Sophos XG Firewall v 15.01.0 – Release Notes
Sophos Central Firewall
Manager Web Interface
Reference and Admin
Guide v17
For Sophos C ustomers
Document Date: April 2018
,Contents
Introduction............................................................................................................... 3
Using Admin Console............................................................................................... 4
Supported Browsers.............................................................................................................................................. 5
Navigating through the Admin Console.............................................................................................................. 5
Menus.................................................................................................................................................................... 6
Tool Tips............................................................................................................................................................... 6
Notification pop-ups............................................................................................................................................. 7
Common Operations............................................................................................................................................. 7
Set Schedule..............................................................................................................................................7
Synchronize............................................................................................................................................... 8
Entity Usage Reference............................................................................................................................ 8
Editing an Entity.......................................................................................................................................8
Deleting an Entity.....................................................................................................................................8
Sorting Lists.............................................................................................................................................. 9
Filtering Lists............................................................................................................................................ 9
Configuring Column Settings...................................................................................................................9
Reordering Lists........................................................................................................................................9
Summary................................................................................................................................................... 9
Template Configuration........................................................................................... 9
System Management...............................................................................................10
Device Settings................................................................................................................................................... 10
Managed Devices....................................................................................................................................10
Maintenance............................................................................................................................................ 24
Firmware................................................................................................................................................. 27
Scheduled Task....................................................................................................................................... 27
Dynamic Objects.....................................................................................................................................28
Change Control....................................................................................................................................... 33
Monitor................................................................................................................................................................38
Device Monitor....................................................................................................................................... 38
Graphs..................................................................................................................................................... 40
Alerts....................................................................................................................................................... 42
Event Viewer...........................................................................................................................................44
Account Settings................................................................................................................................................. 45
Accounts..................................................................................................................................................45
Administration.........................................................................................................................................47
Diagnostics.............................................................................................................................................. 51
Copyright Notice..................................................................................................... 53
, | Introduction |
Introduction
Sophos Central Firewall Manager (CFM) provides comprehensive central management of Sophos XG Firewall s to
Sophos Partners. With a range of features, CFM simplifies security management for actions like rapid deployment
of organization-wide security policies and updates for better protection of dispersed networks, offering benefits of
reduced cost, complexity and time.
The Sophos Central Firewall Manager UI offers you 3 work areas: Device Configuration, Template Configuration,
and System Management.
Device Configuration
The Device Configuration work area allows you to manage policies and configurations of individual or group of
Sophos XG Firewall devices. You can select an individual device or device group and use menu items in the left panel
to edit Policies, Settings and Objects like in your Firewall UI.
Template Configuration
The Template Configuration work area allows you to create re-usable configuration templates allowing you to set up
a new firewall at branch or customer office in minimum time. You have an option to add a template using an existing
device configuration, clone an existing template, or setup a fresh template. You can edit the template configuration by
using menu items in the left panel to edit Policies, Settings and Objects like in your Firewall UI. Once ready, you can
provision the template to one or more firewall devices as per your need.
System Management
The System Management work area lets you manage device settings, monitoring settings and your CFM system
settings.
• Device settings: You can add or remove managed devices or device groups, add or remove templates, upgrade
firmware of managed devices, create and manage dynamic objects, and change control and logging.
• Monitoring settings: You can edit monitoring settings, setup email alerts, view device events and logs, view
management system events.
• Account Settings: You can manage CFM account settings, and set up role-based access, Diagnostics and more.
Dashboards & Monitoring
Sophos Central Firewall Manager offers multiple dashboards for a quick snapshot and easy monitoring of your
managed firewalls.
• Device Monitor
• Flat view and card view allow you to monitor the status (Critical, Warning, Normal) of managed devices
across a set of parameters for Security, Resource, License and Availability, based on their threshold values.
• In flat view, devices that need attention are automatically listed at the top on the basis of their monitor status.
• You have the flexibility to customize threshold values for Critical, Warning and Normal levels as per your
needs.
• Home and Group-level Dashboard
• Device Info: Summary of managed devices like the count of managed devices, unsynchronized devices, and
disconnected devices.
• Device monitor summary: A snapshot of firewall count that requires attention in terms of Security, Resource,
License, Availability.
