Skip to content
The XG Series hardware appliances will reach end-of-life (EOL) on March 31, 2025. Click here to see the XG to XGS migration documentation.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/sophos-firewall/21.0/Help/en-us/webhelp/onlinehelp/index.html?contextId=CLI-console-access-putty

SSH to the firewall using PuTTY

To SSH into Sophos Firewall using PuTTY, do as follows:

  1. Download PuTTY.

  2. Open the PuTTY utility.

    Here's an example of the PuTTY home screen:

    Putty configuration screen.

  3. Enter the hostname or the LAN, WAN, or WLAN IP address of Sophos Firewall. Keep the default SSH service port to 22.

  4. Ensure the SSH service is turned on in the relevant zone from where you're accessing Sophos Firewall. You can turn on SSH for different zones from Administration > Device access.

    Turn on SSH for LAN zone.

    Note

    The most secure method to allow services into Sophos Firewall is creating ACL exception rules for any services you want. This is useful for allowing services in the WAN and Wi-Fi zones. See Add local service ACL exception rule.

  5. Sign in using the default username admin.

    Note

    You can't use any other username.

  6. Enter the password of the default admin user.

  7. Type 4 to access the Device Console or type 5, then 3 to access the Advanced Shell.