This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Access UTM loginuser and root prior to WebAdmin configuration

Hi,

Is there any way of accessing the console of a Sophos UTM without setting the WebAdmin user via the GUI? We have a situation where our Server admin has configured the VM for Sophos UTM but we cannot access the Sophos or ping the Sophos via its displayed WebAdmin Management address shown on console. So we need to check via Console that a) the correct MAC relates to the correct vNIC and Port Group assigned to the WebAdmin interface and b) the correct default gateway is configured?

Regards
Darren

This thread was automatically locked due to age.

0 William Warren over 10 years ago

nopers. the shell is locked down until configured in the webadmin. The vm admin should be able to see the sophos vm mac and where it is pointing inside their admin console.
Cancel
Vote Up 0 Vote Down

Cancel
0 darren.frowen over 10 years ago

Thanks, for the confirmation, I didn't thinks so, was hoping though [:(]

Regards
Darren
Cancel
Vote Up 0 Vote Down

Cancel
0 darren.frowen over 10 years ago

Hi,

Just to let you know, by default before the WebAdmin is configured, you can access root, there is no password set [:)] I had another case open with Sophos and asked him the question, he was correct he was only 99% sure. So you can access and look at the MAC to NIC to Port Group mappings. As it tuned out the Server admin gave the wrong Port Group to the First NIC.

Regards
Darren
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 10 years ago

that's not good. I don't recall it being open until configured. That's a huge security problem even if it is only open to internal. I'll be raising this security flaw with support pronto because i know many folks do NOT configure shell access assuming it follows the rest of the security posture by default...
Cancel
Vote Up 0 Vote Down

Cancel
0 darren.frowen over 10 years ago

This is via console only don't forget, not via SSH. After setup there is only one NIC when performing ifconfig on console eth1 the management and the Loopback, so no one could access as there are no shell access set prior to the initial configuration via port 4444.

Regards
Darren
Cancel
Vote Up 0 Vote Down

Cancel
0 teched_01 over 10 years ago

By no means a complete timeline:

v7something
https://community.sophos.com/products/unified-threat-management/astaroorg/f/52/t/26409

7.5
https://community.sophos.com/products/unified-threat-management/astaroorg/f/98/t/68611

8.201
https://community.sophos.com/products/unified-threat-management/astaroorg/f/52/t/28160

8.95
https://community.sophos.com/products/unified-threat-management/astaroorg/f/75/t/64361

And I confirmed the initial default blank root password behavior at the console in 9.205:
https://community.sophos.com/products/unified-threat-management/astaroorg/f/52/t/29566

Should the behavior change, single user mode at the console is a potential backup entry mechanism.
Cancel
Vote Up 0 Vote Down

Cancel
0 William Warren over 10 years ago

console access is one thing..i'm talking shell access..
Cancel
Vote Up 0 Vote Down

Cancel