I can't Access Web Admin via WAN

Hello Patrick ,

Thank you for reaching out to the community, please refer the following steps:

To change the password for admin run 

cc passwd mynewpassword

To change the WebAdmin port to 4444, run

cc set webadmin port 4444

To confirm that "Internal (Network)" is in 'Allowed Networks' for WebAdmin:

cc get webadmin allowed_networks

That will give you one or more REF_ objects.  One of mine is REF_nuSwABYbAt

cc get_object REF_nuSwABYbAt |grep \'name

and that tells me: 'name' => 'Internal (Network)',

If 'Allowed networks' is empty, we need the REF_ for "Internal (Network)"

cc get_object_by_name 'network' 'interface_network' 'Internal (Network)'

Once you have the REF_, you can add it.  Using mine as an example (note the extra @ and + symbols - copy, paste and enter each line seprately!):

cc
webadmin
allowed_networks@
+REF_nuSwABYbAt
exit

Now, you should be able to login to web-admin as admin from the LAN.

Thank you for replying Vivek. I am able to access via lan. As I said I cannot access via hostname like example hostname..ddns.me:4444

And when you ping the hostname does it resolve the IP ?

Yes It does! It show ping and traceroute.

In that case can you collect the tcpdump on Port 4444
Ref guide - Capture packets and download the Packet Capture.

I did Vivek. Now what can I do? It show packets on port 4444. I write  ---tcpdump -nei any port 4444--

Can you share the pcap file so that we can analyze the packet capture on port 4444 

Yes I do.

This are just SYN Packets and there has been no response from the Firewall IP, can you check by connecting a cable directly to a available port on the firewall with a laptop and then let us know the result. 

I don't understand what I have to do. Which port do I have to connect to sophos utm firewall?

Any available interface Port on the firewall, configure a IP on that available port connect a laptop directly and see if you are able to access the web-admin !

I have a router that takes internet then internet goes to sophos utm firewall then internet goes to devices (like laptop)

Sophos utm has many ports. Now do I have to setup a new empty ethernet port with dhcp server on sophos utm  then connect with ethernet cable my laptop?

I have a router that takes internet then internet goes to sophos utm firewall then internet goes to devices (like laptop)

Sophos utm has many ports. Now do I have to setup a new empty ethernet port with dhcp server on sophos utm  then connect with ethernet cable my laptop?

Yes any port is fine , ensure that the connected laptop is able to ping that interface

I did it. Nothing I make new sophos firewall rules with new dhcp and new available port in sophos utm destop. I have internet with new settings in my laptop. I cannot access via wan

So you are not able to ping on directly connected interface ?
Can you perform a ethernet port test on the port where the laptop is connected directly from the advance shell via command:
ethtool -t <portno> 

e.g. ethtool -t eth4 

You can see the results.

Okay, so no fault in the interface, are you able to ping the firewall from the laptop connected on eth6 ?

Yes I did. What IP do I have to ping? I ping with success 192.168.10.1 <-- This ip from lan that I connect to webadmin sophos UTM.

Then I pin the hostname that I have in DynDNS section. Both show 3 packets transmitted, 0 received, 100% packet loss, time 2048ms

all above I did from my laptop.

The IP you will ping is what you have configured on Port eth6 !
example: configured IP on eth7 - 172.16.16.1 and laptop IP: 172.16.16.2 || You should be able to access https://172.16.16.1:4444
You can also reboot the web-admin service from the advance shell via following command -  /etc/init.d/httpd restart

Vivek All done with success!

Are you able to access ? is it resolved ?

It is not resolved. I can able to access webadmin ONLY via lan. like  your example above ....https://172.16.16.1:4444