Sophos UTM Firewall

Review the last web admin sessions to see changes by users, including creating objects and a host object named modern, plus a firewall rule from any to any.

Change the admin language in general settings, restart the system to apply it, and configure web admin access by adding a test user and restricting networks to internal only.

Learn to configure access control on the sophos utm firewall by creating roles like network protection manager and log file editor, and assign web admin and read-only versus edit permissions.

Explore managing https certificates in Sophos utm firewall by importing and regenerating certificates based on hostname, including web admin certificates, in settings for security.

Enable the RESTful API using the endpoint URL and API token to authorize server-side changes. Read the documentation to leverage automation, such as remotely adjusting interface IPs via DevOps workflows.

Explore the user preferences in Sophos UTM Firewall, customizing shortcuts for users and groups, endpoints, and ports; adjust items per page and the browser title in the web admin.

Configure advanced settings to control web admin session timeout and port, customize terms of use after first login, and manage data collection and licensing options.

Learn how the licensing page shows license id, registration date, and max users and connections. Explore the installation page to upload a license file and review license expiry indicators.

Create encrypted backups of the UTM settings on a local disk, import backups, and restore the firewall to a previous configuration.

Learn to back up and restore Sophos UTM firewall configurations via ssh, including listing backup files, selecting a file, and executing a restore with remote commands.

Enable automatic backups, set how many backups to keep and how often (daily, weekly, temp), and optionally email backups to up to five or ten addresses and encrypt them.

Configure email or SNMP notifications for the Sophos UTM firewall, select which events to receive (logins, IP addresses), test alerts, and set up a SMTP server with TLS and authentication.

Configure inbox and notification settings for Sophos UTM firewall so email notifications avoid spam and reliably reach your inbox with additional configuration.

Configure and troubleshoot email notifications for Sophos UTM Firewall. Learn how to prevent alerts from going to spam and complete extra configuration to reliably receive them.

Customize the source UTM logo and your company text; ensure generated reports display your logo and tailor web filtering messages, templates, and quarantine email notices.

Enable snmp on the utm, choose snmp version 2 or 3, configure community string or user authentication, specify trusted networks, and test by querying system name, location, and admin details.

Configure snmp traps in Sophos utm by selecting version v1 or v3, set ip and community string for v1, or provide encryption and engine for v3, save, and view traps.

Register your Sophos UTM to central management to access multiple UTMs from one account, assign admin or monitoring permissions, and monitor status via the centralized interface.

Explore high availability setup for Sophos UTM firewall, including hot standby and cluster modes, licensing, NIC configuration, encryption keys, automatic device configuration, and choosing a preferred master.

Learn how to shut down or restart a Sophos UTM firewall, including remote reboot when physical access is unavailable, and how the system restores its prior configuration after restart.

Configure a fully qualified domain name as the hostname for the Sophos UTM firewall, ensuring DNS resolvability and proper hosts file mapping on macOS or Windows.

Explains organizational system settings in Sophos UTM Firewall, including company name, location, country, administrators, and email addresses, and warns that changes can renew certificates and require reissuing client certificates.

Set time and date on the Sophos UTM firewall, manually or by syncing with an MTP server, to keep logs accurate with correct time zones.

Explore enabling shell access on a Sophos UTM firewall, login vs root access, and key-based authentication, including securing networks and changing the allowed port.

learn how to enable direct root ssh login on a linux system by editing sshd_config to permit root login, restarting ssh, and testing root authentication for ftp transfers.

Learn how to reset configuration or passwords on Sophos UTM, including factory resets, deleting shell and login passwords, and managing system id resets for endpoint protection and cloning.

Learn to define networks, hostnames, DNS addresses, and services, group devices with MAC address lists, and implement time-based firewall rules.

Create and manage users and groups on the Sophos UTM firewall, selecting local or remote authentication, assign static or dynamic VPN IPs, and organize access via groups and firewall rules.

Learn how to log a user's entire internet traffic through Sophos UTM by forcing all traffic through the firewall, mapping to a public IP, and enabling monitoring and blocking options.

Learn how to create and configure Sophos UTM firewall interfaces, including internal and external networks, assign gateways, and manage VLANs and bridges for secure traffic routing.

Explore additional interfaces in Sophos UTM firewall, including virtual, VLAN, and physical interfaces, and configure a production interface on internal networks with a /29 subnet offering up to 32 hosts.

Explore how the Nmap tool scans IP addresses and interfaces to detect open ports, with tips on proper usage, limitations on UTM interfaces, and interpreting scan results.

Monitor the uplink interface and trigger actions when it goes down, such as enabling or disabling an IPsec tunnel; choose automatic or specify hosts to monitor.

Enable IPv6 on the Sophos UTM firewall, create and manage IPv6 addresses and definitions, and configure advertising, numbering, and IPv6 to 4 integration.

Explore how to implement quality of service on a Sophos UTM firewall, including enabling QoS, setting uplink and downlink limits, and configuring bandwidth pools with traffic selectors.

Set up bandwidth pools and traffic selectors to guarantee bandwidth for traffic between Ubuntu and Windows, prioritize the transfer, test with speed tests, and adjust up to 90% of uplink.

Disable existing bandwidth rules and apply upload throttling to test traffic, selecting a traffic sector of any traffic on the test interface to demonstrate QoS-based bandwidth guarantees.

Explore the advanced options in Sophos UTM firewall, including encapsulated package classification, traffic selector handling for bandwidth pool enrollment, and AWS integration for AVS.

Explore how interface routing works in a Sophos UTM firewall by forcing traffic to a chosen interface, test connectivity with a web server, and configure MPLS or dedicated interfaces.

Learn how a black hole route blocks all incoming and outgoing traffic to a specific IP behind the Sophos UTM Firewall, and test the effects by blocking your own IP.

Explore policy routes in Sophos UTM firewall, learn to specify service selectors and ports, and control traffic by redirecting or blocking to other interfaces and devices.

Explore how the Sophos UTM DHCP server uses IP pools and static MAC mappings, and configure lease times, DNS, and a default gateway.

Learn how to configure DHCP on a Sophos UTM firewall, manage interface IPs, DNS servers, and static mappings, and diagnose duplicate IP address conflicts that crash interfaces.

Enable the ntp server status, designate networks that can use the UTM as an ntp server, and test latency to identify nearby peers.

Configure Sophos UTM firewall rules to permit a host to access the internet, enable log traffic, and apply source NAT.

Configure firewall rules to permit http and https traffic; logs show dropped http packets before rule creation, while some traffic bypasses the firewall via same LAN layer 2 paths.

Learn why internal LAN traffic bypasses the firewall when on the same network, and implement separate interfaces with distinct addresses to enforce rules.

Learn how to create lan network rules with Sophos utm firewall, test across multiple interfaces, manage layer 2 traffic, read logs, and troubleshoot blocked connections using emulators.

Master configuring Sophos UTM firewall rules, mapping local networks to public IPs, selecting sources and destinations, and choosing drop, reject, or allow with logging and time-based controls.

Enable country blocking to block traffic from or to chosen countries or continents, learn through Lithuania and United States examples, see its priority over firewall rules, and review blocking logs.

Block traffic to specific countries using country blocking exceptions, and add a VPN user's IP address to the exception list so that traffic from that IP bypasses country blocking.

Explore icmp settings on the Sophos UTM firewall, including disabling ping and traceroute on gateway interfaces and testing reachability to show how hosts ping each other.

Explore the advanced section of the Sophos UTM firewall, adjust connection tracking and protocol handling, weigh spoof protection against CPU use, and consider enabling an external log server.