Skip to content
Last update: 2021-10-21

Accessing Command Line Console

You can access CLI in three ways:

  • Locally with console cable - Connect your computer directly to the console port of your firewall. For further details see knowledge base article 130693
  • Remotely through network - Connect your computer through any network interface attached to one of the ports on your firewall.

    If you want to connect using an SSH client, the network interface must have SSH administrative access turned on.

    If you want to connect by accessing the CLI Console in the web admin console, the network interface must have HTTPS administrative access turned on. The CLI console can be accessed from the upper-right hand corner of the screen.


Sophos Firewall closes idle SSH sessions after 15 minutes.

You can connect to Sophos Firewall using the serial cable. You can also use the Micro USB port for some models.


When you connect both Micro USB and RJ45 serial cables, Sophos Firewall gives priority to the Micro USB and redirects output to it.

The serial port baud rate 38400 is grayed out in BIOS to prevent accidental changes.

On successful login, the main menu screen is displayed with the following options:

Main Menu

  1. Network Configuration
  2. System Configuration
  3. Route Configuration
  4. Device Console
  5. Device Management
  6. VPN Management
  7. Shutdown/Reboot Device
  0. Exit

Select Menu Number [0-7]:

To access any of the menu items, type the number corresponding to the menu item.


To access Network Configuration, press 1.

More resources

Back to top