This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

I can't Access Web Admin via WAN

Hello ,

I have a sophos UTM 9.716-2. I can't connect via hostname from noip.com on port 4444. I can't connect via ssl vpn too. My ISP has cg-nat . I think cg-nat is the problem.

I try with success to setup a vps with wireguard to avoid cg nat. Now I got a new IP from vps. If I write on GNU/linux traceroute public ip show that I am not on cg-nat.

I have in Webadmin settings -> General -> Allowed Networks has ANY, Internal (Network), VPN Pool (SSL) but problem not solved.

How can I ascess web admin via wan ???

This thread was automatically locked due to age.

Top Replies

Vivek Jagad 7 months ago +1

Hello Patrick , Thank you for reaching out to the community, please refer the following steps: To change the password for admin run cc passwd mynewpassword To change the WebAdmin port to 4444,…

0 Patrick 7 months ago in reply to Vivek Jagad

Yes It does! It show ping and traceroute.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 7 months ago in reply to Patrick

In that case can you collect the tcpdump on Port 4444
Ref guide - Capture packets and download the Packet Capture.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Patrick 7 months ago in reply to Vivek Jagad

I did Vivek. Now what can I do? It show packets on port 4444. I write ---tcpdump -nei any port 4444--
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 7 months ago in reply to Patrick

Can you share the pcap file so that we can analyze the packet capture on port 4444

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Patrick 7 months ago in reply to Vivek Jagad

Yes I do.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 7 months ago in reply to Patrick

This are just SYN Packets and there has been no response from the Firewall IP, can you check by connecting a cable directly to a available port on the firewall with a laptop and then let us know the result.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Patrick 7 months ago in reply to Vivek Jagad

I don't understand what I have to do. Which port do I have to connect to sophos utm firewall?
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 7 months ago in reply to Patrick

Any available interface Port on the firewall, configure a IP on that available port connect a laptop directly and see if you are able to access the web-admin !

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Patrick 7 months ago in reply to Vivek Jagad

I have a router that takes internet then internet goes to sophos utm firewall then internet goes to devices (like laptop)

Sophos utm has many ports. Now do I have to setup a new empty ethernet port with dhcp server on sophos utm then connect with ethernet cable my laptop?
Cancel
Vote Up 0 Vote Down

Cancel
0 Alan Brand 7 months ago in reply to Patrick

Just to check the basics: the UTM limits admin access by both accounts and IPs:

AFAIK the "Allowed networks" defaults to "local networks" or "Intranet", not "any".
Are you sure the IP your access originates from matches the rule?
Cancel
Vote Up 0 Vote Down

Cancel