It is possible to run the Admin Console on unsecure http port 80.
This should not be possible.
There might be an option to activate a rewrite to 443, but it should not be possible to access firewall managment or firewall presetup through an unsecure http port.
May
Guest User!
You are not Sophos Staff.