Problem Installation VM GX SOPHOS

Hi Valerio,

take a look at this thread at the end:

https://community.sophos.com/sophos-xg-firewall/f/discussions/136423/sophos-xg-ovf-vmdk/505832#505832

Pick the sf_virtual.ovf and the two vmdk-files.

Hi Thomas,

done as you asked, i took a fresh installation with sf_virtual.ovf but nothing changes, its strange that form virtual sophos I can ping my pc but not vice versa, I still can't reach the https port and port 4444. suggestions?

Thank you.

Valerio

Hi Valerio,

how is your network set up? Share a diagram with topology and IPs. Are there any other routers/firewalls? 

Hello, my topology is very simple.

We have a physical firewall XG310 connected on 2 LAN ports towards the vmware esxi, a 10.10.10.0/24 network and the other on the 192.168.46.0/24 network and a single WAN port.
the virtual firewall has been placed on the office network (192.168.46.0/24 on the same network we have serve dhcp  and files server and those works great).

Thank you

Valerio

I give an example: XG310 with IP 10.10.10.254 is connected with Port A on a switch and Port B directly on the ESX.

The virtual XG has the IP 192.168.46.254 - which interface is this here? WAN or LAN?

You try to access your virtual XG with a client / computer which has an IP from the 10.10.10.0/24 subnet, right?

If so - do you have firewall rule from 10.10.10.0/24 subnet on your XG310 which allows traffic to the 192.168.46.0 subnet?

I give an example: XG310 with IP 10.10.10.254 is connected with Port A on a switch and Port B directly on the ESX.

The virtual XG has the IP 192.168.46.254 - which interface is this here? WAN or LAN?

You try to access your virtual XG with a client / computer which has an IP from the 10.10.10.0/24 subnet, right?

If so - do you have firewall rule from 10.10.10.0/24 subnet on your XG310 which allows traffic to the 192.168.46.0 subnet?

Yes you right.. so the Port2 is our WAN, Port6 is our LAN configured with GW 192.168.46.254 and Port7 is configured whith GW 10.10.10.254 and those ports are connected into vmware, im trying to access into virtual XG IP 192.168.46.41 on the same subnet of 192.168.46.0/24 from my PC which has ip 192.168.46.44

In which zone is the IP 192.168.46.41 sitting on the virtual XG?

Please share following screenshots from virtual XG:

Network -> Interfaces

Administration -> Device access

Yes, the zone is WAN and not LAN, is it possible to change it from console?

Thank you

Valerio

Admin Portal is not activated per default on WAN zones (and should never be for security reasons).

The virtual XG should have a second interface which is sitting on the LAN zone - on default this is accessable with https://172.16.16.16:4444

As far as know there is no command to open it with console, maybe a Sophos Staff Member knows it.

Take a look at this documentation:

Interfaces - Sophos Firewall

EDIT: here is another one:

Device access - Sophos Firewall

Hi, the strange thing is when i enable the comand "sys appliance_access enabled" i can see the user portal interface and on port 444 i see

sorry port 4444

Check the part of "Check and restart services"

Sophos XG Firewall: What to do when the Web Admin is not accessible - Recommended Reads - Sophos Firewall - Sophos Community

Hello, yesterday i follow your link but everything is ok, port 4444 is opened and i also restarte services like apache and tomcat and they are in running state. is it possibile change 4444 default port of gui from cli? thanks

Easiest way is to give you temporary access to the LAN interface on your virtual XG and change everything from GUI.