How to configure management ports
You can use the management ports to access the web admin and CLI consoles.
Sophos Firewall 1U and higher appliance models have one or more management ports.
The default IP address of the management port is
To configure the management port, do as follows:
Connect your computer to the management port by using a network cable.
Alternatively, connect it through the network. To learn more, see the corresponding quick start guide.
Here's an example of a management port:
Set the IP address of your computer to one that belongs to the management port's subnet.
We recommend that you don't assign non-administrative users to the management port's subnet so that these users can't access the firewall.
(Optional) Change the management port's IP address in the setup assistant if you want. Then complete the setup.
In an HA cluster, the primary device configuration is synchronized to the auxiliary device. So, the management port IP address on the auxiliary device is the same as that on the primary device. You can't set two different IP addresses for the management port on the two devices.
Enter the management port's IP address in the browser to access the web admin console. For example,
https://10.0.1.1:4444. Alternatively, enter the IP address you've assigned to the management port in the setup assistant.
- Enter the default username,
admin, and password,
admin, to sign in.
To edit the management port settings, go to Network > Interfaces.
A management port appears as a PortMGMT port on the list. It's in the LAN zone by default.
Click the port and edit the settings.
If you've created a management VLAN for the firewall administrators on your network, change the IP address of the management port to an address belonging to the management VLAN.
To allow access to the management port from outside your network through VPN, go to Administration > Device access and select VPN under HTTPS and SSH.
Here's an example: