Support access

You can allow Sophos Technical Support to temporarily access your XG Firewall for troubleshooting purposes.

Support access enables Sophos Technical Support to connect to the web admin console of your XG Firewall without requiring admin credentials.

When Support access is enabled, Sophos Technical Support can access the web console and shell of your XG Firewall. XG Firewall initiates all connections with Sophos Technical Support over TCP port 22 for both HTTPS and SSH. XG Firewall closes idle SSH sessions after 15 minutes.

To set up Support access, do the following:

  1. Go to Diagnostics > Support access and turn Support access on.
  2. Click OK.
  3. Select the duration of Support access.
  4. Click Apply to update the settings.
  5. Click OK.
    Sophos XG Firewall establishes a secure control connection to APU (access proxy for UTM) and negotiates a unique access ID.
  6. Share the Access ID with Sophos Technical Support
Sophos Technical Support uses this Access ID to sign in to your XG Firewall. The connection remains live until the specified time.
You can turn off Support access at any time.