Web admin console

Manage your XG Firewall using the web admin console.

Sophos Firewall OS uses a graphical user interface (web admin console) to configure and manage XG Firewall.

We support most of the commonly used browsers. We recommend that you use the latest browser version.

Web admin console settings

You can access the web admin console from a web browser using HTTPS. The default settings are as follows:

  • Services: HTTPS
  • Interface: LAN
  • Admin console HTTPS port: 4444

To change which interface you access the web admin console on, go to Administration > Device access.

Warning We don't recommend enabling the web admin console on external-facing (WAN) interfaces. This could allow hackers to easily identify the firewall vendor and type, and launch a targeted attack.

To update the web admin console settings, go to Administration > Admin settings.

To access the sign-in window, open a browser and type the internal IP address or the hostname of XG Firewall in the address bar, followed by the port number if it differs from 443.

Example: security.sophos.com:4444

You can select the language from the drop-down menu in the upper right corner of the sign-in window.

Enter your username and password. When you sign in to XG Firewall for the first time, you use the default username and password.

Every time you sign in to the web admin console you see the control center, which provides a snapshot of the status and health of the security system.

To prevent unauthorized users from accessing XG Firewall, sign out after you finish working.

To sign out of XG Firewall, click your username at the upper right corner of any of the web admin console pages, and select Logout.

Web pages

The following options are available at the top of every web page:



How-to guides

Opens the XG Firewall how-to library, where you can find videos to help you configure your XG Firewall.

Log viewer

Opens the log viewer in a new window.


Opens the context-sensitive help page.


Example: admin

The options in the drop-down menu are as follows:
  • Support: Opens the Sophos support page. You can open a support case from this page.
  • About product: Opens the Licensing page.
  • Console: Opens the command line interface (CLI) console.
  • Reboot device
  • Shutdown device
  • Lock: Locks the web admin console. To unlock the web admin console you must enter your password. You return to the page that you were working on and you don't have to re-enter information. However, if you turned on Log out admin session after in Administration > Admin settings, you return to the sign-in window after the amount of time you specified. You lose unsaved changes.
  • Logout: Logs you out of the admin session and returns you to the sign-in window.