WebAdmin fails after addition of second public IP address

Hi,

I suspect that the Web Admin access port is changed. Are you able to ping the UTM on static IP? If you are able to take SSH to UTM with root privileges, run the command "/etc/init.d/httpd restart", this will restart httpd services which is responsible for WebAdmin GUI.

Thanks

The problem seems to be a little more complex than that. I had rebooted the system in case any services had stopped.

From the internal network (192.168.x.x), I am able to access the WebAdmin and all of it's functions using the internal IP AND the WAN_1 external IP. So routing within the Sophos region is working. I am also able to access the internet without any problems.

I can even access my personal server from the internet when I am not on my internal network. It seems only the WebAdmin access from an external source is the problem.

It has stumped me because I do not recall making any changes to routing that would affect port 4444.

BTW, I can still access the User Portal ... go figure!

The problem seems to be a little more complex than that. I had rebooted the system in case any services had stopped.

From the internal network (192.168.x.x), I am able to access the WebAdmin and all of it's functions using the internal IP AND the WAN_1 external IP. So routing within the Sophos region is working. I am also able to access the internet without any problems.

I can even access my personal server from the internet when I am not on my internal network. It seems only the WebAdmin access from an external source is the problem.

It has stumped me because I do not recall making any changes to routing that would affect port 4444.

BTW, I can still access the User Portal ... go figure!

Hi,

Wonderful, if you are able to login from the internal network, please navigate through Management> Web Admin settings> allowed network. Check if it's ANY or anything specific! Configure the option to get access of device from ANY network. 

Hope that helps :)

There were no changes made to the Access options and I have just checked the setting again and it has the ANY network in the Allowed Networks setting.

Does Sophos have any known problems when there is 1-interface with a static IP and a second interface with a dynamic IP mapped with a dynamic DNS service such as No-IP or dynDNS?

Thanks again for your assistance.

BTW as I mentioned, I am able to access a configured web server behind the Sophos firewall so that function of the firewall is fine.

I would never leave "Any" here or on the 'Shell Access' tab.  Instead, add, for example, the object "NeutralSt8 (User Network)" and then access the UTM via one of the Remote Access capabilities.  When you login to a VPN on the UTM, your User Network object is populated with the IP assigned to you.

Cheers - Bob

Hi,

There is no known issue as such, I am pretty sure the issue is somewhere in the configuration.

Thanks

I am having almost the same problem.

As soon as I add a second WAN Interface with a default gw, the webadmin is only available through the internal netwerk or the second WAN Interface.

I haven't had a chance to re-visit the setup since my last reply.

I will send you an update when I get a chance to look at it again.

Good luck on your end.