Sophos XG Firewall: How to use API

Is it going to be possible to do this from external over the internet? Meaning use the API

Hey Paul Digby 

Yes it would be possible. As per the KB:

Go to Backup & Firmware > API to enable the API Configuration and input the IP addresses you will make the call (the WAN IP you will be connecting from) from in the Allowed IP Address field.

This IP address needs to be in a zone that has access to the HTTPS Admin Services, if not, it needs a Local Service ACL Exception Rule.

Go to Administration > Device Access to verify its associated Zone or to create a Local Service ACL Exception Rule.

Hope this helps,

Yes understood, if you use a fixed IP address.

However, I was thinking along the lines of using from mobile phone, where the cell IP address changes

Rather than expose your API to the internet, would suggest that you connect your phone to your network using a VPN connection so that you can access the API.

Would be secure and saves exposing your API to the interwebs!

HTH

Rather than expose your API to the internet, would suggest that you connect your phone to your network using a VPN connection so that you can access the API.

Would be secure and saves exposing your API to the interwebs!

HTH

You're right - that's the way to do it.