Sophos Firewall Engineer Training

• This Module will show you how to configure Sophos Firewall.
• The Sophos Firewall VMWare file will be provided.
• Duration of training: 15 Days (From Monday – Friday: 2 Hours daily)

• What is a Network? Types of Networks.
• LAN
• DMZ
• WAN
• What are the threats?
• DOS
• DDOS
• How to prevent threats in the network?
• What is the  Intrusion Prevention System (IPS)?
• What is Unified Threat Management (UTM)?
• What is Advanced Threat Protection (ATP)?
• What is the Firewall?
• Types of firewalls
• Stateless Firewall
• Stateful Firewall
• Prerequisites of Sophos Firewall.
• Sophos Firewall GUI demonstration.
• Lab Setup
• Deploy Sophos Firewall in VMWare Workstation.
• Basic Firewall configuration.
• Network Interface Configuration.
• Allowing firewall accessibility
• Custom Zone configuration.
• Firewall Rule configuration for LAN to WAN traffic.
• NATting on Sophos firewall.
• Web Protection Module
• Default Web Protection Policy review
• Web Protection Global Settings
• Configuring the first Web Protection Policy to restrict the WAN Traffic from accessing malicious or unwanted websites.
• Blocking social media sites such as facebook.com, Instagram, etc.
• How to block all social media sites except specific site(s).
• Restriction based on user activity.
• Deploy custom Web Category.
• Block Web Traffic based on file extension.
• Surfing Quotas
• Web Exception or bypassing the web traffic.
• Application Protection Module.
• Default Application Protection Policies review.
• Cloud Applications
• Application Lists
• Traffic shaping for specific applications.
• Configuring Application Object.
• Intrusion Prevention on firewall.
• DoS attacks.
• Reviewing default IPS Policies.
• Deploying custom IPS signature.
• DoS & spoof protection.
• Email Protection.
• Reviewing default email policies.
• Email Protection Module tour.
• Web Server Protection (WAF: Web Application Firewall) Module.
• Web Servers.
• Protection Policy for Web Server
• Authentication Policy for Web Server
• ATP (Advanced Threat Protection) Module.
• MDR Threat Feeds
• Sophos X-Ops Threat Feeds.
• VPN Module.
• Site-Site VPN Tunnels
• Remote Access VPN
• Routing
• Static Route
• SDWAN Routing & Policy
• Dynamic Routing.
• Authentication Module
• Types of Users
• Local Users
• AD Users
• Types of User Groups
• MFA
• Web Authentication
• Guest Users
• SSO (Single Sign On)
• STAS (Sophos Transparent Authentication Suite)
• QoS Profiles
• Decryption Profile
• Admin Profile
• Adding IP Host(s) and IP Host Group
• Adding MAC Host
• Adding FQDN Host and FQDN Host Group
• Country Group
• Allowing services or port on firewall
• Service or port group
• Licensing
• Backup download and upload
• Import configuration
• Update the firmware
• Pattern Update
• Certificate, Certificate Authorities, and Certificate Revocation
• Reports
• Application & Web Based Report
• Network & Threats Based Report
• VPN Reports
• Email Report
• Compliance Report
• Custom Report