic But some differents ip try this, It's not very common but it's remarkable What happen exactly…

Hello everybody. What is Sophos' recommendation for mitigating CVE-2022-3226 until the 19.5 update is released to everyone? nvd.nist.gov/.../CVE-2022-3226

I changed my firewall admin PORT NO Default to 6667 but after change when I'm trying to login in admin portal that says that site can't be reachable. But when i'm ping with port no in PowerShell through this command tnc ip address -port 6667 . Show condition…

Doesn't appear anybody knows the original admin user account password, so I'm trying to reset it via the COM port on the front of our XG 210 firewall. Once we reset it I'll then login via GUI to do the official reset per all the materials I've read. …

is there something about known issues with the default admin after upgrading? Webadmin and SSH logins are no longer working after we upgraded from 18.5.4 to 19.0.1. On several locations this issue has not been seen but on our XG430 we cannot login afterwards…

Randomly, we cannot access any of our Firewall Web Admin portals via the IP address , but we can SSH into them just fine. We are getting a ERR_SOCKET_NOT_CONNECTED error, I am guessing something in regards to the SSL . However, we did not change anything…

How do i login to a XG 19.0.0 GA? After i login to the firewall i am presented with a white message box. I tried to switch the URL, but i am redirected to the login page and get the same white message box after login? I tried Edge, Chrome and Chrome…

Firewall Https is giving a connection refused when trying to connect via a Lan network connected to the lan network connected to the firewall. firewall is on lan network 10.10.1.0/24 Computer is on 10.3.1.0/24 connected via a router on the lan side…

It is good that Sophos has released fixes for this RCE vulnerability and we know that making sure Webadmin and the User Portal are not exposed to the Internet at large effectively mitigate the threat, but are there any IOCs that can be hunted for to determine…