This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

I can't Access Web Admin via WAN

Hello ,

I have a sophos UTM 9.716-2. I can't connect via hostname from noip.com on port 4444. I can't connect via ssl vpn too. My ISP has cg-nat . I think cg-nat is the problem.

I try with success to setup a vps with wireguard to avoid cg nat. Now I got a new IP from vps.  If I write on GNU/linux  traceroute public ip show that I am not on cg-nat.

I have in Webadmin settings -> General -> Allowed Networks has ANY, Internal (Network), VPN Pool (SSL)  but problem not solved.

How can I ascess web admin via wan ???



This thread was automatically locked due to age.
  • Hi Patrick

    I don't use a setup like yours. If my main ISP is down and mit UTM has no external IP address to reach, i can connect to alle Services and Servers with Cloudflare. I log in to Cloudflare and can access any Service or Server from there with Cloudflare tunnel. No Portforwarding or iptables settings needed.

    I found this guide: https://medium.com/@itruss17/step-by-step-guide-installing-and-configuring-cloudflare-tunnel-cd8bd681a0f7

    But that helps only if you don't need SSL-VPN or something application-specifig. Only HTTP/HTTPS Websites, SMB, RDP and SSH do work with Cloudflare Tunnel at the moment. But the Webadmin is one thing that should work because its an HTTPS-Website.

    I can't help you more with that, if you want to try it just follow the guide above or avaible on the Internet.

  • Jay are you tired to explain me? I used nmap to test ports on raspberry . I used iptables that forward all traffic to vps. then from raspbbery with second ethernet port internet goes to utm. I have internet normal from publi ip from vps.

    I think only hostname can't  reach to sophos utm.

    Do you have any idea how to check again my raspberry and ubiquiti ? In ubiquiti I tested with ping ....All results are ok.

    If you have any idea, please post it here!!!

    Thank you Jay