Table Of Content

Sophos XG Firewall v 15.01.0 – Release Notes Sophos XG Firewall Command Reference Guide v16.5 For Sophos Customers Document Date: April 2017 Copyright Notice Copyright 2016-2017 Sophos Limited. All rights reserved. Sophos is registered trademarks of Sophos Limited and Sophos Group. All other product and company names mentioned are trademarks or registered trademarks of their respective owners. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner. Sophos XG Firewall | Contents | ii Contents Introduction...............................................................................................................7 Flavors...................................................................................................................................................................7 Administrative Interfaces......................................................................................................................................7 Administrative Access..........................................................................................................................................7 Using Admin Console...............................................................................................8 Supported Browsers............................................................................................................................................10 Menus..................................................................................................................................................................10 Pages....................................................................................................................................................................11 List Navigation Controls....................................................................................................................................11 Monitor and Analyze..............................................................................................11 Control Center.....................................................................................................................................................11 Current Activities................................................................................................................................................18 Live Users...............................................................................................................................................18 Live Connections....................................................................................................................................19 Live Connections IPv6...........................................................................................................................21 View Live Connection Details...............................................................................................................23 IPsec Connections...................................................................................................................................27 Remote Users..........................................................................................................................................27 Diagnostics..........................................................................................................................................................28 Tools........................................................................................................................................................28 System Graphs........................................................................................................................................31 URL Category Lookup...........................................................................................................................37 Packet Capture........................................................................................................................................37 Connection List.......................................................................................................................................43 Support Access........................................................................................................................................47 System.......................................................................................................................48 Profiles.................................................................................................................................................................48 Schedule..................................................................................................................................................48 Access Time............................................................................................................................................50 Surfing Quotas........................................................................................................................................53 Network Traffic Quota...........................................................................................................................56 Network Address Translation.................................................................................................................60 Device Access.........................................................................................................................................61 Hosts and Services..............................................................................................................................................63 IP Host....................................................................................................................................................64 IP Host Group.........................................................................................................................................65 MAC Host...............................................................................................................................................66 FQDN Host.............................................................................................................................................67 FQDN Host Group.................................................................................................................................68 Country Group........................................................................................................................................68 Services...................................................................................................................................................69 Service Group.........................................................................................................................................70 Administration.....................................................................................................................................................71 Sophos XG Firewall | Contents | iii Licensing.................................................................................................................................................72 Device Access.........................................................................................................................................73 Admin Settings........................................................................................................................................76 Central Management...............................................................................................................................79 Time.........................................................................................................................................................80 Notification Settings...............................................................................................................................80 SNMP......................................................................................................................................................82 Netflow....................................................................................................................................................84 Messages.................................................................................................................................................84 Certificates...........................................................................................................................................................84 Certificates...............................................................................................................................................84 Certificate Authorities.............................................................................................................................87 Certificate Revocation Lists...................................................................................................................88 Backup & Firmware...........................................................................................................................................88 Backup & Firmware...............................................................................................................................89 API...........................................................................................................................................................90 Import Export..........................................................................................................................................92 Firmware.................................................................................................................................................93 Pattern Updates.......................................................................................................................................95 Configure..................................................................................................................97 Network...............................................................................................................................................................97 Interfaces.................................................................................................................................................97 Zones.....................................................................................................................................................126 WAN Link Manager.............................................................................................................................128 DNS.......................................................................................................................................................134 DHCP....................................................................................................................................................139 IPv6 Router Advertisement..................................................................................................................145 Cellular WAN........................................................................................................................................149 IP Tunnels.............................................................................................................................................151 Neighbors (ARP-NDP).........................................................................................................................153 Dynamic DNS.......................................................................................................................................156 Authentication...................................................................................................................................................158 Servers...................................................................................................................................................159 Services.................................................................................................................................................168 Groups...................................................................................................................................................176 Users......................................................................................................................................................180 One-Time Password..............................................................................................................................187 Captive Portal........................................................................................................................................190 Guest Users...........................................................................................................................................193 Clientless Users.....................................................................................................................................199 Guest User Settings..............................................................................................................................202 Client Downloads..................................................................................................................................207 STAS.....................................................................................................................................................208 VPN...................................................................................................................................................................209 IPsec Connections.................................................................................................................................210 SSL VPN (Remote Access)..................................................................................................................232 SSL VPN (Site to Site)........................................................................................................................234 CISCOTM VPN Client..........................................................................................................................237 L2TP (Remote Access).........................................................................................................................240 Clientless Access..................................................................................................................................244 Bookmarks.............................................................................................................................................245 Bookmark Groups.................................................................................................................................246 PPTP (Remote Access).........................................................................................................................246 IPsec Profiles.......................................................................................................................................248 Sophos XG Firewall | Contents | iv SSL VPN...............................................................................................................................................254 L2TP......................................................................................................................................................257 Routing..............................................................................................................................................................258 Static Routing........................................................................................................................................258 Policy Routing......................................................................................................................................262 Gateways...............................................................................................................................................264 BGP.......................................................................................................................................................265 OSPF.....................................................................................................................................................267 Information............................................................................................................................................271 Upstream Proxy....................................................................................................................................284 Multicast (PIM-SIM)............................................................................................................................286 RIP.........................................................................................................................................................288 System Services................................................................................................................................................291 High Availability...................................................................................................................................292 Traffic Shaping Settings.......................................................................................................................299 RED.......................................................................................................................................................301 Log Settings..........................................................................................................................................303 Data Anonymization.............................................................................................................................309 Traffic Shaping......................................................................................................................................312 Services.................................................................................................................................................316 Protect.................................................................................................................... 318 Firewall..............................................................................................................................................................318 User / Network Rule.............................................................................................................................320 Business Application Rule....................................................................................................................332 Intrusion Prevention..........................................................................................................................................387 DoS Attacks..........................................................................................................................................387 IPS Policies...........................................................................................................................................388 Custom IPS Signatures.........................................................................................................................393 DoS & Spoof Prevention......................................................................................................................394 Web....................................................................................................................................................................405 Policies..................................................................................................................................................405 User Activities......................................................................................................................................408 Categories..............................................................................................................................................409 URL Groups..........................................................................................................................................411 Exceptions.............................................................................................................................................411 Protection...............................................................................................................................................412 Advanced...............................................................................................................................................414 File Types..............................................................................................................................................415 Surfing Quotas......................................................................................................................................415 User Notifications.................................................................................................................................418 Applications.......................................................................................................................................................418 Application List....................................................................................................................................418 Application Filter..................................................................................................................................419 Traffic Shaping Default........................................................................................................................422 Wireless.............................................................................................................................................................423 Wireless Client List..............................................................................................................................423 Wireless Networks................................................................................................................................424 Access Point Overview.........................................................................................................................428 Access Point Groups.............................................................................................................................434 Mesh Networks.....................................................................................................................................435 Hotspots.................................................................................................................................................437 Hotspot Voucher Definition..................................................................................................................446 Rogue AP Scan.....................................................................................................................................447 Settings..................................................................................................................................................449 Sophos XG Firewall | Contents | v Hotspot Settings....................................................................................................................................450 Email.................................................................................................................................................................452 MTA Mode............................................................................................................................................453 Legacy Mode........................................................................................................................................480 Web Server........................................................................................................................................................507 Web Servers..........................................................................................................................................508 Protection Policies................................................................................................................................509 Authentication Policies.........................................................................................................................513 Authentication Templates.....................................................................................................................516 SlowHTTP Protection...........................................................................................................................517 Advanced Threat...............................................................................................................................................518 Advanced Threat Protection.................................................................................................................518 Security Heartbeat.................................................................................................................................519 Sandstorm Activity...............................................................................................................................521 Sandstorm Settings................................................................................................................................522 Appendix A - Logs................................................................................................522 Log Viewer........................................................................................................................................................523 View List of System Events.................................................................................................................524 View List of Web Filter Events...........................................................................................................524 View List of Application Filter Events................................................................................................525 View List of Malware Events..............................................................................................................526 View List of Email Events...................................................................................................................527 View List of Firewall Events...............................................................................................................528 View List of IPS Events.......................................................................................................................529 View List of Authentication Events.....................................................................................................530 View List of Admin Events..................................................................................................................531 View List of Web Server Protection (WAF) Events............................................................................531 View List of Advanced Threat Protection Events................................................................................532 View List of Security Heartbeat Events...............................................................................................533 Log ID Structure...............................................................................................................................................534 Log Type...............................................................................................................................................534 Log Component....................................................................................................................................535 Log Subtype..........................................................................................................................................537 Priority...................................................................................................................................................538 Common Fields for all Logs............................................................................................................................538 System Logs......................................................................................................................................................539 Firewall Rule Logs...........................................................................................................................................548 Module-specific Fields..........................................................................................................................549 Web Filter Logs................................................................................................................................................551 Module-specific Fields..........................................................................................................................551 Application Filter Logs.....................................................................................................................................552 Module-specific Fields..........................................................................................................................552 IPS Logs............................................................................................................................................................554 Module-specific Fields..........................................................................................................................554 Authentication Logs..........................................................................................................................................556 Module-specific Fields..........................................................................................................................557 Admin Logs......................................................................................................................................................557 Module-specific Fields..........................................................................................................................558 Sandbox Report Logs.......................................................................................................................................558 Web Application Firewall (WAF) Logs...........................................................................................................559 Malware Logs...................................................................................................................................................560 Module-specific Fields..........................................................................................................................561 Email Logs........................................................................................................................................................562 Module-specific Fields..........................................................................................................................564 Advanced Threat Protection (ATP) Logs.........................................................................................................565 Heartbeat Logs..................................................................................................................................................565 System Health Logs..........................................................................................................................................565 Appendix B - IPS - Custom Pattern Syntax......................................................566 Appendix C - Default File Type Categories.......................................................572 Appendix D - Supported Micro-Apps................................................................576 Appendix E - USB Compatibility List................................................................579 Appendix F - Compatibility with SFMOS 15.01.0............................................629 Copyright Notice...................................................................................................630 Sophos XG Firewall | Introduction | 7 Introduction Sophos XG Firewall provides unprecedented visibility into your network, users, and applications directly from the all- new control center. You also get rich on-box reporting and the option to add Sophos iView for centralized reporting across multiple firewalls. Click here to view list of all features supported by Sophos XG Firewall. Flavors This section provides information about different flavors available for Sophos XG Firewall. Sophos is available in following flavors: • Physical Devices • Virtual Devices • Software Physical Devices Sophos provides a range of physical devices to cater the needs of all size of businesses i.e. small business to home users to enterprises. Virtual Devices Virtual Network Security devices can be deployed as Next-Generation Firewalls or UTMs and offer industry-leading network security to virtual data-centers, “Security-in-a-Box” set-up for MSSPs/organizations, and “Office-in-a-Box” set-up. By offering comprehensive security features available in its hardware security devices, in virtualized form, these virtual devices offer Layer 8 Identity-based security on a single virtual device, which is as strong as security for the physical networks. Sophos offers a complete virtual security solution to organizations with its virtual network security devices (Next- Generation Firewalls/UTMs), virtual Sophos Firewall Manager (SFM) for centralized management, and Sophos iView software for centralized logging and reporting. Administrative Interfaces Device can be accessed and administered through: • Admin Console: Admin Console is a web-based application that an Administrator can use to configure, monitor, and manage the Device. • Command Line Interface: Command Line Interface (CLI) console provides a collection of tools to administer, monitor, and control certain component(s) of the device. • Sophos Firewall Manager (SFM): Distributed Sophos devices can be centrally managed using a single Sophos Firewall Manager (SFM) Device. Administrative Access This section provides information on how to access Device. An administrator can connect and access the device through HTTPS, telnet, or SSH services. Depending on the Administrator login account profile used for access, an administrator can access number of Administrative Interfaces and Admin Console configuration pages. The device is shipped with one administrator account and four administrator profiles. Sophos XG Firewall | Using Admin Console | 8 Administrator Type Login Credentials Console Access Privileges Super Administrator admin/admin Admin console Full privileges for both the consoles. It provides read-write permission for all the CLI console configuration performed through either of the consoles. Note: We recommend that you change the password of the user immediately on deployment. Admin Console Admin Console is a web-based application that an Administrator can use to configure, monitor, and manage the Device. You can connect to and access Admin Console of the device using HTTPS connection from any management computer using web browser: 1. HTTPS login: https://<LAN IP Address of the device> For more details, refer to section Admin Console. Command Line Interface (CLI) Console CLI console provides a collection of tools to administer, monitor, and control certain component(s) of the device. The device can be accessed remotely using the following connections: 1. Remote login Utility – TELNET login 2. SSH Client (Serial Console) Use CLI console for troubleshooting and diagnosing network problems in details. Sophos Firewall Manager (SFM) Distributed Sophos devices can be centrally managed using a single Sophos Firewall Manager (SFM) Device, enabling high levels of security for MSSPs and large enterprises. To monitor and manage devices through SFM device you must: 1. Configure SFM in Sophos device. 2. Integrate Sophos device with SFM. Once you have added the Devices and organized them into groups, you can configure single device or groups of devices. Using Admin Console Sophos Firewall OS uses a Web 2.0 based easy-to-use graphical interface termed as Admin Console to configure and manage the device. You can access the device for HTTPS web browser-based administration from any of the interfaces. Device when connected and powered up for the first time, it will have a following default Admin Console Access configuration for HTTPS service. Services Interface/Zones Default Port HTTPS WAN TCP Port 4444 The administrator can update the default ports for HTTPS service from System > Administration > Admin Settings Sophos XG Firewall | Using Admin Console | 9 Admin Console Language The Admin Console supports multiple languages, but by default appears in English. Apart from English, Chinese- Simplified, Chinese-Traditional, Hindi, French, German, Italian, Korean and Brazilian Portuguese languages are also supported. Administrator can choose the preferred language at the time of logging. Listed elements of Admin Console are displayed in the configured language: • Control Center contents • Navigation menu • Screen elements including field & button labels and tips • Error messages Administrator can also specify description for various policies, services, and various custom categories in any of the supported languages. All the configurations done from the Admin Console take effect immediately. To assist you in configuring the device, the device includes detailed context-sensitive online help. Log on procedure The log on procedure authenticates the user and creates a session with the Device until the user logs-off. To get the login window, open the browser and type LAN IP Address of the device in browser’s URL box. A dialog box appears prompting you to enter username and password. Below are the screen elements with their description: Username Enter user login name. If you are logging on for the first time after installation, use the default username. Password Specify user account password. Dots are the placeholders in the password field. If you are logging on for the first time after installation with the default username, use the default password. Language Select the language. The available options are: • Chinese-Simplified • Chinese-Traditional • English • French • Hindi • German • Italian • Korean • Brazilian Portuguese Default – English Log on to To administer device, select Admin Console. To login into your account, select User Portal. Login button Click to log on the Admin Console.

Description:
Sophos XG Firewall v 15.01.0 – Release Notes. Sophos XG Firewall. Command Reference. Guide v16.5. For Sophos Customers. Document Date:
ebook img

Sophos XG Firewall Web Reference and Admin Guide PDF

631 Pages·2017·8.89 MB·English
by  
Save to my drive
Quick download
Download

Download Sophos XG Firewall Web Reference and Admin Guide PDF Free - Full Version

by Unknow| 2017| 631 pages| 8.89| English

Download Sophos XG Firewall Web Reference and Admin Guide by in PDF format completely FREE. No registration required, no payment needed. Get instant access to this valuable resource on PDFdrive.to!

Free Download PDF

About Sophos XG Firewall Web Reference and Admin Guide

Sophos XG Firewall v 15.01.0 – Release Notes. Sophos XG Firewall. Command Reference. Guide v16.5. For Sophos Customers. Document Date:

Detailed Information

Author:Unknown
Publication Year:2017
Pages:631
Language:English
File Size:8.89
Format:PDF
Price:FREE
Download Free PDF

Safe & Secure Download - No registration required

Why Choose PDFdrive for Your Free Sophos XG Firewall Web Reference and Admin Guide Download?

  • 100% Free: No hidden fees or subscriptions required for one book every day.
  • No Registration: Immediate access is available without creating accounts for one book every day.
  • Safe and Secure: Clean downloads without malware or viruses
  • Multiple Formats: PDF, MOBI, Mpub,... optimized for all devices
  • Educational Resource: Supporting knowledge sharing and learning

Free Books Similar to Sophos XG Firewall Web Reference and Admin Guide

Frequently Asked Questions

Is it really free to download Sophos XG Firewall Web Reference and Admin Guide PDF?

Yes, on https://PDFdrive.to you can download Sophos XG Firewall Web Reference and Admin Guide by completely free. We don't require any payment, subscription, or registration to access this PDF file. For 3 books every day.

How can I read Sophos XG Firewall Web Reference and Admin Guide on my mobile device?

After downloading Sophos XG Firewall Web Reference and Admin Guide PDF, you can open it with any PDF reader app on your phone or tablet. We recommend using Adobe Acrobat Reader, Apple Books, or Google Play Books for the best reading experience.

Is this the full version of Sophos XG Firewall Web Reference and Admin Guide?

Yes, this is the complete PDF version of Sophos XG Firewall Web Reference and Admin Guide by Unknow. You will be able to read the entire content as in the printed version without missing any pages.

Is it legal to download Sophos XG Firewall Web Reference and Admin Guide PDF for free?

https://PDFdrive.to provides links to free educational resources available online. We do not store any files on our servers. Please be aware of copyright laws in your country before downloading.

The materials shared are intended for research, educational, and personal use in accordance with fair use principles.

We use cookies

We use cookies to ensure you get the best browsing experience on our website. By clicking "Accept Cookies", you agree that we can store cookies on your device in accordance with our Terms and Privacy.