{"id":168198,"date":"2025-05-01T08:23:03","date_gmt":"2025-05-01T07:23:03","guid":{"rendered":"https:\/\/www.avanet.com\/kb\/sophos-firewall-avanet-support-access\/"},"modified":"2025-05-01T08:24:11","modified_gmt":"2025-05-01T07:24:11","slug":"sophos-firewall-avanet-support-access","status":"publish","type":"kb","link":"https:\/\/www.avanet.com\/en\/kb\/sophos-firewall-avanet-support-access\/","title":{"rendered":"Setting up Avanet support access to Sophos Firewall"},"content":{"rendered":"\n<p>To ensure that Avanet support can securely access your Sophos Firewall and help you quickly and effectively if necessary, a few precautions are necessary. These steps ensure that only authorized Avanet employees have access and at the same time increase the security of your firewall. <\/p>\n\n<div class=\"wp-block-rank-math-toc-block\" id=\"rank-math-toc\"><h2>Content<\/h2><nav><ul><li class=\"\"><a href=\"#1-benutzerkonto-erstellen\">1. create user account<\/a><\/li><li class=\"\"><a href=\"#2-fqdn-host-fur-ip-beschrankung-erstellen\">2. create FQDN host for IP restriction<\/a><\/li><li class=\"\"><a href=\"#3-acl-regel-fur-zugriff-erstellen\">3. create ACL rule for access<\/a><\/li><li class=\"\"><a href=\"#4-ssh-public-key-fur-sicheren-zugriff-hinterlegen\">4. store SSH public key for secure access<\/a><\/li><\/ul><\/nav><\/div>\n\n<h4 class=\"wp-block-heading\" id=\"1-benutzerkonto-erstellen\">1. create user account<\/h4>\n\n<p>To create a new user account for Avanet Support, proceed as follows:<\/p>\n<div class=\"gb-grid-wrapper gb-grid-wrapper-3992351c\">\n<div class=\"gb-grid-column gb-grid-column-ec5f8afd\"><div class=\"gb-container gb-container-ec5f8afd\">\n\n<div class=\"wp-block-stackable-image stk-block-image stk-block stk-cf627a7\" data-block-id=\"cf627a7\"><style>.stk-cf627a7 .stk-img-figcaption{text-align:center !important;color:#abb7c2 !important;}<\/style><figure><span class=\"stk-img-wrapper stk-image--shape-stretch stk--has-lightbox\"><img loading=\"lazy\" decoding=\"async\" class=\"stk-img wp-image-168163\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-1-add-user-scaled.jpg\" width=\"2560\" height=\"1589\" alt=\"Sophos Firewall - Add a new user\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-1-add-user-scaled.jpg 2560w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-1-add-user-300x186.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-1-add-user-1024x636.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-1-add-user-768x477.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-1-add-user-1536x953.jpg 1536w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-1-add-user-2048x1271.jpg 2048w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-1-add-user-600x372.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-1-add-user-64x40.jpg 64w\" sizes=\"auto, (max-width: 2560px) 100vw, 2560px\" \/><\/span><figcaption class=\"has-text-color stk-img-figcaption\">Sophos Firewall &#8211; Neuen Benutzer hinzuf\u00fcgen<\/figcaption><\/figure><\/div>\n\n<\/div><\/div>\n\n<div class=\"gb-grid-column gb-grid-column-3bb9c8f0\"><div class=\"gb-container gb-container-3bb9c8f0\">\n\n<div class=\"wp-block-stackable-image stk-block-image stk-block stk-def3c2e\" data-block-id=\"def3c2e\"><style>.stk-def3c2e .stk-img-figcaption{text-align:center !important;color:#abb7c2 !important;}<\/style><figure><span class=\"stk-img-wrapper stk-image--shape-stretch stk--has-lightbox\"><img loading=\"lazy\" decoding=\"async\" class=\"stk-img wp-image-168168\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-2-add-user-detail-scaled.jpg\" width=\"2560\" height=\"1589\" alt=\"Sophos Firewall - Enter data for new users\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-2-add-user-detail-scaled.jpg 2560w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-2-add-user-detail-300x186.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-2-add-user-detail-1024x636.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-2-add-user-detail-768x477.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-2-add-user-detail-1536x953.jpg 1536w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-2-add-user-detail-2048x1271.jpg 2048w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-2-add-user-detail-600x372.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-2-add-user-detail-64x40.jpg 64w\" sizes=\"auto, (max-width: 2560px) 100vw, 2560px\" \/><\/span><figcaption class=\"has-text-color stk-img-figcaption\">Sophos Firewall &#8211; Benutzerdaten erfassen<\/figcaption><\/figure><\/div>\n\n<\/div><\/div>\n<\/div>\n<ul class=\"wp-block-list\">\n<li>Register at Sophos Firewall.<\/li>\n\n\n\n<li>Navigate to <strong>Configure \u2192 Authentication \u2192 Users<\/strong>.<\/li>\n\n\n\n<li>Click on <strong>Add<\/strong> to create a new user.<\/li>\n\n\n\n<li>Enter the following data:\n<ul class=\"wp-block-list\">\n<li><strong>Username:<\/strong> avanet<\/li>\n\n\n\n<li><strong>Name:<\/strong> Avanet<\/li>\n\n\n\n<li><strong>User type:<\/strong> Administrator<\/li>\n\n\n\n<li><strong>Profiles:<\/strong> Administrator<\/li>\n\n\n\n<li>Enter a secure password in the <strong>Password<\/strong> field (an Avanet technician will change this password the first time you log in anyway).<\/li>\n\n\n\n<li><strong>Email:<\/strong> <a>noreply@avanet.local<\/a><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Click on <strong>Save<\/strong> to create the user.<\/li>\n<\/ul>\n\n<h4 class=\"wp-block-heading\" id=\"2-fqdn-host-fur-ip-beschrankung-erstellen\">2. create FQDN host for IP restriction<\/h4>\n\n<p>To ensure that only Avanet employees have access to your firewall, an FQDN host is created that only allows Avanet IP addresses:<\/p>\n<div class=\"gb-grid-wrapper gb-grid-wrapper-e0aaeaf2\">\n<div class=\"gb-grid-column gb-grid-column-9e117e98\"><div class=\"gb-container gb-container-9e117e98\">\n\n<div class=\"wp-block-stackable-image stk-block-image stk-block stk-c58094f\" data-block-id=\"c58094f\"><style>.stk-c58094f .stk-img-figcaption{text-align:center !important;color:#abb7c2 !important;}<\/style><figure><span class=\"stk-img-wrapper stk-image--shape-stretch stk--has-lightbox\"><img loading=\"lazy\" decoding=\"async\" class=\"stk-img wp-image-168173\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-3-add-fqdn-host-scaled.jpg\" width=\"2560\" height=\"1589\" alt=\"Sophos Firewall - Add FQDN host\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-3-add-fqdn-host-scaled.jpg 2560w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-3-add-fqdn-host-300x186.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-3-add-fqdn-host-1024x636.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-3-add-fqdn-host-768x477.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-3-add-fqdn-host-1536x953.jpg 1536w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-3-add-fqdn-host-2048x1271.jpg 2048w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-3-add-fqdn-host-600x372.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-3-add-fqdn-host-64x40.jpg 64w\" sizes=\"auto, (max-width: 2560px) 100vw, 2560px\" \/><\/span><figcaption class=\"has-text-color stk-img-figcaption\">Sophos Firewall &#8211; FQDN hinzuf\u00fcgen<\/figcaption><\/figure><\/div>\n\n<\/div><\/div>\n\n<div class=\"gb-grid-column gb-grid-column-dd701daa\"><div class=\"gb-container gb-container-dd701daa\">\n\n<div class=\"wp-block-stackable-image stk-block-image stk-block stk-1433aa0\" data-block-id=\"1433aa0\"><style>.stk-1433aa0 .stk-img-figcaption{text-align:center !important;color:#abb7c2 !important;}<\/style><figure><span class=\"stk-img-wrapper stk-image--shape-stretch stk--has-lightbox\"><img loading=\"lazy\" decoding=\"async\" class=\"stk-img wp-image-168178\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-4-add-fqdn-host-detail-scaled.jpg\" width=\"2560\" height=\"1589\" alt=\"Sophos Firewall - Add FQDN Host support.avanet.com\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-4-add-fqdn-host-detail-scaled.jpg 2560w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-4-add-fqdn-host-detail-300x186.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-4-add-fqdn-host-detail-1024x636.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-4-add-fqdn-host-detail-768x477.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-4-add-fqdn-host-detail-1536x953.jpg 1536w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-4-add-fqdn-host-detail-2048x1271.jpg 2048w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-4-add-fqdn-host-detail-600x372.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-4-add-fqdn-host-detail-64x40.jpg 64w\" sizes=\"auto, (max-width: 2560px) 100vw, 2560px\" \/><\/span><figcaption class=\"has-text-color stk-img-figcaption\">Sophos Firewall &#8211; Avanet Support IPs hinzuf\u00fcgen<\/figcaption><\/figure><\/div>\n\n<\/div><\/div>\n<\/div>\n<ul class=\"wp-block-list\">\n<li>Navigate to <strong>System \u2192 Hosts and services \u2192 FQDN host<\/strong>.<\/li>\n\n\n\n<li>Click on <strong>Add<\/strong>.<\/li>\n\n\n\n<li>Enter the following information:\n<ul class=\"wp-block-list\">\n<li><strong>Name:<\/strong> support.avanet.com<\/li>\n\n\n\n<li><strong>FQDN:<\/strong> support.avanet.com<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Click on <strong>Save<\/strong> to create the FQDN host.<\/li>\n<\/ul>\n\n<h4 class=\"wp-block-heading\" id=\"3-acl-regel-fur-zugriff-erstellen\">3. create ACL rule for access<\/h4>\n<div class=\"gb-grid-wrapper gb-grid-wrapper-2af64407\"><\/div>\n<p>This ACL rule ensures that only Avanet has access to the relevant services on your firewall:<\/p>\n\n<ul class=\"wp-block-list\">\n<li>Navigate to <strong>System \u2192 Administration \u2192 Device access<\/strong>.<\/li>\n\n\n\n<li>Click on <strong>Add<\/strong> to add a new rule.<\/li>\n\n\n\n<li>Enter the following values:\n<ul class=\"wp-block-list\">\n<li><strong>Rule name:<\/strong> Avanet-Support<\/li>\n\n\n\n<li><strong>Rule position:<\/strong> Bottom<\/li>\n\n\n\n<li><strong>IP version:<\/strong> IPv4<\/li>\n\n\n\n<li><strong>Source zone:<\/strong> Any<\/li>\n\n\n\n<li><strong>Source Network \/ Host:<\/strong> support.avanet.com (the previously created FQDN host)<\/li>\n\n\n\n<li><strong>Destination host:<\/strong> Any<\/li>\n\n\n\n<li><strong>Services:<\/strong> HTTPS, Ping\/Ping6, SSH<\/li>\n\n\n\n<li><strong>Action:<\/strong> Accept<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Confirm with <strong>Save<\/strong> to create the rule.<\/li>\n<\/ul>\n\n<h4 class=\"wp-block-heading\" id=\"4-ssh-public-key-fur-sicheren-zugriff-hinterlegen\">4. store SSH public key for secure access<\/h4>\n\n<div class=\"wp-block-stackable-image stk-block-image stk-block stk-f343f49\" data-block-id=\"f343f49\"><style>.stk-f343f49 .stk-img-figcaption{text-align:center !important;color:#abb7c2 !important;}<\/style><figure><span class=\"stk-img-wrapper stk-image--shape-stretch stk--has-lightbox\"><img loading=\"lazy\" decoding=\"async\" class=\"stk-img wp-image-168193\" src=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-7-add-ssh-publickey-scaled.jpg\" width=\"2560\" height=\"1589\" alt=\"Sophos Firewall - Store public key for SSH access\" srcset=\"https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-7-add-ssh-publickey-scaled.jpg 2560w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-7-add-ssh-publickey-300x186.jpg 300w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-7-add-ssh-publickey-1024x636.jpg 1024w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-7-add-ssh-publickey-768x477.jpg 768w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-7-add-ssh-publickey-1536x953.jpg 1536w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-7-add-ssh-publickey-2048x1271.jpg 2048w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-7-add-ssh-publickey-600x372.jpg 600w, https:\/\/www.avanet.com\/assets\/sophos-firewall-avanet-support-access-7-add-ssh-publickey-64x40.jpg 64w\" sizes=\"auto, (max-width: 2560px) 100vw, 2560px\" \/><\/span><figcaption class=\"has-text-color stk-img-figcaption\">Sophos Firewall &#8211; Public Key hinzuf\u00fcgen<\/figcaption><\/figure><\/div>\n\n<p>SSH access via public key additionally increases security by ensuring that only authorized persons have access to the firewall. To store the Avanet public key, proceed as follows: <\/p>\n\n<ul class=\"wp-block-list\">\n<li>Navigate to <strong>System \u2192 Administration \u2192 Device access<\/strong>.<\/li>\n\n\n\n<li>Scroll down to the <strong>Public key authentication for admin<\/strong> section.<\/li>\n\n\n\n<li>Activate the <strong>Enable authentication<\/strong> option.<\/li>\n\n\n\n<li>Click on the <strong>plus (+)<\/strong> symbol in the <strong>Authorized keys<\/strong> field.<\/li>\n\n\n\n<li>Copy and paste the public key:<\/li>\n<\/ul>\n\n<pre class=\"wp-block-code\"><code>ssh-rsa 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<\/code><\/pre>\n\n<ul class=\"wp-block-list\">\n<li>Confirm with <strong>Apply<\/strong>.<\/li>\n<\/ul>\n\n<p>After these steps, the setup is complete. Avanet Support now has secure and restricted access to your Sophos Firewall and can provide efficient assistance if required. Let the support team know your public IP for access.  <\/p>\n","protected":false},"author":5,"featured_media":0,"parent":0,"template":"","format":"standard","kb_kategorie":[382],"class_list":["post-168198","kb","type-kb","status-publish","format-standard","hentry","kb_kategorie-sophos-firewall"],"blocksy_meta":[],"acf":[],"_links":{"self":[{"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/kb\/168198","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/kb"}],"about":[{"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/types\/kb"}],"author":[{"embeddable":true,"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/users\/5"}],"wp:attachment":[{"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/media?parent=168198"}],"wp:term":[{"taxonomy":"kb_kategorie","embeddable":true,"href":"https:\/\/www.avanet.com\/en\/wp-json\/wp\/v2\/kb_kategorie?post=168198"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}