• A list of managed firewalls by their model number, and more.
Group-level dashboard lets you filter the above view for a device group.
• Device Dashboard - It offers you insights into security, resource, license and availability parameters along with
device and connection information to enable you to take necessary action
, | Using Admin Console |
• Alert - Configure alert profiles for one or more firewalls or Firewall group to get alert notifications over email.
This includes alert notifications for parameters like subscription expiry, Device disconnected from central
management, Device Gateway status change, VPN connection status change, along with counts of Intrusion
attack, ATP events exceed, Web virus, Objectionable + Unproductive surfing hits, and percentage of endpoints
with Red health exceeding a threshold limit.
Using Admin Console
Sophos Central Firewall Manager uses a Web 2.0 based easy-to-use graphical interface termed as Admin Console to
configure and manage the device.
Log on procedure
The log on procedure authenticates the user and creates a session with the Device until the user logs-off.
To get the login window, open the browser and type Web Address of the Sophos Central Firewall Manager in
browser’s URL box. A dialog box appears prompting you to enter email and password.
Below are the screen elements with their description:
Email
Enter registerd Partner email address.
Password
Enter Partner account password.
Login button
Click to log on the Admin Console.
You will be redirected to Login Verificarion page. Enter Security Code and PIN to continue.
Below are the screen elements with their description:
Security Code
Enter Security Code as received on your registered Partner email address.
PIN
Enter PIN for your Partner account.
Submit
Click to submit entered information.
Choose Another Method
Click to select another method for login verification.
Home appears as soon as you press Submit on Login Verification page.
Admin Console Language
The Admin Console supports multiple languages, but by default appears in English. Apart from English, Brazilian-
Portuguese, Chinese-Simplified, Chinese-Traditional, French, German, Italian, Japanese, Korean, Russian and
Spanish languages are also supported. Administrator can choose the preferred language at the time of logging in.
Administrator can also specify description for various policies, services and custom categories in any of the supported
languages.
Log out procedure
To avoid un-authorized users from accessing Sophos Central Firewall Manager, log off after you have finished
working. This will end the session.
Sophos Central Firewall
Manager Web Interface
Reference and Admin
Guide v17
For Sophos C ustomers
Document Date: April 2018
,Contents
Introduction............................................................................................................... 3
Using Admin Console............................................................................................... 4
Supported Browsers.............................................................................................................................................. 5
Navigating through the Admin Console.............................................................................................................. 5
Menus.................................................................................................................................................................... 6
Tool Tips............................................................................................................................................................... 6
Notification pop-ups............................................................................................................................................. 7
Common Operations............................................................................................................................................. 7
Set Schedule..............................................................................................................................................7
Synchronize............................................................................................................................................... 8
Entity Usage Reference............................................................................................................................ 8
Editing an Entity.......................................................................................................................................8
Deleting an Entity.....................................................................................................................................8
Sorting Lists.............................................................................................................................................. 9
Filtering Lists............................................................................................................................................ 9
Configuring Column Settings...................................................................................................................9
Reordering Lists........................................................................................................................................9
Summary................................................................................................................................................... 9
Template Configuration........................................................................................... 9
System Management...............................................................................................10
Device Settings................................................................................................................................................... 10
Managed Devices....................................................................................................................................10
Maintenance............................................................................................................................................ 24
Firmware................................................................................................................................................. 27
Scheduled Task....................................................................................................................................... 27
Dynamic Objects.....................................................................................................................................28
Change Control....................................................................................................................................... 33
Monitor................................................................................................................................................................38
Device Monitor....................................................................................................................................... 38
Graphs..................................................................................................................................................... 40
Alerts....................................................................................................................................................... 42
Event Viewer...........................................................................................................................................44
Account Settings................................................................................................................................................. 45
Accounts..................................................................................................................................................45
Administration.........................................................................................................................................47
Diagnostics.............................................................................................................................................. 51
Copyright Notice..................................................................................................... 53
, | Introduction |
Introduction
Sophos Central Firewall Manager (CFM) provides comprehensive central management of Sophos XG Firewall s to
Sophos Partners. With a range of features, CFM simplifies security management for actions like rapid deployment
of organization-wide security policies and updates for better protection of dispersed networks, offering benefits of
reduced cost, complexity and time.
