This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Can't Access Web Admin via WAN or LAN

Hi,

I need help with my device. I cant seem to access it via WAN or LAN. I've used the proper port number and IP address. I was able to access it still last week but ever since i changed the access to sophos central, I haven't been able to access it anymore. I want to change it back but I don't know how.

 

Any help would be nice

 

Thanks!



This thread was automatically locked due to age.
  • Hello,

    If you have locked yourself out of the WebAdmin, you can enable this again from the CLI.

    You will need to either connect via a console cable or SSH and run the below command.

    Note this will drop all internet traffic so it will need to be disabled after the changes have been made.

    1. Connect to CLI
    2. Selection option 4
    3. Run system appliance_access enable
    4. Access WebAdmin. Make the changes needed
    5. Run system appliance_access disable

    Hope this helps

  • Thank you for your help.

    But I a mean, I am not able to access Admin console from WAN even HTTPS Admin Access is enabled.

  • Hello,

    What happens when you try to access the WebAdmin page from the WAN/LAN?

    What did you change when this stopped working? 

    Thanks.

  • Hi Sam,

     

    I changed nothing, I was not able able to access the Admin Web Interface from WAN since the beginning.

    Form LAN, I can access normally. 

     

    Thank you for your help.

  • I've just noticed you're a different user to the original post. 

    If you have any devices upstream from the firewall (ISP route for example) you will need to port forward 4444 to the XG for this to work.

    If this does not fix the problem, please open a new thread with the details of everything you have tried so far.

    Thank you. 

  • Fist of all, a simple question: Is your modem bridged(ppoe) or dhcp?

    If DHCP is the case (meaning if you go to the network->interfaces ->wan(probably port2) from sophos, your ip will be something like 192.168.1.2, then you have to do the following:

    Click on the port which your wan is (eg. Port 2) and on ip assignment choose static ip and enter an ip address (eg. 192.168.1.2 or 192.168.0.2 whatever your router gives you), subnet probably is /24 and gateway your modem's ip (eg. 192.168.1.1 or 192.168.0.1 or what it has). Save.

    Go to your modems' web page and search for DMZ. Enable it and enter the SFOS ip (eg.192.168.1.2 etc) and save. You should be ok.

     

    If it's a bridge, then 2 things happen. Either you haven't checked HTTPS on WAN on Administration-> Device Access or your ISP has dynamic ip which changes before you can find out what it is. You can add a ddns if you like on Network-> Dynamic DNS so you won't have to search for your ip every time.

     

    Last but not least, remember you need httpS to access the page. So it's https://xxx.xxx.xxx.xxx:4444