Sophos Firewall: Access the Admin Console

Category: Sophos Firewall · Audience: Technicians · Est. time: 5–15 min

Summary

Where the Sophos Firewall management console lives and how to reach it. The firewall controls the whole site's internet and security, so changes are a BBN/technician task — customers should raise a ticket.

⚠️ A wrong firewall change can take the whole site offline. Make changes in a maintenance window, and back up the config first (Backup & Firmware → Backup).

Reach the admin console

1. On the LAN: browse to https://<firewall-LAN-IP>:4444 (the default admin port is 4444). Common LAN IPs are .1 on the network, e.g. https://192.168.1.1:4444.
2. Accept the certificate warning and sign in with the admin credentials (in BBN's vault).
3. Remotely: via Sophos Central (cloud management, if the firewall is Central‑managed) at central.sophos.com, or over the VPN to the LAN IP. Avoid exposing the admin port to the internet.

Can't reach it?

1. From on‑site LAN, no console: confirm you're on the correct subnet and using :4444 and https. Try the firewall's other interface IP.
2. Locked out / forgotten admin password: use console/CLI access (serial cable or the device's Admin Console) to reset, or recover via Sophos Central. Escalate to BBN — this needs the recovery procedure.
3. Whole site offline: if the internet is down, first see *Sophos: Internet Down — Is It the Firewall?* before assuming a config issue.

Good practice before changing anything

• Back up the config (Backup & Firmware → Backup/Restore → download).
• Know the rollback: Sophos can revert to the last firmware/config; note the current firmware version.
• Change one thing at a time and test.

If that doesn't work

• Escalate to BBN Support for console access or any firewall change — include the site and what you're trying to achieve.

Prevention

• Keep admin creds in BBN's vault, manage via Sophos Central where possible, and never publish the admin port (4444) to the internet.