Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 16 replies
  • Answers 2 answers
  • Subscribers 26 subscribers
  • Views 24304 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

I am trying to gain access to my XG firewall for the first time.

Dwight Sutton

I am trying to gain access to my XG firewall for the first time. It's IPv4 Gateway address is 10.1.106.10 and I entered in https://10.1.106.10 and it says it is invalid, bad certificate. What am I doing wrong?



This thread was automatically locked due to age.
Parents
  • 0

    Dwigth,

    in order to access the XG web interface, you have to enter the IP addresse you configured during the installation/basic setup in this way:

    https://xg_ip:4444 and proceed with the certificate warning.

    If you did not change the IP, the default IP is 172.16.16.16

    Thanks

  • 0 in reply to lferrara

    I used https://172.16.16.16/, it says it can't be found and does not give me a certificate warning.  I used https://xg_ip:4444, it says server can't be found.  I tried it both with firefox and microsoft edge.

  • 0 in reply to Dwight Sutton

    Dwight,

    "XG_IP" must be the LAN IP you configured on your XG. By default the ip is 172.16.16.16 so the link will be: https://172.16.16.16:4444.

    Make sure you have a computer configured with an IP in the same subnet. For example configure on your PC 172.16.16.1 where subnet is 255.255.255.0

    Once there, connect the computer to PORT1 and you should be able to ping the ping from your computer and proceed with the configuration.

    If your are not able to ping 172.16.16.16, change the port and connect the computer to all other firewall nics until you find the one that is pingable.

    Thanks

  • 0 in reply to Dwight Sutton

    My command prompt ipconfig shows

    IPvd address ...10.1.106.154

    Subnet Mask...255.255.255.0

    Default Gateway...10.1.106.10

    When I try to change the Subnet from 255.255.255.0 to "172.16.16.1" in the network and sharing center, as suggested it conflicts,  and won't accept it.  Do I need to enter the numbers in a different way?

  • 0 in reply to Dwight Sutton

    Hi Dwight,

    In your original post, you said when you configured your IPs and tried to access the XG you got a bad certificate, while using Chrome could you try again, and take screenshots of the page then open up the certificate. Could then screenshot what Chrome says about the cert issues then view the certificate and screenshot it's details  so we can see what the problems could be?

    Emile

  • 0 in reply to Emile Belcourt

    Here is the what the response was from Chrome.

    This site can’t be reached

    172.16.16.16 unexpectedly closed the connection.

    Try:

    ERR_CONNECTION_CLOSED
  • 0 in reply to Dwight Sutton

    Dwight,

    once you have installed XG, did you change the default ip? If not, as I said you should be able to ping it from a pc in the same subnet.

    Configure your PC with 172.16.16.17 subnet 255.255.255.0 with NO GATEWAY and try to ping 172.16.16.16.

  • 0 in reply to lferrara

    Tried it on Chrome and Firefox and got this:

    This site can’t be reached

    172.16.16.16 unexpectedly closed the connection.

    Try:

  • 0 in reply to Dwight Sutton

    Dwight,

    install XG from scratch and one the installation is finished, connect a computer to a switch and the a cable from switch to XG first port using the information I gave to you in my last response. If you cannot ping the device, change the port and go on....until XG last port. Default ip is 172.16.16.16.

  • 0 in reply to lferrara

    Installing XG from scratch is confusing to me. Usually I have some software on my computer that I can access.  There was no XG software on any of my office computers after the IT company installed them.  I have asked the IT company for software and manuals and they say they are all accessible on the internet.  They did give me the super administrator credentials, but that is all.  This IT company has been very difficult to deal with and I don't want to pay them a thin dime more for this.  I want to do this myself, but I have went to your website and have found no way to download/install anything from there.  They all say I have to access the CLI console, but when I do, you see where it has gotten me...nowhere.

  • 0 in reply to Dwight Sutton

    You don't need any sw to install on your computer.you only need to know the ip of your XG and credentials. If they were changed to something that you do not know, then you need to connect a vga cable and keyboard, reboot the appliance and reset password to default and use the console to change the default ip. To reset the admin password use:

    On Sophos website you can find both cli and administration guide.

  • 0 in reply to Dwight Sutton

    Hi,

    Set the network settings on your computer like:

    Go to https://172.16.16.16:4444. If you still don't get the Management GUI then Ping 172.16.16.16 from the system and verify if the XG is reachable.

    Also, do a tracert 172.16.16.16 in command prompt and post the output.

    Thanks

Reply
  • 0 in reply to Dwight Sutton

    Hi,

    Set the network settings on your computer like:

    Go to https://172.16.16.16:4444. If you still don't get the Management GUI then Ping 172.16.16.16 from the system and verify if the XG is reachable.

    Also, do a tracert 172.16.16.16 in command prompt and post the output.

    Thanks

Children