Sophos XG Firewall | Introduction | 7
Introduction
Sophos XG Firewall provides unprecedented visibility into your network, users, and applications directly from the allnew control center. You also get rich on-box reporting and the option to add Sophos iView for centralized reporting across multiple firewalls.
Click
here
to view list of all features supported by Sophos XG Firewall.
Flavors
This section provides information about different flavors available for Sophos XG Firewall.
Sophos is available in following flavors:
• Physical Devices
• Virtual Devices
• Software
Physical Devices
Sophos provides a range of physical devices to cater the needs of all size of businesses i.e. small business to home users to enterprises.
Virtual Devices
Virtual Network Security devices can be deployed as Next-Generation Firewalls or UTMs and offer industry-leading network security to virtual data-centers, “Security-in-a-Box” set-up for MSSPs/organizations, and “Office-in-a-Box” set-up. By offering comprehensive security features available in its hardware security devices, in virtualized form, these virtual devices offer Layer 8 Identity-based security on a single virtual device, which is as strong as security for the physical networks.
Sophos offers a complete virtual security solution to organizations with its virtual network security devices (Next-
Generation Firewalls/UTMs), virtual Sophos Firewall Manager (SFM) for centralized management, and Sophos iView software for centralized logging and reporting.
Administrative Interfaces
Device can be accessed and administered through:
•
Admin Console
: Admin Console is a web-based application that an Administrator can use to configure, monitor,
and manage the Device.
•
Command Line Interface
: Command Line Interface (CLI) console provides a collection of tools to administer,
monitor, and control certain component(s) of the device.
•
Sophos Firewall Manager (SFM)
: Distributed Sophos devices can be centrally managed using a single Sophos
Firewall Manager (SFM) Device.
Administrative Access
This section provides information on how to access Device.
An administrator can connect and access the device through HTTPS, telnet, or SSH services. Depending on the
Administrator login account profile used for access, an administrator can access number of Administrative Interfaces and Admin Console configuration pages.
The device is shipped with one administrator account and four administrator profiles.
Sophos XG Firewall | Using Admin Console | 8
Administrator Type Login Credentials
Super Administrator admin/admin
Console Access
Admin console
CLI console
Privileges
Full privileges for both the consoles. It provides read-write permission for all the configuration performed through either of the consoles.
Note: We recommend that you change the password of the user immediately on deployment.
Admin Console
Admin Console is a web-based application that an Administrator can use to configure, monitor, and manage the
Device.
You can connect to and access Admin Console of the device using HTTPS connection from any management computer using web browser:
1. HTTPS login: https://<LAN IP Address of the device>
For more details, refer to section
Admin Console
.
Command Line Interface (CLI) Console
CLI console provides a collection of tools to administer, monitor, and control certain component(s) of the device. The device can be accessed remotely using the following connections:
1. Remote login Utility – TELNET login
2. SSH Client (Serial Console)
Use CLI console for troubleshooting and diagnosing network problems in details.
Sophos Firewall Manager (SFM)
Distributed Sophos devices can be centrally managed using a single Sophos Firewall Manager (SFM) Device, enabling high levels of security for MSSPs and large enterprises. To monitor and manage devices through SFM device you must:
1. Configure SFM in Sophos device.
2. Integrate Sophos device with SFM.
Once you have added the Devices and organized them into groups, you can configure single device or groups of devices.
Using Admin Console
Sophos Firewall OS uses a Web 2.0 based easy-to-use graphical interface termed as Admin Console to configure and manage the device.
You can access the device for HTTPS web browser-based administration from any of the interfaces. Device when connected and powered up for the first time, it will have a following default Admin Console Access configuration for
HTTPS service.
Services
HTTPS
Interface/Zones
WAN
Default Port
TCP Port 4444
The administrator can update the default ports for HTTPS service from System > Administration > Admin Settings
Sophos XG Firewall | Using Admin Console | 9
Admin Console Language
The Admin Console supports multiple languages, but by default appears in English. Apart from English, Chinese-
Simplified, Chinese-Traditional, Hindi, French, German, Italian, Korean and Brazilian Portuguese languages are also supported. Administrator can choose the preferred language at the time of logging.
Listed elements of Admin Console are displayed in the configured language:
• Control Center contents
• Navigation menu
• Screen elements including field & button labels and tips
• Error messages
Administrator can also specify description for various policies, services, and various custom categories in any of the supported languages.
All the configurations done from the Admin Console take effect immediately. To assist you in configuring the device, the device includes detailed context-sensitive online help.
Log on procedure
The log on procedure authenticates the user and creates a session with the Device until the user logs-off.
To get the login window, open the browser and type LAN IP Address of the device in browser’s URL box. A dialog box appears prompting you to enter username and password.
Below are the screen elements with their description:
Username
Enter user login name.
If you are logging on for the first time after installation, use the default username.
Password
Specify user account password.
Dots are the placeholders in the password field.
If you are logging on for the first time after installation with the default username, use the default password.
Language
Select the language. The available options are:
• Chinese-Simplified
• Chinese-Traditional
• English
• French
• Hindi
• German
• Italian
• Korean
• Brazilian Portuguese
Default – English
Log on to
To administer device, select Admin Console.
To login into your account, select User Portal.
Login button
Click to log on the Admin Console.
