This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos remote access denied from one particular public ip

We configured our remote station Sophos from main Centre. We were able to access the sophos remote through https and assigned port unitl two days. Now onwards we unable to connect them through this ip but we able to connect from any other public ip series

checked blocked ip source but nothing came out. doubts somebody from the team have multiple login failure by that admin locked the ip.

This thread was automatically locked due to age.

Parents

0 FormerMember over 4 years ago

Hi tn_nb,

Thank you for reaching out to the Community!

Can you see the traffic from this specific public IP address if you run the packet capture on the XG firewall?

If yes, is it allowed or blocked? Run the packet capture, check out the following KBA: Monitor traffic using Packet Capture Utility in the Sophos XG Firewall GUI.

If there were more than 5 unsuccessful login attempts from the same IP address, the IP would be blocked for the configured time period under Administration > Admin and user settings > Login secutiy.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 FormerMember over 4 years ago

Hi tn_nb,

Thank you for reaching out to the Community!

Can you see the traffic from this specific public IP address if you run the packet capture on the XG firewall?

If yes, is it allowed or blocked? Run the packet capture, check out the following KBA: Monitor traffic using Packet Capture Utility in the Sophos XG Firewall GUI.

If there were more than 5 unsuccessful login attempts from the same IP address, the IP would be blocked for the configured time period under Administration > Admin and user settings > Login secutiy.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data