How to add Sophos UTM/SG firewall login credentials

For Auvik to successfully connect to Sophos firewalls using SSH, the login credentials must be entered in a specific format.

Sophos UTM/SG Firewalls

When configuring login credentials in Auvik, use the following values:

Important: The username must be entered as loginuser. Other administrator accounts are not supported for CLI collection.

Sophos UTM uses the loginuser account for SSH access. Administrative privileges are obtained after login using the root/sudo credentials.

Sophos XG / Sophos Firewall

When configuring login credentials in Auvik, use the following values:

Important: The username must be entered as admin.

Verify SSH Access

Before adding credentials to Auvik, verify that SSH access is enabled on the firewall.

Sophos UTM/SG

1. Navigate to Management > System Settings > Shell Access.
2. Verify that SSH access is enabled.
3. Confirm that the Auvik collector's IP address is permitted in Allowed Networks.
4. Verify the SSH daemon is listening on the expected port (TCP 22 by default).

Sophos XG / Sophos Firewall

1. Verify that SSH administrative access is enabled.
2. Confirm the Auvik collector can reach the management interface.
3. Verify any administrator access restrictions permit connections from the collector.

Add the Credentials to Auvik

1. In Auvik, navigate to Discovery > Login Credentials.
2. Click Add Login Credentials.
3. Select the appropriate credential type.
4. Enter the credentials using the format described above.
5. Click Save.

After the credentials are saved, Auvik will automatically attempt to authenticate to the firewall.

Troubleshooting

If authentication fails:

• Verify SSH access is enabled on the firewall.
• Confirm the collector IP address is allowed to access the management interface.
• Verify the correct username is being used (loginuser for UTM/SG or admin for XG).
• Confirm the password and enable password are correct.
• Test the credentials directly using an SSH client such as PuTTY.
• Verify the firewall is not configured to use a non-standard SSH port.

If authentication continues to fail after verifying these settings, contact Auvik support for further assistance.