The Sophos Central Firewall Manager UI offers you 3 work areas: Device Configuration, Template Configuration,
and System Management.
Device Configuration
The Device Configuration work area allows you to manage policies and configurations of individual or group of
Sophos XG Firewall devices. You can select an individual device or device group and use menu items in the left panel
to edit Policies, Settings and Objects like in your Firewall UI.
Template Configuration
The Template Configuration work area allows you to create re-usable configuration templates allowing you to set up
a new firewall at branch or customer office in minimum time. You have an option to add a template using an existing
device configuration, clone an existing template, or setup a fresh template. You can edit the template configuration by
using menu items in the left panel to edit Policies, Settings and Objects like in your Firewall UI. Once ready, you can
provision the template to one or more firewall devices as per your need.
System Management
The System Management work area lets you manage device settings, monitoring settings and your CFM system
settings.
• Device settings: You can add or remove managed devices or device groups, add or remove templates, upgrade
firmware of managed devices, create and manage dynamic objects, and change control and logging.
• Monitoring settings: You can edit monitoring settings, setup email alerts, view device events and logs, view
management system events.
• Account Settings: You can manage CFM account settings, and set up role-based access, Diagnostics and more.
Dashboards & Monitoring
Sophos Central Firewall Manager offers multiple dashboards for a quick snapshot and easy monitoring of your
managed firewalls.
• Device Monitor
• Flat view and card view allow you to monitor the status (Critical, Warning, Normal) of managed devices
across a set of parameters for Security, Resource, License and Availability, based on their threshold values.
• In flat view, devices that need attention are automatically listed at the top on the basis of their monitor status.
• You have the flexibility to customize threshold values for Critical, Warning and Normal levels as per your
needs.
• Home and Group-level Dashboard
• Device Info: Summary of managed devices like the count of managed devices, unsynchronized devices, and
disconnected devices.
• Device monitor summary: A snapshot of firewall count that requires attention in terms of Security, Resource,
License, Availability.
• A list of managed firewalls by their model number, and more.
Group-level dashboard lets you filter the above view for a device group.
• Device Dashboard - It offers you insights into security, resource, license and availability parameters along with
device and connection information to enable you to take necessary action
, | Using Admin Console |
• Alert - Configure alert profiles for one or more firewalls or Firewall group to get alert notifications over email.
This includes alert notifications for parameters like subscription expiry, Device disconnected from central
management, Device Gateway status change, VPN connection status change, along with counts of Intrusion
attack, ATP events exceed, Web virus, Objectionable + Unproductive surfing hits, and percentage of endpoints
with Red health exceeding a threshold limit.
Using Admin Console
Sophos Central Firewall Manager uses a Web 2.0 based easy-to-use graphical interface termed as Admin Console to
configure and manage the device.
Log on procedure
The log on procedure authenticates the user and creates a session with the Device until the user logs-off.
To get the login window, open the browser and type Web Address of the Sophos Central Firewall Manager in
browser’s URL box. A dialog box appears prompting you to enter email and password.
Below are the screen elements with their description:
Enter registerd Partner email address.
Password
Enter Partner account password.
Login button
Click to log on the Admin Console.
You will be redirected to Login Verificarion page. Enter Security Code and PIN to continue.
Below are the screen elements with their description:
Security Code
Enter Security Code as received on your registered Partner email address.
PIN
Enter PIN for your Partner account.
Submit
Click to submit entered information.
Choose Another Method
Click to select another method for login verification.
Home appears as soon as you press Submit on Login Verification page.
Admin Console Language
The Admin Console supports multiple languages, but by default appears in English. Apart from English, Brazilian-
Portuguese, Chinese-Simplified, Chinese-Traditional, French, German, Italian, Japanese, Korean, Russian and
Spanish languages are also supported. Administrator can choose the preferred language at the time of logging in.
Administrator can also specify description for various policies, services and custom categories in any of the supported
languages.
Log out procedure
To avoid un-authorized users from accessing Sophos Central Firewall Manager, log off after you have finished
working. This will end the session.
