Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 26 subscribers
  • Views 2477 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Unable to access the admin console from outside network - What am I missing?

manbearpig

Hello All,

I referred to some of the posts here but still unable to access the firewall admin console from an outside network. Please see the attached screenshots. I have anonymized them for security reasons:

  • AccessError.png: The error screen I am getting when I try to access the hostname mycompany.dynaccess.com
  • ExpectedScreen.png: The screen which I should be seeing. Please ignore the cert issue since that is not related.
  • DeviceAccess.png: The settings screen in my Sophos XG105w firewall
  • DDNSTab.png: The screen capture of the DDNS section of the firewall
  • DDNSSettings.png: The settings screen capture
  • Digicertresult.png: The result when I try to look up the hostname mentioned in the firewall
  • DNSLookupresult: Another result screen capture

Is there anything I am doing wrong or missing? Please help, thanks.

 



This thread was automatically locked due to age.
Parents
  • 0

    Hello manbearpig,

    In your screenshot, doesn't seem you are accessing using port 4444 when connecting from the outside, but on the internal IP you are using the correct Port 4444.

    If you do an NSLOOKUP for the FQDN is it resolving correctly to the Public IP? Can you confirm the IP by connecting to a computer behind the XG and going to a page such as https://www.ipchicken.com/

    Additionally, to this it would be good if we have pcap of the port 4444 when you are trying to access from the WAN interface.

    This command would have to be run from the backend you can follow this KB

    #tcpdump -eni any port 4444

    Regards,

Reply
  • 0

    Hello manbearpig,

    In your screenshot, doesn't seem you are accessing using port 4444 when connecting from the outside, but on the internal IP you are using the correct Port 4444.

    If you do an NSLOOKUP for the FQDN is it resolving correctly to the Public IP? Can you confirm the IP by connecting to a computer behind the XG and going to a page such as https://www.ipchicken.com/

    Additionally, to this it would be good if we have pcap of the port 4444 when you are trying to access from the WAN interface.

    This command would have to be run from the backend you can follow this KB

    #tcpdump -eni any port 4444

    Regards,

Children
No Data