12 | Initial Configuration | Sophos Management Appliance
6 Initial Configuration
This section describes the steps required to register your appliance with Sophos and perform the initial activation and configuration of your appliance. You begin by activating your appliance, after which the setup wizard launches.
In the wizard, you perform the required networking configuration. The appliance then registers with Sophos and retrieves the latest software updates and threat definitions.
Next, you set more of the initial configuration options for the appliance and, upon completion, the Dashboard page of the appliance's administrative web interface is launched.
Note
You can modify all of the configuration options set in the wizard from within the appliance's administrative web interface.
To prepare for installation and initial configuration:
1.
On your organization's firewall, configure access to the following ports for external and internal connections for the appliance.
External Connections
These services are typically used for connections between your Web Appliance(s) and locations outside of your organization's network.
Port
22
22
25
Function Service
Remote assistance
SSH
Central configuration, status and reporting
Remote assistance notification
SSH
SMTP
Protocol
TCP
TCP
TCP
Connection
Outbound from appliance to sophos.com
Outbound from
Web Appliance to Management Appliance (if not collocated)
Outbound from appliance to sophos.com
Sophos Management Appliance | Initial Configuration | 13
Port
80
123
443
Function
Outbound network web traffic
Network time synchronization
Outbound network web traffic
Service
HTTP
NTP
HTTPS
Protocol
TCP
UDP
TCP
Connection
Outbound from appliance to internet
Outbound from appliance to internet
Outbound from appliance to internet
Note
Opening ports 80 and 443 is a standard best practice. However, certain web sites may also require other ports to be opened.
Internal Connections
These services are typically used for connections within your organization's network and your Web Appliance(s) or between appliances themselves, if you have multiple appliances.
Port
21
22
53
Function Service
Backups using passive FTP
FTP
Central configuration, status and reporting
DNS queries
SSH
DNS
Protocol
TCP
TCP
UDP
Connection
Outbound from appliance to
FTP server
Outbound from
Web Appliance to Management Appliance (if collocated)
Outbound from
Appliance to
LAN
14 | Initial Configuration | Sophos Management Appliance
Port
80
88
139
389
443
445
636
3268
8080
Function administrative web interface
Kerberos authentication
MS NetBIOS session
Directory services synchronization administrative web interface
HTTPS
MS server message block
LDAP synchronization
MS AD Global
Catalog synchronization
Proxy (end user web browsing)
Service
HTTP
KERBEROS
NETBIOS-SSN
LDAP
SMB
LDAPS
MSGC
HTTP/HTTPS
Protocol
TCP
TCP/UDP
TCP/UDP
TCP/UDP
TCP
TCP/UDP
TCP
TCP/UDP
TCP
Connection
Inbound from
LAN to appliance
Inbound/outbound between appliance and AD server
Inbound/outbound between appliance and AD server
Inbound/outbound between appliance and AD server
Inbound from
LAN to appliance
Inbound/outbound between appliance and AD server
Inbound/outbound between appliance and eDirectory server
Inbound/outbound between appliance and AD server
Inbound/outbound between LAN and appliance
