This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Scripting firewall rules

I would like to automate the add of firewall rules inside sophos UTM 9 (software appliance). The idea is, once we have detect a suspicious IP into our network to block it for good.

On my existing router, I am able to telnet the device and run a list of command to add a firewall rule in.

Can this be done with Sophos?

i am trying to connect bia SSH and currently stuck with this but as soon as this will be done, do you know what is the command to run to add a firewall rule to bloack all traffic from a given IP address ?

Thanks

This thread was automatically locked due to age.

0 Scott_Klassen over 8 years ago

Making changes from the shell is unsupported and if you are a paid license user, it would void your support & warranty by doing so, except under direct instruction from Sophos Support.. Beyond that, you'll find that when you try adding manual rules to IPTables from the shell, middleware will revert them almost instantly.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 SimonLECLERCQ over 8 years ago

This is a bad news then. I just installed Sophos to test this software and without any possibility to automate this, this is the end of my testing then.
I am looking for something fully supported.
Cancel
Vote Up 0 Vote Down

Cancel
0 SimonLECLERCQ over 8 years ago

Is this the same if I buy a real Sophos hardware ?
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 8 years ago

Yes, it would be the same regardless of hardware used.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 8 years ago

HI, Simon, and welcome to the UTM Community!

If you insist on using the same approaches as you used with your previous tool, then you're better off staying with it.

Are you certain that you need to do this if you have a UTM? That such traffic won't be blocked automatically by IPS, WAF, etc.? I don't use this approach anywhere except one location where the guy in charge of the web servers won't take the time with the UTM admin to test WAF.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel