This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

I can't Access Web Admin via WAN

Hello ,

I have a sophos UTM 9.716-2. I can't connect via hostname from noip.com on port 4444. I can't connect via ssl vpn too. My ISP has cg-nat . I think cg-nat is the problem.

I try with success to setup a vps with wireguard to avoid cg nat. Now I got a new IP from vps. If I write on GNU/linux traceroute public ip show that I am not on cg-nat.

I have in Webadmin settings -> General -> Allowed Networks has ANY, Internal (Network), VPN Pool (SSL) but problem not solved.

How can I ascess web admin via wan ???

This thread was automatically locked due to age.

Top Replies

Vivek Jagad over 1 year ago +1

Hello Patrick , Thank you for reaching out to the community, please refer the following steps: To change the password for admin run cc passwd mynewpassword To change the WebAdmin port to 4444,…

Parents

0 Vivek Jagad over 1 year ago
Hello Patrick ,

Thank you for reaching out to the community, please refer the following steps:

To change the password for admin run

cc passwd mynewpassword

To change the WebAdmin port to 4444, run

cc set webadmin port 4444

To confirm that "Internal (Network)" is in 'Allowed Networks' for WebAdmin:

cc get webadmin allowed_networks

That will give you one or more REF_ objects. One of mine is REF_nuSwABYbAt

cc get_object REF_nuSwABYbAt |grep \'name

and that tells me: 'name' => 'Internal (Network)',

If 'Allowed networks' is empty, we need the REF_ for "Internal (Network)"

cc get_object_by_name 'network' 'interface_network' 'Internal (Network)'

Once you have the REF_, you can add it. Using mine as an example (note the extra @ and + symbols - copy, paste and enter each line seprately!):

cc
webadmin
allowed_networks@
+REF_nuSwABYbAt
exit

Now, you should be able to login to web-admin as admin from the LAN.
Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel
0 Patrick over 1 year ago in reply to Vivek Jagad

Thank you for replying Vivek. I am able to access via lan. As I said I cannot access via hostname like example hostname..ddns.me:4444
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 1 year ago in reply to Patrick

Hey Patrick , Add a DNS Static host entry and then check:

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Patrick over 1 year ago in reply to Vivek Jagad

I cannot put host because It wants ipv4 address. I put inside Network Definition type DNS host then I put the hostname that I have inside Dyndns.

I cannot access again.

Should I to put hostname somewhere in Sophos UTM?
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 1 year ago in reply to Patrick

Try adding a hostname under the network definition

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Patrick over 1 year ago in reply to Vivek Jagad

I have already got it. I created inside Network Definitions type DNS host then I put my hostame the same in Dyndns but nothing...
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 1 year ago in reply to Patrick

Upon performing the nslookup from the advance shell or Under the support > Tools > DNS Lookup > does it the Hostname/IP resolve ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Patrick over 1 year ago in reply to Vivek Jagad

Yes! It show my real public IP
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 1 year ago in reply to Patrick

And when you ping the hostname does it resolve the IP ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Vivek Jagad over 1 year ago in reply to Patrick

And when you ping the hostname does it resolve the IP ?

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Patrick over 1 year ago in reply to Vivek Jagad

Yes It does! It show ping and traceroute.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 1 year ago in reply to Patrick

In that case can you collect the tcpdump on Port 4444
Ref guide - Capture packets and download the Packet Capture.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Patrick over 1 year ago in reply to Vivek Jagad

I did Vivek. Now what can I do? It show packets on port 4444. I write ---tcpdump -nei any port 4444--
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 1 year ago in reply to Patrick

Can you share the pcap file so that we can analyze the packet capture on port 4444

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Patrick over 1 year ago in reply to Vivek Jagad

Yes I do.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 1 year ago in reply to Patrick

This are just SYN Packets and there has been no response from the Firewall IP, can you check by connecting a cable directly to a available port on the firewall with a laptop and then let us know the result.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Patrick over 1 year ago in reply to Vivek Jagad

I don't understand what I have to do. Which port do I have to connect to sophos utm firewall?
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 1 year ago in reply to Patrick

Any available interface Port on the firewall, configure a IP on that available port connect a laptop directly and see if you are able to access the web-admin !

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Patrick over 1 year ago in reply to Vivek Jagad

I have a router that takes internet then internet goes to sophos utm firewall then internet goes to devices (like laptop)

Sophos utm has many ports. Now do I have to setup a new empty ethernet port with dhcp server on sophos utm then connect with ethernet cable my laptop?
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad over 1 year ago in reply to Patrick

Yes any port is fine , ensure that the connected laptop is able to ping that interface

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel