Web Admin On Red - How To Disable

Hello Glen O'Riley ,

Thank you for reaching out to the community, you can limit the access by controlling allowed networks, as illustrated in the screenshot below:

The Allowed Networks box lets you define the networks that should be able to connect to the WebAdmin interface. For the sake of a smooth installation of Sophos UTM, the default is Any. This means that the WebAdmin interface can be accessed from everywhere. Change this setting to your internal network(s) as soon as possible. The most secure solution, however, would be to limit the access to only one administrator PC through HTTPS. For how to add a network definition, see Definitions & Users > Network Definitions > Network Definitions.

Hello Glen O'Riley ,

Thank you for reaching out to the community, you can limit the access by controlling allowed networks, as illustrated in the screenshot below:

The Allowed Networks box lets you define the networks that should be able to connect to the WebAdmin interface. For the sake of a smooth installation of Sophos UTM, the default is Any. This means that the WebAdmin interface can be accessed from everywhere. Change this setting to your internal network(s) as soon as possible. The most secure solution, however, would be to limit the access to only one administrator PC through HTTPS. For how to add a network definition, see Definitions & Users > Network Definitions > Network Definitions.

Well now I do feel like a dunce as I looked through there numerous times amongst others and somehow managed to miss that. Now I see it I'm Homer DOH'ing and slapping.

Thank you for pointing out the obvious that I managed to somehow miss and yes that makes sense being any when setting up as you won't know which int is red vs green.

We're not likely to have a security issue internally where someone will be banging their head against the admin interface though in a corporate environment you would want to be limiting to a group at least.

I'm aware of definitions, we use them to state machine names so the weekly report can tell us which child used the most downloads to get a boot (not unlimited internet still here). We also use them to single tick knock off ALL devices for each particular child when they haven't done chores, along with nuking the non defined clients in the DHCP pool (guests). It stops unwanted whoring of our internet when we haven't allowed someone.

Again, thank you.