How / is the built-in 'Support Access' function protected to ensure no-one but Sophos can access?

When you enable support access the firewall will create a SSH tunnel over:

utm@54.228.158.66

On Port 22.

Apparently It also creates some temporary files for known hosts, and keys, which are deleted after you disable the support access.

-o UserKnownHostsFile=/tmp/uma_known_hosts
-i /tmp/uma_host.priv

Meanwhile when It's creating the SSH Tunnel It will do a port forward of: 

-L localhost:22022:localhost:4223

If someone else can dig in to this, I would be grateful. (if you're allowed.)

If you need security insight into this, please feel free to contact your local Sales rep to get legal in touch. But assuming this is already stated in the Sophos docs: www.sophos.com/.../sophos-end-user-license-agreement.aspx

If you need security insight into this, please feel free to contact your local Sales rep to get legal in touch. But assuming this is already stated in the Sophos docs: www.sophos.com/.../sophos-end-user-license-agreement.aspx