Sophos XG Firewall Virtual Appliance

1 Sophos XG Firewall VirtualAppliancegetting started 1 Installation 2 Configuring XG 4 Activation and 4 Legal 8(2021/11/05) Sophos XG Firewall Virtual Appliance1 IntroductionWelcome to the Getting Started guide for Sophos XG Firewall Virtual Appliance (referred to in thisdocument as XG Firewall ) for VMware ESX/ESXi platform. This guide describes how you candownload, deploy and run XG Firewall as a Virtual machine on VMware hardware Disk with a minimum of 4 GB Disk with a minimum of 80 GB spaceNoteSFOS 17 supports hard drives with a maximum of 512 Firewall will go into fail-safe mode if the minimum requirements are not optimize the performance of your XG Firewall , configure vCPU and vRAM according to thelicense you have purchased.

2 When configuring a number of vCPUs, make sure that you do notexceed the maximum number specified in your Sophos Limited1 Sophos XG Firewall Virtual Appliance2 Installation procedureMake sure that VMware ESX/ESXi version or later is installed in your network. For VMware ESX/ESXi installation instructions, refer to the VMware documentation need and extract the OVF the ESX/ESXi Host via vSphere the OVF the .zip file containing the OVF image from and save in to the ESX/ESXi host server on which you want to deploy the OVF template throughVMware vSphere this guide, we are using VMware vSphere client to connect to the ESX/ESXi host server onwhich the OVF template is to be )Go to File > Deploy OVF Template to open the downloaded.

3 Ovf file in the vSphere )Select the sf_virtual file and click deploy the OVF template:a)Select the location of the .ovf file for XG Firewall and click Next to Sophos LimitedSophos XG Firewall Virtual Applianceb)Verify the OVF template details and click Next to )Specify a name and location for the OVF template to be deployed and click Next to )Select the host/cluster within which you want to deploy the OVF template and click Next , we are deploying the OVF template on a single/standalone server. The configurationmay be different in a cluster )Select the format in which you want to store the Virtual disks from the available options:Thin Provision: It uses the minimum required space for the OVF template, saving the restfor other Provision: It uses the entire allotted Virtual disk for OVF template installation, wipingout additional data on the case of VMware ESXi or later, three storage options are available: Thin Provision,Thick Provision Lazy Zeroed and Thick Provision Eager Zeroed.

4 For more information,refer to )Click Next to )Select the networks to be used by the OVF template and click Next to )Verify the deployment settings for the OVF Template and click Finish to initiate the deploymentprocess of XG installs XG Firewall on your the deployed XG Firewall and go to Power > Power )Enter the administrator password: admin to continue to the Main Sophos Limited3 Sophos XG Firewall Virtual Appliance3 Configuring XG to " " from the management Start to begin the wizard and follow the on-screen wizard will not start if you have changed the default administrator password from Activation and and accept the License Agreement.

5 You must accept the Sophos End User LicenseAgreement (EULA) to proceed Your Firewall . Enter the serial number, if you have it. You can also use your UTM 9license if you are , you can skip registration for 30 days or start a free )You will be redirected to the MySophos portal website. If you already have a MySophosaccount, specify your sign-in credentials under Login . If you are a new user, sign up for aMySophos account by filling in the details under Create Sophos ID .b)Complete the registration successful registration of the device, the license is synchronized and the basic setup is the basic setup. Click Continue and complete the configurations through the wizard.

6 Whenyou finish the process, the Network Security Control Center can now use the navigation pane to the left to navigate and configure further Basic ConfigurationYou up Firewall up a Wireless set up interfaces:a)You can add network interfaces and RED connections in the Configure > Network >Interfaces )You can add wireless networks in the Protect > Wireless > Wireless Networks will also be shown in the interfaces menu once )You can add access points in Protect > Wireless > Access Sophos LimitedSophos XG Firewall Virtual are essential in creating Firewall rules and, therefore, central to the security model in XGFirewall. If you wish to create custom zones in addition to the default zones, go to Configure >Network > Zone.

7 You can use these custom zones when creating interfaces, and security can create the following types of Firewall rules in Protect > Firewall > Add Firewall Rule. Twotypes of Firewall rules are available:OptionDescriptionBusiness Application RuleTo secure a server or service, and allowinternal or external users access to it, use abusiness application RuleTo control user access to web and applicationcontent, or to control traffic by source, service,destination, zone, and user, use a user/network set up a wireless network:a)Go to Protect > Wireless > Wireless )Click Add to add a new wireless )Configure the wireless network as shown in the wireless network will be added )Similarly, add another wireless network for guest Sophos Limited5 Sophos XG Firewall Virtual ApplianceYou can see both these wireless networks in Protect > Network > Wireless )Go to Protect > Wireless > Access Point )Click Add to add a new access point )Add both the wireless networks, and the new access new APs have been installed, you can view these in Control )Click the pending APs to accept the new access )

8 Configure the settings of the new APs as shown in the Sophos LimitedSophos XG Firewall Virtual Appliancej)Click Sophos Limited7 Sophos XG Firewall Virtual Appliance4 Legal noticesCopyright 2020 Sophos Limited. All rights reserved. No part of this publication may be reproduced,stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical,photocopying, recording or otherwise unless you are either a valid licensee where the documentationcan be reproduced in accordance with the license terms or you otherwise have the prior permissionin writing of the copyright , Sophos Anti-Virus and SafeGuard are registered trademarks of Sophos Limited, SophosGroup and Utimaco Safeware AG, as applicable.

9 All other product and company names mentionedare trademarks or registered trademarks of their respective 2020 Sophos Limited. All rights reserved. No part of this publication may be reproduced,stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical,photocopying, recording or otherwise unless you are either a valid licensee where the documentationcan be reproduced in accordance with the license terms or you otherwise have the prior permissionin writing of the copyright and Sophos Anti-Virus are registered trademarks of Sophos Limited and Sophos other product and company names mentioned are trademarks or registered trademarks of theirrespective Sophos Limit