Skip to content

SSH to the firewall using PuTTY

Do as follows to SSH into Sophos Firewall using the PuTTY utility.

  1. Download PuTTY.
  2. Open the PuTTY utility.

    Here's an example of the PuTTY home screen:

    Putty configuration screen.

  3. Enter the hostname or the LAN, WAN, or WLAN IP address of Sophos Firewall. Keep the default SSH service port to 22.

  4. Ensure the SSH service is turned on in the relevant zone from where you're accessing Sophos Firewall. You can turn on SSH for different zones from Administration > Device access.

    Turn on SSH for LAN zone.


    The most secure method to allow services into Sophos Firewall is creating ACL exception rules for any services you want. This is useful for allowing services in the WAN and Wi-Fi zones. See Add local service ACL exception rule.

  5. Sign in using the default username admin.


    You can't use any other username.

  6. Enter the password of the default admin user.

  7. Type 4 to access the Device console or type 5, then 3 to access the Advanced shell.