| Using Admin Console | 4
• Alert - Configure alert profiles for one or more firewalls or Firewall group to get alert notifications over email.
This includes alert notifications for parameters like subscription expiry, Device disconnected from central management, Device Gateway status change, VPN connection status change, along with counts of Intrusion attack, ATP events exceed, Web virus, Objectionable + Unproductive surfing hits, and percentage of endpoints with Red health exceeding a threshold limit.
Using Admin Console
Sophos Central Firewall Manager uses a Web 2.0 based easy-to-use graphical interface termed as Admin Console to configure and manage the device.
Log on procedure
The log on procedure authenticates the user and creates a session with the Device until the user logs-off.
To get the login window, open the browser and type Web Address of the Sophos Central Firewall Manager in the browser’s URL box. A dialog box appears prompting you to enter email and password.
Email
Below are the screen elements with their description:
Enter registerd Partner email address.
Password
Enter Partner account password.
Login button
Click to log on the Admin Console.
You will be redirected to Login Verificarion page. Enter Security Code and PIN to continue.
Below are the screen elements with their description:
Security Code
Enter Security Code as received on your registered Partner email address.
PIN
Enter PIN for your Partner account.
Submit
Click to submit entered information.
Choose Another Method
Click to select another method for login verification.
Home appears as soon as you press Submit on Login Verification page.
Admin Console Language
The Admin Console supports multiple languages, but by default appears in English. Apart from English, Brazilian-
Portuguese, Chinese-Simplified, Chinese-Traditional, French, German, Italian, Japanese, Korean, Russian and
Spanish languages are also supported. Administrator can choose the preferred language at the time of logging in.
Administrator can also specify description for various policies, services and custom categories in any of the supported languages.
Log out procedure
To avoid un-authorized users from accessing Sophos Central Firewall Manager , log off after you have finished working. This will end the session.
| Using Admin Console | 5
Supported Browsers
You can connect to CFM using HTTP or a secure HTTPS connection from any management computer using one of the following web browsers:
Latest version of Firefox (recommended), latest version of Chrome, latest version of Safari, or Microsoft Internet
Explorer 9 onwards. JavaScript must be enabled.
The minimum screen resolution for the management computer is 1280 X 768.
Navigating through the Admin Console
The three parts of the admin Console:
• Area Selector
• Navigation Bar
• Content Pane
• Button bar
Use the menus, lists, and configuration pages to configure most settings. Configuration made through Admin Console take effect after some time as it takes time to copy the entire configuration on to the device.
Work Area Selector
The Sophos Central Firewall Manager UI offers you three work areas: Device Configuration, Template Configuration, and System Management. To select any work area, select the icon on the top right corner of the Home.
Once an area is selected, the Navigation bar changes based on the selected work area.
Device Configuration allows you to navigate through pages through which you can manage Device Groups or individual devices. The navigation bar changes dynamically for Device Group and individual device. You can select device group or any device Device Groups or Device on the Dashboard top panel.
Navigation Bar
The navigation bar on the leftmost side provides access to various configuration pages. Menu consists of sub-menus and tabs. On clicking menu item in the navigation bar, related management functions are displayed as submenu items. On clicking submenu item, all the associated tabs are displayed. To view page associated with the tab, click the required tab.
The Main menu tree expands and contracts dynamically when clicked on without navigating to a submenu. When you click on a top-level heading, it automatically expands that heading and contracts the heading for the page you are currently on, but it does not navigate away from the current page. To navigate to a new page, first click on the heading, and then click on the submenu you want navigate to. A breadcrumb on the top of the Content Pane displays the entire navigation path.
Content Pane
The center part of the page is Content Pane that changes according to the menu item and tab. Information of the menu is displayed in the content pane, which includes list of managed devices and configuration screens.
Button Bar
The Button bar on the upper rightmost corner of the every page provides access to several commonly used functions like:
| Using Admin Console | 6
• Device Search – Specify a search string and click to search device(s) in CFM. Device(s) can be searched on following criteria:
Device Name
Model
Serial Number
Firmware
Company
City
State
Country
By default it yields results based on Device Name. Results display following information in tabular form: Device name, Serial number, Company name, Status and Firmware.
Click Device Name to go the dashboard of that device.
• Alerts – Click to view list of alerts generated by CFM.
• Discover – Click to view list of devices sending heartbeat packet to the CFM.Click icon to add newly discovered devices using Add Device Wizard or icon to delete the device.
• Errors – Displays total number of generated errors.
• Monitor - Click to view the Device Monitor graphs which displays critical health status of the managed devices.
• Language - Click to change language.
• Help – CFM includes a Web-based help online help, which can be viewed from any of the page of admin console.
Click Help to open the context-sensitive help for the page.
• Language - Click to change device language.
Menus
The Sophos Central Firewall Manager offers you three work areas: Device Configuration, Template Configuration, and System. To select any work area, select the icon on the top right corner of the Home.
Once an area is selected, the Navigation bar changes based on the selected work area.
The navigation bar on the leftmost side provides access to various configuration pages. Menu consists of sub-menus and tabs. On clicking menu item in the navigation bar, related management functions are displayed as submenu items. On clicking submenu item, all the associated tabs are displayed. To view page associated with the tab, click the required tab.
The left navigation bar expands and contracts dynamically when clicked on without navigating to a submenu. When you click on a top-level heading in the left navigation bar, it automatically expands that heading and contracts the heading for the page you are currently on, but it does not navigate away from the current page. To navigate to a new page, first click on the heading, and then click on the submenu you want navigate to.
Tool Tips
| Using Admin Console | 7
To view the additional configuration information, use tool tip. Tool tip is provided for many configurable fields. Move the pointer over the icon to view the brief configuration summary.
Notification pop-ups
A notification pop-up will be displayed at the top of the every page for error messages or action status. You can click the icon to close the pop-up.
Common Operations
Adding an Entity
You can add a new entity like policy, group, user, rule, or host by clicking the Add button available on most of the configuration pages. Clicking the Add button either opens a new page or pop-up window.
You can add new items for a entity by clicking the Add New Item . Select items by clicking the check box and apply to add the selected items. You can also update/delete the items added.
Set Schedule
For the entire group and subgroup level configuration, administrator can update configuration immediately or schedule the update. Whenever any configuration task – add, update and delete, is done, Set Schedule page with following parameters is opened:
Synchronize Configuration - Select the time and date to update the configuration.
Immediately – Changes will be applied immediately to the device(s).However it takes some time to reflect the changes locally.
At: – Specify date and time in the format YYYY –MM-DD Hours:Minutes or select date and time from the given calendar. Configuration will be updated at the scheduled time. All the scheduled tasks are listed at Account Settings
> Device Settings > Scheduled Task page. If required, scheduled task can also be deleted from Scheduled Tasks page.
Device Time Zone – Select to apply changes as per the device time zone.
Override configuration - Select Yes to override existing configuration of device else select No .
Select Device(s) - Select Device(s) or Device Group(s) for which this task is to be scheduled.
Filter Devices - Click to filter devices on the basis of given criteria.
Select Criteria and specify the value to be matched.
• Model : Specify model.
• Firmware: Specify firmware.
• Company: Specify company name.
• Country: Specify country name.
| Using Admin Console | 8
• State : Specify state name.
• City: Specify city name.
• Device Name: Specify device name.
Note: Filter Devices is available only if Device is selected in Select Device(s) .
Synchronize
You can synchronize configuration of selected entities of managed device(s) with the configuration available in
CFM.To Synchronize settings, click icon or the button.
Entity Usage Reference
Entity Usage Reference points out the co-dependency of an entity with another entity. Entity Usage Reference lists all the dependent entities related to a particular entity. The list includes the entity, sub-entity and the device group details.
Entity Usage Reference is an essential feature for the administrator so that they can identify all co-dependent entities before deleting any particular entity. If the dependency exists, the administrator must remove the dependency before deleting the entity.
To determine the Entity Usage Reference, click . This will display the following information for the selected entity and its dependent entity(ies).
Details of selected entity
Entity
Displays the selected entity type.
Sub Entity
Displays the selected Sub Entity type.
Entity Name
Displays the name of the selected entity.
Details of dependent entities
Sub Entity
Displays the selected Sub Entity type.
Entity Name
Displays the name of the dependent entity.
Device Group
Displays the name of the device group of which the dependent entry is a part of.
Device Group Path
Display the path of the device group based on the device criteria adopted for the group.
Editing an Entity
All the editable entities are hyperlinked. You can edit any entity by clicking either the hyperlink or the icon under the Manage column.
Deleting an Entity
You can delete an entity by selecting the check box and clicking the Delete button or icon.
