Sophos UTM 9.6 High Availability - Status

September 2, 2019 Marcel Zimmer
Sophos

An administrator can connect and access XG Firewall via HTTPS, telnet or SSH. Depending on the administrator login account profile used for access, an administrator can access different management interfaces and configuration pages of the web admin interface.

XG Firewall comes with one administrator account and four administrator profiles.

Note: You should change the user's password immediately after deployment.

Web Admin Interface

The Web Admin Interface is a web-based application that an administrator can use to configure, monitor and manage XG Firewall.

You can connect and access the XG Firewall Web Admin Interface from any administrative computer via the web browser using an HTTPS connection:

HTTPS login: https://<LAN-IP address of XG Firewall>:4444

Command Line Interface (CLI)

The command line provides various tools for managing, monitoring and controlling specific components of XG Firewall. XG Firewall can be accessed remotely via the following connections:

Utility for remote login - TELNET login
SSH Client (Serial Console)
Network problems can be diagnosed and resolved in detail via the CLI console.

Sophos Firewall Manager (SFM)

Distributed XG Firewall appliances can be centrally managed from a single Sophos Firewall Manager (SFM) device, providing a high level of security for MSSPs and large enterprises. To monitor and manage XG Firewall appliances via SFM, you must:

Configure SFM in XG Firewall.
Integrate XG Firewall with SFM.
Once you have added the XG Firewall appliances and organised them into groups, you can configure individual XG Firewall appliances or groups of XG Firewall appliances.

Administrator type	Credentials	Console access	Permissions
Super administrator	admin/admin	Web admin interface CLI console	Full access rights for both consoles. Read and write permission for all configuration done via one of the consoles.

Author: Marcel Zimmer

Marcel Zimmer is the Technical Managing Director of EnBITCon. During his time in the German Armed Forces, the trained IT developer was able to gain numerous project experiences. His interest in IT security was significantly awakened by his service in command support. Even after his service, he is an active reservist in the Bundeswehr.

His first firewall was a Sophos UTM 120, which he had to set up for a customer project. Since then, his interest in IT security has grown steadily. In the course of time, various security and infrastructure topics have come into his focus. His most interesting projects included, for example, WLAN coverage in an explosion-proof area, as well as a multi-site WLAN solution for a large