Sophos Dynamic DNS Service

Hi Guys,

This is from the help section in XG.

In case you are configuring Sophos as a service provider, provide the host name in the following format: <host name>.myfirewall.co

Thanks Kenneth!

I did read the online help, but I somehow missed the line with the host name information. :)

I couldn't try it yet because the service appears to be down right now, but I am pretty sure it will work.

Cheers,

Jens

Haha i did the same.

I have configured it and it says "SUCCESS", but I cannot resolve the name i have configured. Anyone know how does it work ?

Hi Slawek,

It should resolve to the name entered (YOUR_HOST.myfirewall.co), but it might take some time until your DNS provider gets the correct information.

You can check here if it gets resolved from a different location: https://www.ultratools.com/tools/dnsLookup

Once it works, you can assign a CNAME with a different domain against it.

That said, I believe the service is currently down. It seems that this is still in beta testing and so it stops working from time to time...

Best regards,

Jens

Ok, it worked.

But... how can I be sure that nobody will not hijack that name ?

PS.: I have secured the firewall with a certificate but anyway... I'm curious.

SK

Ok, it worked.

But... how can I be sure that nobody will not hijack that name ?

PS.: I have secured the firewall with a certificate but anyway... I'm curious.

SK

I don't know. I would hope that the Sophos XG is sending some kind of internal authentication (licensing information?) that prevent another Sophos XG from stealing it. But even then I would guess that if it isn't used, it would be released at some point in time...

Good question!

BTW: It just stopped working.

The fact Sophos XG is so awesome and supports DynDNS but does not let you specify a server address is impossibly stupid IMHO. Here is how to use Sophos DynDNS with any DynDNS compatible provider like no-ip.com:

Login to admin.

Click Network -> DNS 

Then scroll down to "DNS Host Entry" and click ADD:

Host/Domain Name: members.dyndns.org

Entry Type: Manual

IP Address: 8.23.224.120 (You might want to do a dns lookup of this to see if the server ip has changed - or resolve the provider of your choice's ip and use that instead - and this is the rub with this setup - if the provider changes the server ip it breaks)

Time to Live (seconds): 60

Weight (1-255):1

Publish on WAN: unchecked

Add reverse DNS lookup for this Host entry: unchecked

Now configure Dynamic DNS but use the no-ip.com username and settings. It works for me!