Transcription of Sophos XG Firewall
1 Sophos XG Firewallhelpproduct version: 17 ContentsChapter 1- 1 Administrative 2 Administrative 2 Chapter 2- Using the web admin 4 Supported 6 List navigation 3- Control 7 Chapter 4- Current 17 Live 17 Live 18 Live connections 20 View live connection 22 IPsec 25 Remote 26 Chapter 5- & 28 Network & 31 Report 32 Chapter 6- 37 System category 50 Support 53 Chapter 7- 59 Business application 8- Intrusion 114 DoS 114 IPS 114 Custom IPS 117 DoS &
2 Spoof 118 Chapter 9- 131 General 133 File 137 Surfing 138 User 139(2021/11/05)Content 140 Enhancing web 140 Customizing web 141 Controlling access to content using a list of 148 Chapter 10- 151 Synchronized Application 153 Cloud 155 Application shaping 156 Blocking high-risk 157 Chapter 11- 160 Wireless 160 Wireless client 161 Access 164 Rogue AP 170 Access point 170 Mesh 174 Hotspot 180 Hotspot voucher a mesh a wireless network as a separate 183 Deploying a wireless network as a bridge to an access point 185
3 Deploying a hotspot with a custom sign-in 187 Provide guest access using a hotspot 188 Chapter 12- 190 MTA 190 Legacy 216 Chapter 13- Web 236 Web 236 Protection 237 Authentication 241 Authentication 243 General 243 Protecting a web server against 244 Chapter 14- Advanced threat 249 Sandstorm 250 Sandstorm 250 Chapter 15- Central 252 Chapter 16- Security 255 Chapter 17- 257 SSL VPN (remote access).. 262 SSL VPN (site-to-site).. 263 Sophos Connect 265L2TP (remote access).
4 272 Clientless 276 Bookmark 277 PPTP (remote access).. 278 IPsec 284(2021/11/05)Configure IPsec remote access VPN with Sophos Connect 285 Creating a remote access SSL 291 Creating a site-to-site SSL 298 Creating a site-to-site IPsec 301 Chapter 18- 330 WAN link 335 IPv6 router 339 Cellular 341IP (ARP NDP).. 344 Dynamic 346 Creating a site-to-site RED 348 Deploying a RED 350 Chapter 19- 364 Upstream 375 Multicast (PIM-SIM).. 377 Chapter 20- 411 Captive 414 Guest 415 Clientless 419 Guest user 421 Client two-factor 429 Deploying OTP tokens Active Directory 432 Configuring LDAP 435 Configuring RADIUS 437 Configuring transparent authentication using 439 Configuring Chromebook single 445 Chapter 21- System shaping 458 Malware 460 Log 460 Notification 462 Data 463 Traffic 465(2021/11/05)
5 Chapter 22- 466 Access 467 Surfing 468 Network traffic 469 Network address 471 Chapter 23- Hosts and 473IP 473IP host 475 FQDN host 476 Country 477 Service 478 Chapter 24- 480 Device 483 Admin 486 Central 491 Notification 25- Backup & 498 Backup and 501 Import 505 Pattern 508 Chapter 26- 510 Certificate 514 Certificate revocation 516 Appendix A- 517 Log 547 Appendix B- Policy C- IPS custom pattern D- Default file type 558 Appendix E- USB compatibility 562 Appendix F- Compatibility with SFMOS 640 Appendix G- Copyright (2021/11/05)
6 Chapter 11 IntroductionSophos XG Firewall combines the best of both Astaro and Cyberoam technologies, delivering anunprecedented level of innovation to next-generation the all new user interface, new Sophos Security Heartbeat technology, and a powerful newunified policy model, it introduces a number of important innovations that take simplicity, protection,and performance to a whole new Firewall runs on all existing Sophos SG Series and XG Series hardware as well as CyberoamNG Series hardware and is available for a variety of virtual platforms or as a software Firewall provides unprecedented visibility into your network, users, and applications directlyfrom the all-new control center.
7 You also get rich on-box reporting and Sophos iView for centralizedreporting across multiple summary Control center that makes important information visible with extensive drill-down. Intuitive navigation that gets out of the way with helpful reminders and guidance. Policies of all types are managed together on a single screen. Policy tools include innovative new features like types, templates, natural language descriptions,and user identity. User threat quotient that identifies user risk based on past behavior. Discover mode that makes evaluations and PoCs easier.
8 FastPath-optimized here to view the list of all features supported by XG FlavorsThis section provides information about different flavors available for XG is available in following flavors: Physical devices Virtual devices SoftwarePhysical devicesSophos provides a range of physical devices to cater the needs of all size of businesses smallbusiness to home users to FirewallVirtual devicesVirtual network security devices can be deployed as next-generation firewalls or UTMs and offerindustry-leading network security to virtual data-centers, Security-in-a-box setup for MSSPs/organizations, and Office-in-a-box setup.
9 By offering comprehensive security features available inits hardware security devices, in virtualized form, these virtual devices offer layer-8 identity-basedsecurity on a single virtual device, which is as strong as security for physical offers a complete virtual security solution to organizations with its virtual network securitydevices (next-generation firewalls/UTMs), virtual Sophos Firewall Manager (SFM) for centralizedmanagement, and Sophos iView software for centralized logging and Administrative interfacesXG Firewall can be accessed and administered through: Web admin console: The web admin console is a web-based application that an administratorcan use to configure, monitor, and manage XG Firewall .
10 Command line interface: The command line interface (CLI) console provides a collection of toolsto administer, monitor, and control certain components of XG Firewall . Sophos Firewall Manager (SFM): Distributed XG Firewall devices can be centrally managedusing a single Administrative accessThis section provides information on how to access XG administrator can connect and access XG Firewall through HTTPS, telnet, or SSH on the administrator sign-in account profile used for access, an administrator can accessnumber of administrative interfaces and the web admin console configuration Firewall is shipped with one administrator account and four administrator typeSign-in credentialsConsole accessPrivilegesSuper administratoradmin/adminWeb admin consoleCLI consoleFull privileges for both the consoles.
