This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

If no user on a firewall for an API call, the WebAdmin breaks down

Hello Community,

for info: if there is no user on a firewall for an API call, the WebAdmin breaks down and is unreachable for about 10 minutes. The API responds with this message:

<?xml version="1.0" encoding="UTF-8"?>
<Response APIVersion="1900.1" IPS_CAT_VER="1">
<Login>
<status>Authentication Failure</status>
</Login>
</Response>

This is reproducible on Sophos firewalls running SFOS 19.0.1-MR1-Build-365.

Ben

This thread was automatically locked due to age.

Parents

0 dirkkotte over 2 years ago

Is it possible your IP is blocked after too many authentication failures?
Do you tried another IP at the PC?
.. or stops the XG packet forwarding at all?

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 dirkkotte over 2 years ago

Is it possible your IP is blocked after too many authentication failures?
Do you tried another IP at the PC?
.. or stops the XG packet forwarding at all?

Dirk

Systema Gesellschaft für angewandte Datentechnik mbH // Sophos Platinum Partner
Sophos Solution Partner since 2003
If a post solves your question, click the 'Verify Answer' link at this post.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Ben@Network over 2 years ago in reply to dirkkotte

Hi Dirk,

no, everything works well if I create my apiuser on firewall. I use the same script from the same PC to make my API calls.

The firewall itself will also working if the WebAdmin access is blocked.

Ben

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 emmosophos over 2 years ago in reply to Ben@Network

Hello Ben,

Thank you for contacting the Sophos Community.

Can you provide the exact steps to reproduce this issue, so I can bring it to the attention of DEV team to confirm if this is expected or might be an issue?

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 2 years ago in reply to Ben@Network

Actually, Dirk was talking about a different scenario: So if you send a XML Request to the firewall without a user, it will generate a faulty login. This means, if you have multiple XML Files (in a script) you can generate enough Requests to get blocked by the Password guessing protection.

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel