50
March 2019 Page 1 of 50 Getting Started Guide Sophos Firewall Manager Document Date: March 2019

SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

  • Upload
    others

  • View
    2

  • Download
    0

Embed Size (px)

Citation preview

Page 1: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

March 2019 Page 1 of 50

Getting Started Guide Sophos Firewall Manager Document Date: March 2019

Page 2: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 2 of 50

Contents

Change Log ..................................................................................................................................... 3

Preface ............................................................................................................................................. 4

Supported SFOS versions............................................................................................................. 4

Installation Instructions ................................................................................................................. 4 Recommended hardware requirement ................................................................................................. 4

Minimum hardware requirement for Software Devices (ISO File) .............................................................. 4 Download ........................................................................................................................................... 4

Deploying a Virtual or Software Device....................................................................................... 9 1. Virtual Appliances ....................................................................................................................................... 9 2. Software Devices (ISO File) ...................................................................................................................... 9

Creating an Installer for Software Appliance ......................................................................................... 9 Installation process ....................................................................................................................................... 10 Booting ........................................................................................................................................................... 10

Importing Virtual Firewall Manager in Virtual Devices.......................................................................... 12 VMware Virtual Machine .............................................................................................................................. 12 Xen Virtual Machine: .................................................................................................................................... 16

KVM ................................................................................................................................................. 21 Hyper-V Virtual Machine .................................................................................................................... 26

First-Time Device setup ............................................................................................................... 41 A. Activation ............................................................................................................................................... 41 B. Basic Setup ........................................................................................................................................... 42 C. Device Activation .................................................................................................................................. 42 D. Device Registration .............................................................................................................................. 43 E. Synchronize License ............................................................................................................................ 44 F. Configure Sophos Firewall Manager (SFM) ....................................................................................... 45

Start using Sophos Firewall Manager ....................................................................................... 47 A. Understanding the 3 work areas – Device Configuration, Template Configuration & System Management ................................................................................................................................................. 47 B. Add devices to manage ....................................................................................................................... 47 C. Create Device Group ........................................................................................................................... 50 D. Start Managing Devices ....................................................................................................................... 50 E. Templates ............................................................................................................................................. 50 F. Monitoring ............................................................................................................................................. 50

Page 3: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 3 of 50

Change Log

Date Change Description

16-11-2015 Updated Recommended Hardware Requirement section as per number of devices that can be managed by Sophos Firewall Manager.

20-06-2016 Updated Recommended Hardware Requirement section for minimum hardware requirement for Software Devices (ISO File).

01-02-2017 The entire guide was updated for version 16.

14-06-2017 Updated all instances of SF-OS to SFOS.

12-09-2017 Removed the Prerequisite to configure 4 Virtual Network Interfaces in Xen Virtual Machine, KVM and Hyper-V Virtual Machine section.

06-03-2019 Updated Recommended Hardware Requirement section for:

Minimum 2 network interface cards required for virtual software.

Recommended CPU changed to Octa core for SFMv1000.

Page 4: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 4 of 50

Preface

This guide describes how to download, deploy and run Sophos Firewall Manager (SFM) as a

Software Appliance on custom hardware or as a virtual machine. Supported SFOS versions

SFM (SFM v15.01.0.206) supports Firewalls using the following SFOS versions:

Hardware Appliance: SFOS 15.01.0.292 and above Software Appliance: SFOS 15.01.0.143 and above Virtual Appliance: SFOS 15.01.0.246 and above

Installation Instructions

Recommended hardware requirement

Virtual and Software deployments of SFM are licensed based on the number of devices managed and a no-charge evaluation license is available for managing up to 5 firewall devices.

Virtual /Software SFMv5* SFMv15 SFMv50 SFMv100 SFMv200 SFM v500

SFMv1000

Number of Sophos Firewall OS devices supported

5 15 50 100 200 500 1000

Recommended CPU** Dual Core

Dual Core

Dual Core

Dual Core

Dual Core

Quad Core

Octa Core

Recommended Memory (vRAM)

2 GB 2 GB 4 GB 4 GB 8 GB 8 GB 16 GB

Recommended HDD 160 GB 160 GB 250 GB 500 GB 500 GB 1 TB 1 TB

Network Interface Support (Minimum /Maximum)

2 / 4 2 / 4 2 / 4 2 / 4 2 / 4 2 / 4 2 / 4

* Free for evaluation purpose ** CPU frequency 2.7 GHz or equivalent

Minimum hardware requirement for Software Devices (ISO File)

1 GB RAM

2 Network Interface Cards 64 GB HDD/SSD size

Download

SFM is available as Virtual or as Software Device (on custom hardware).

Click the link https://sophos.com/en-us/products/next-gen-firewall/free-trial/sfm.aspx to register

for MySophos account and download the virtual or software device for Sophos Firewall Manager (SFM).

To register for MySophos Account, fill in the required details as shown in the image below and

click Submit.

Page 5: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 5 of 50

Note:

After clicking submit, you will receive an email at the Email Address specified in the step above

asking to activate your account. For now, skip activating your account and proceed directly to step 3.

Fill-in you’re the following organization details and click Submit.

You will be redirected to the End User License Agreement page, select the check-box against ‘I accept the terms and conditions’ and click Submit to initiate the download process of a ZIP file containing the virtual image for Sophos Firewall Manager.

Page 6: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 6 of 50

…….

You will be redirected to download page as shown below, click on the download button to

initiate the download process of a ZIP file containing the virtual image for Sophos Firewall

Manager.

Page 7: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 7 of 50

Page 8: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 8 of 50

In addition, you will receive an email with subject line ‘Your Sophos Serial Number’ containing

the serial number to activate and register your Firewall Manager. For now, just save the serial number and proceed to step number 6 since you will need the serial number for Device Activation and Registration.

Page 9: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 9 of 50

Activate your MySophos account. While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account. Click the link provided in the mail to activate your account. On successful activation you will be redirected to following page.

Deploying a Virtual or Software Device

1. Virtual Appliances

A. VMware Virtual Machine (VMware Workstation, ESXi_Server) B. Xen Virtual Machine C. Hyper-V Virtual Machine

D. KVM Virtual Machine

Just import the VM file into Virtual Device of choice, and set the hardware specs for your VM.

2. Software Devices (ISO File)

The downloaded ISO file can be installed on the custom hardware using an Installer. To create the Installer, see Creating an Installer section.

Creating an Installer for Software Appliance

To install Software, you will need to write ISO to a standard USB thumb drive.

On Windows:

1. Download and run the Win32 Disk Imager utility.

(http://sourceforge.net/projects/win32diskimager/)

2. Run the utility, and browse the downloaded ISO file. The application will default to looking for .IMG files. Be sure to change the file filter to (*.*), then locate and select the Firewall

Manager ISO file. 3. Select the USB thumb drive you wish to install the ISO on. The thumb drive should be at

least 1GB in size, and writing the ISO to it will erase any data it currently contains.

4. Once the process is complete, your thumb drive is ready to use.

On OS X:

1. Open the Disk Utility included on OS X. 2. Locate the thumb drive in the list of disks.

Page 10: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 10 of 50

3. On the partitions tab, change the volume scheme to “1 partition”, and the format to “Free Space”, then click apply. 4. You will need to convert the downloaded ISO file into a new format. Open a terminal

window, and navigate to the path where the ISO is stored. 5. Run the command:

hdiutil convert -format UDRW -o sfm.img 15.01.0.206_ISO.iso

6. The converted ISO will be named sfm.img.dmg. 7. Next, locate the device path of the USB device, by running diskutil list.

8. For example, let’s say your USB thumb drive’s path is /dev/disk9 but be sure to use the actual path of your thumb drive.

9. Next, we’ll write the converted ISO to your thumb drive, with the following command:

dd if=./sfm.img.dmg of=/dev/rdisk9 bs=1m

Note:

The = path adds an “r” in front of the device path name. This is deliberate, and enables

RAW disk access. You may leave the r out, but the process will go much more slowly. You may need to run “sudo dd <rest of command>” for the imaging to work on your

system.

10. Wait a few minutes for the process to complete. When you return to a command prompt, the

thumb drive will be ready, and can be ejected.

11. If you run into problems, see http://borgstrom.ca/2010/10/14/os-x-bootable-usb.html for more detailed instructions.

Installation process

Since this is a Software/Virtual Device, you may need to change BIOS settings for the thumb drive to boot, if you are installing on your own hardware. You will also need to connect a monitor

and keyboard, or a serial cable to the system to complete. You will need to respond to two prompts to begin the installation.

Booting

When prompted, press y<enter> to start the install.

The installation progress will be shown on the screen, as it continues.

Page 11: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 11 of 50

Once the installation is complete, remove the thumb drive, and reboot the device. Give it a

couple minutes for the first boot to complete.

At this point, the system is now running Sophos Firewall Manager. You can now setup your device and start using SFM.

Page 12: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 12 of 50

Importing Virtual Firewall Manager in Virtual Devices

VMware Virtual Machine

Download the .zip file containing the Sophos Firewall Manager OVF.

Open VMware and open .ovf file.

Page 13: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 13 of 50

Click on Import.

Select the SFM Virtual machine and click Play virtual machine link to start Sophos Firewall virtual machine.

Page 14: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 14 of 50

Customize Configuration - Default Hard disk2 will be 160 GB, you can increase Disk size using following steps:

1. Click on Edit virtual machine settings.

2. Click on Hard Disk 2 then click on Expand... button.

3. Enter Maximum Disk Size as per your Requirement.

Page 15: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 15 of 50

4. You will get the below Successfully Expanded Message. Click on OK.

5. After reboot, you can check Expanded Disk 2 in Virtual Machine settings Page.

Page 16: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 16 of 50

You can now setup your device and start using SFM.

Xen Virtual Machine:

Base Configuration

One vCPU 1GB vRAM Primary Disk with 4GB size

Report Disk with 80GB size

Prerequisites

Make sure that XenServer is already installed in your network. Install XenCenter, a desktop Graphical User Interface (GUI) application for managing

XenServer.

Importing Virtual Firewall Manager

Download the .zip file containing the Sophos Firewall Manager OVF. Open XenCenter and select the XenServer where you want to deploy Sophos Firewall Manager

Virtual Appliance.

Right click on the selected XenServer and click Import to open the downloaded .ovf file.

Page 17: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 17 of 50

Navigate to location where .ovf is stored and select it.

Click Next to configure Location, Storage and Security one by one. After that, click Next to enable/disable Operating System Fixup, a feature when enabled,

ensures hypervisor Interoperability. Generally, Operating System Fixup is not required and by default, “Don’t use Operating System Fixup” is selected. Sophos Firewall Manager recommends that you do not change the default selection.

Page 18: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 18 of 50

Click Next to configure the “Transfer VM Settings”. Transfer VM is a temporary VM, created during the deployment process, which is used to perform the import operation.

From the drop-down list against ‘Network’, select the network on which the temporary VM will run. Specify an unused IP Address from the pool or standalone server you selected in the very beginning of Step 3. Alternatively, you can choose to automatically obtain network

settings using DHCP.

Page 19: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 19 of 50

Click Next to continue to the final step of the “Import OVF/OVA Package” wizard i.e. reviewing the import settings.

Click Finish to exit the “Import OVF/OVA Package” wizard. The deployment process takes time

to complete. Please wait while the process completes.

This installs Sophos Firewall Manager Virtual Appliance on your machine.

Start virtual machine - Right click the deployed Virtual Appliance and click Start to access Sophos Firewall Manager.

Enter the administrator password i.e. ‘admin’ to continue to the main menu of the Sophos Firewall Manager Virtual Appliance.

Page 20: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 20 of 50

Steps to Customize Hard disk size

Power Off virtual Machine, go to storage option and right click on disk-2. Click on Properties.

Go to “Size and Location” option to change disk size.

Click on OK button to apply the changes and power on Virtual Machine. You can now setup your device and start using SFM.

Page 21: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 21 of 50

KVM

Base Configuration

One vCPU

1GB vRAM Primary Disk Auxiliary Disk

Prerequisites

Make sure you have an x86 machine running a recent Linux kernel on an Intel processor with

VT (virtualization technology) extensions, or an AMD processor with SVM extensions (also called AMDV).

Use commands given below to check if your CPU supports Intel VT or AMD-V:

For Intel VT: grep --color vmx /proc/cpuinfo For AMD-V: grep --color svm /proc/cpuinfo

Importing Virtual Firewall Manager

Download the .zip file containing the Sophos Firewall Manager .qcow2 image.

Open KVM, navigate to File > Add Connection. Click on Create a new virtual machine icon. Specify name for the virtual machine and select Import existing disk image and browse to the

folder containing Sophos Firewall Manager .qcow2 file titled ‘<Appliance Key>- disk1.qcow2’, where <Appliance Key> stands for your Sophos Firewall Manager Virtual Appliance key.

Page 22: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 22 of 50

Click on Open. Keep both OS type and Version as Generic and click Forward to continue to the next step.

Assign vRAM and vCPU to be used by the virtual machine. Click Forward to continue to the next step.

Page 23: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 23 of 50

As mentioned in the Base Configuration section, there underlies a base virtual hardware

configuration without which Sophos Firewall Manager Virtual Security Appliance goes into “FAILSAFE” mode. To ensure that Virtual Sophos Firewall Manager boots up with the base virtual hardware configuration, you need to customize the configuration before clicking

Finish. Tick the checkbox against Customize configuration before install parameter and click Finish.

Page 24: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 24 of 50

Customize Configuration - As displayed in the screen below, modify the Disk bus and Storage Format information of Disk1, added in earlier steps, to Sophos Firewall Manager supported settings.

Add Auxiliary Disk to the Virtual Machine Go to Add Hardware > Storage and click Select managed or other existing image to add the Sophos Firewall Manager Virtual Appliance Auxiliary Disk file titled ‘<Appliance Key>disk2.qcow2’, where <Appliance Key> stands for

your Sophos Firewall Manager Virtual Appliance key. Change Device type to Virtio Disk and Storage format to qcow2 and click Finish to successfully add the Auxiliary Disk to the Virtual Machine.

Page 25: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 25 of 50

Add vNICs to the Virtual Machine: o Prerequisite - It is mandatory to configure at least three Virtual Network Interfaces

and Sophos Firewall Manager recommends that all three of them should be

Bridge interfaces. o Go to Add Hardware > Network to add a vNIC to the Virtual Machine. o Select a bridge interface as ‘Host device’ and change ‘Device model’ to ‘virtio’ and

click Finish to successfully add the vNIC to the Virtual Machine. o Repeat the same procedure to configure at least 3 Virtual Network Interfaces (of

Device model type virtio) to the Sophos Firewall Manager Virtual Security

Appliance.

Begin Installation: After configuring minimum virtual hardware requirements for Virtual Sophos

Firewall Manager, click Begin Installation to complete the installation process of the Virtual Machine.

Page 26: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 26 of 50

Enter the administrator password i.e. admin to continue to the Main Menu of the Sophos Firewall Manager Virtual Security Appliance.

This installs Sophos Firewall Manager Virtual Security Appliance on your machine. You can now setup your device and start using SFM.

Customize Hard disk size: Default size of the Hard disk2 will be 160 GB, You can increase the disk size by executing following command:

qemu-img resize AUXILIARY-DISK.qcow2 +<disk_size>GB

For executing above command you should navigate to 'AUXILIARY-DISK.qcow2' file location.

For example your file placed under sfmos folder then you should navifate to sfmos (

/home/sfmos/) and execute the command (qemu-img resize AUXILIARY-DISK.qcow2 +500 GB)

Hyper-V Virtual Machine

Base Configuration

One vCPU

1GB vRAM Primary Disk Auxiliary Disk

Prerequisite

Make sure that Microsoft Hyper-V Server 2008/2012 is already installed in your network. For Microsoft Hyper-V Server installation instructions, refer to the Microsoft documentation:

http://technet.microsoft.com/en-us/library/dd283085(v=ws.10).aspx http://technet.microsoft.com/en-us/library/hh831620.aspx

Importing Virtual Firewall Manager

Download and Extract VHD Package: Download the .zip file containing the Sophos Firewall

Manager Virtual Disk and store it in your machine. Connect to Host Server: Open Hyper-V Manager and go to Action > Connect to Server to

connect to the host server on which you want to deploy the VHD template. Provide the IP

Address of the Host Server click OK to continue.

Page 27: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 27 of 50

Create New Virtual Machine, navigate to Action > New > Virtual Machine to launch the “New Virtual Machine Wizard”.

The New Virtual Machine Wizard helps you deploy Sophos Firewall Manager Virtual Appliance, click Next to continue.

Specify a name for the virtual machine.

By default, Sophos Firewall Manager Virtual Appliance is stored on the default folder

configured for the host server. Click “Store the virtual machine in a different location” if

you wish to store the virtual machine at a different location.

Page 28: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 28 of 50

Assign vRAM to be used by the virtual machine

Select the Virtual Network Interface from the list.

Page 29: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 29 of 50

Select “Use an existing virtual hard disk” to browse to the folder containing Sophos Firewall Manager Virtual Appliance Disk file titled ‘<PRIMARY-DISK.vhd> .

Page 30: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 30 of 50

Click Open to open the selected .vhd file.

Page 31: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 31 of 50

Click Next to continue to the next step, verify the selected deployment options and click Finish to start the deployment process.

This installs Sophos Firewall Manager Virtual Appliance on your machine.

Page 32: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 32 of 50

Attach Auxiliary Disk to the Virtual Machine: before you power on the deployed Sophos Firewall Manager Virtual Appliance, you need to attach the Auxiliary Disk to the virtual machine. Select the newly deployed virtual machine i.e. Sophos Firewall Manager Virtual Appliance

from Microsoft Hyper-V Manager and go to Action > Settings to attach the Auxiliary Disk with the virtual machine.

Go to Hardware > IDE Controller 1 > DVD Drive. You need to remove the “DVD Drive”

to be able to attach Auxiliary Disk to the virtual machine.

Page 33: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 33 of 50

Click Remove to remove the “DVD Drive” from “IDE Controller 1” section. You need to

add a “Hard Drive” under “IDE Controller 1” section to be able to mount the Auxiliary

Disk.

Go to Hardware > IDE Controller > Hard Drive and click Add.

You can now mount the Auxiliary Disk VHD file to the newly created Hard Drive. To do

so, go to Hardware > IDE Controller 1 > Hard Drive > Media. Select ‘Virtual hard disk

(.vhd) file’ and click Browse to select the complete path to the AUXILIARY-Disk.vhd file.

Page 34: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 34 of 50

Notes:

While attaching the ‘Primary Disk’ to the Virtual Machine, it is mandatory to use following configurations, else the Sophos Firewall Manager Virtual Appliance goes into “KERNEL

PANIC” mode: Select ‘Controller’ as “IDE Controller 0” and ‘Location’ as “0 (in use)” While attaching the ‘Auxiliary Disk’ to the Virtual Machine, it is mandatory to use following

configurations, else the Sophos Firewall Manager Virtual Security Appliance goes into

“FAILSAFE MODE”. Select ‘Controller’ as “IDE Controller 1” and ‘Location’ as “0 (in use)”

Select the Auxiliary Disk titled AUXILIARY-DISK.vhd, .Click Open to continue.

Page 35: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 35 of 50

Configure Virtual Network Interfaces

Prerequisite:

It is mandatory to configure at least Four Virtual Network Interfaces. To configure vNICs, go to Hardware > Add Hardware and select the Virtual Network Interface type from available options. Click Add to continue.

For demonstration purpose, we are adding a Network Adaptor.

This adds a Network Adapter to the Virtual Machine.

You can now configure the newly added Virtual Network Adapter as LAN/WAN/DMZ port. Go to Hardware > Network Adapter > Network and select

any port you wish to configure to the selected Network Adapter.

Page 36: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 36 of 50

Click OK to configure the selected port to the Network Adapter. Repeat the same procedure to configure at least 3 Virtual Network Interfaces to the Sophos Firewall Manager Virtual Security Appliance.

Connect to the Sophos Firewall Manager Virtual Appliance. Right click the deployed Sophos

Firewall Manager Virtual Appliance from the Microsoft Hyper-V Manager and click Connect to connect to the Virtual Machine. You will come across the following screen:

Click Start icon to Power on the Sophos Firewall Manager Virtual Appliance.

Page 37: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 37 of 50

Enter the administrator password i.e. ‘admin’ to continue to the Main Menu of the Sophos Firewall Manager Virtual Appliance.

To increase the Auxiliary disk size from 160 GB to 500 GB turn off the SFM device.

Page 38: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 38 of 50

Then go to File > Settings Page open.

Page 39: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 39 of 50

Select IDE Controller1 Auxiliary Hard disk and click on edit Tab.

Select Choose action Tab and select Expand to expand the size of disk.

Page 40: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 40 of 50

Enter 500 or more can update the size of disk and finish.

You can now start SFM from Start button. You can now setup your device and start using SFM.

Page 41: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 41 of 50

First-Time Device setup

A. Activation

a. Open the Web Admin UI from device IP and enter your Serial Number which was sent via email to you and click on Activate Device.

b. You will be redirected to the Sophos End User License Agreement (EULA). You need

to accept the agreement to proceed further.

Page 42: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 42 of 50

c. Click I Accept to navigate to the welcome page.

B. Basic Setup

Open the Web Admin UI from device ip and logon using initial credentials admin /admin and click Basic Setup.

Complete the Basic Setup so that device will be able to connect to the Internet for Activation.

Note: To activate device successfully, configure DNS correctly.

C. Device Activation

You should have received an email with the Serial Number on the email address provided while downloading Sophos Firewall Manager.

After Basic Setup is done, enter the Serial Number and click Activate Appliance. Your device will be activated successfully.

Page 43: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 43 of 50

D. Device Registration

After activation, click Register Device to register.

Page 44: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 44 of 50

E. Synchronize License

After Registration, click Initiate License Synchronization to start license synchronization on the device.

Page 45: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 45 of 50

F. Configure Sophos Firewall Manager (SFM)

1. Network Configuration

After License Synchronization, you will see Configure Firewall Manager to

configure your firewall settings.

This will take you to the login screen where you can login using Sophos Firewall Manager default credentials (admin /admin). On login you will land on the Home Dashboard. You can configure basic setup using the Wizard. On the Home Dashboard,

click admin > Wizard to run the Network Configuration Wizard.

Page 46: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 46 of 50

Click Start to begin the Wizard and follow the on-screen instructions.

2. Additional Network Setup

Once the wizard is executed successfully you can do the following additional network setup:

Interfaces - Go to System Management > System Settings > Network > Interface. Gateways - Go to System Management > System Settings > Network > WAN Link Manager. DNS settings - Go to System Management > System Settings > Network > DNS.

Static routes - Go to System Management > System Settings > Network > Unicast Route.

Page 47: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 47 of 50

Start using Sophos Firewall Manager

A. Understanding the 3 work areas – Device Configuration, Template Configuration &

System Management

On the home dashboard, click the work area selector section, as shown below:

It offers 3 work areas - Device Configuration, Template Configuration and System Management.

The Device Configuration work area allows you to manage policies and configurations of individual or group Sophos Firewall devices.

The Template Configuration work area allows you to create re-usable configuration templates. The System Management work area lets you manage device settings (add device, add device

group, change control, Firewall firmware upgrade), monitoring settings and your SFM

system settings.

B. Add devices to manage

1. Configure Central Management settings on the Sophos Firewall device to be managed, from System > Administration > Central Management (on the SF admin console), as shown in the image below.

2. The request appears in Firewall Manager under Discover in top panel of the Home page. You can view all discovered devices and add the device. You must use the

Page 48: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 48 of 50

communication settings specified the in Firewall while adding the device in Firewall Manager.

3. Click to add the device. This will take you to Add Device Wizard.

You must use the same Central Management communication settings as configured in

the Firewall while adding the device in Firewall Manager as shown below:

Page 49: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 49 of 50

Note: Alternatively, you can also add a device in from System Management > Device Settings > Managed Devices > Devices, as shown below:

Ensure same settings are applied on Firewall as well.

Page 50: SFM Getting Started Guide · 2019-03-06 · C. Create Device Group ... While your virtual image is being downloaded, open the mail you received in step 2 asking to activate your account

Sophos Firewall Manager Getting Started Guide

March 2019 Page 50 of 50

C. Create Device Group

Create Device Group from System Management > Device Settings > Managed Devices > Device Group based on required grouping criteria.

D. Start Managing Devices

1. Go to Device Configuration. 2. Select the group and filter on view /device to manage. 3. Change Firewall device configuration using the left menu.

E. Templates

Go to Template Configuration. You can add Template by either using configuration of an existing device, cloning an existing

template or creating a fresh template. Change configuration of template as needed.

You can provision template from Template > View Template List by clicking Provision Template.

F. Monitoring

You can click Monitor in the top panel to monitor using the Flat View or Card View for managed devices.