Configuring Sophos XG Firewall On Azure

In this article, I am going to show you how to configure Sophos XG Firewall on Microsoft Azure.

Introduction

Sophos Firewall is the next-generation firewall for all solutions. It’s one of the leading Firewalls in the industry. The Sophos XG Firewall is mainly designed for Azure-based deployment. With its help, you can protect your Azure workloads against multiple kinds of threats. There are several methods to configure Sophos XG Firewall on Microsoft Azure marketplace. In this demo, we will learn how to configure Sophos XG Firewall using the Azure portal.

Prerequisites for deploying Sophos XG Firewall

  1. Azure subscription
  2. Sophos Central account; we can create a free trial account from here.
  3. Sophos XG Firewall serial number; we can register BYOL (Bring Your Own License) for a free evaluation serial number here.

Let’s deploy Sophos XG Firewall in Azure.

Step 1

Log into your Azure portal here.

In the dashboard, choose to create a resource and type Sophos, then select " Sophos XG Firewall".

Configuring Sophos XG Firewall On Azure

Step 2

In the "Sophos XG Firewall", select "Create" button to start the deployment.

Configuring Sophos XG Firewall On Azure

Step 3

In the "Basic Configuration Setting" part, we can type the VM Name, Strong Password, and we have to select Subscription, Resource Group, and Location. After completing this part, click “OK”.

Configuring Sophos XG Firewall On Azure

Step 4

In the "License Type" part, there are two types of licenses. In this demo, we choose BYOL.

  • BYOL (Bring Your Own License) – we can get a one-month free license from here.
  • PAYG (Pay As You Go) – Not needed serial number for this option.

Configuring Sophos XG Firewall On Azure

Step 5

We can change the virtual machine type size as per our budget, so click the "Change Size" link. You can select the cost and VM size as per your requirement. In this demo, we selected “D2 Standard”.

After choosing the size, click “Select”.
 
Configuring Sophos XG Firewall On Azure

Step 6

In the “Virtual Network” part, we need to create the Virtual Network Name and the Address Space, and then click “OK".

Configuring Sophos XG Firewall On Azure

Step 7

In the “Subnet” part, we need to create a WAN subnet address with a prefix, and LAN subnet address with a prefix. After configuring the subnets, click OK to close the subnet part.

Configuring Sophos XG Firewall On Azure

Step 8

In the “Public IP Name” part, we can create a new Public IP. In this demo, our Public IP Name is “BattiPublicIP”. Click OK to close the PublicIP details.

Configuring Sophos XG Firewall On Azure

Step 9

In the “Domain Name” part, we need to type our domain name. In this demo, I typed “batti”, so our domain address is “batti.southcentralus.cloudapp.azure.com”.

Configuring Sophos XG Firewall On Azure

Step 10

In the “Storage Account” part, we need to create a new storage account using the “Create New” button. Enter the information and we can select the disk performance (Standard or Premium) and click OK to close the Storage part.

Configuring Sophos XG Firewall On Azure

Step 11

Yes, now we have successfully completed the configuration part. Click “Ok” to start the process.

Configuring Sophos XG Firewall On Azure

Step 12

Yes, our validation process has passed. Now, we are ready to buy the Sophos XG Firewall, so click “OK” to continue.

Configuring Sophos XG Firewall On Azure

Step 13

Click “Create” to deploy the firewall.

Configuring Sophos XG Firewall On Azure

Step 14

We have successfully deployed the Sophos XG Firewall. Choose "Pin to dashboard" to add the dashboard, or click "Go to resource group" to access your firewall.

Configuring Sophos XG Firewall On Azure

Step 15

Now, we can find our firewall. The “BattiFW” virtual machine is our firewall, so click “BattiFW”.

Configuring Sophos XG Firewall On Azure

Step 16

In BattiFW, we can find our Public IP address. We need to know this Public Address to access the firewall.

Configuring Sophos XG Firewall On Azure

Step 17

Open your browser and type https://23.101.185.218:4444 and press Enter.

Configuring Sophos XG Firewall On Azure

Step 18

It’s displaying "Not secure". Well, that doesn’t matter; just click “Advanced” to continue.

Configuring Sophos XG Firewall On Azure

Step 19

Click “Proceed to 23.101.185.218 (unsafe), to enter the firewall page.

Configuring Sophos XG Firewall On Azure

Step 20

Yes, now we got the Sophos XG Firewall Access. By default, our username is “Admin” and the password we created earlier on the "Basic Configuration" part. So, enter the login information and click "Login".

Configuring Sophos XG Firewall On Azure

Step 21

In the License Agreement part, click “I accept” to continue.

Configuring Sophos XG Firewall On Azure

Step 22

In the Serial Number part, I already got the Serial number from the free trial account. Paste the serial number and click “Continue”.

Configuring Sophos XG Firewall On Azure

Step 23

In this part, we need to create Sophos ID, so click “Create Sophos ID”.

Configuring Sophos XG Firewall On Azure

Step 24

It’ll prompt the new tab, so enter your information and click the “Register” button.

Configuring Sophos XG Firewall On Azure

Step 25

Now, a confirmation email is sent to our email account. So, click the confirmation link to continue the registration process.

Configuring Sophos XG Firewall On Azure

Step 26

Now, we need to sign into our account using our email and password. So, click the “Sign In” button.

Configuring Sophos XG Firewall On Azure

Step 27

In this part, we can find our Device Serial Number, so click “Continue” to start.

Configuring Sophos XG Firewall On Azure

Step 28

In this part, we need to enter our company information to complete the registration process. Click the “Continue” button to complete the registration.

Configuring Sophos XG Firewall On Azure

Step 29

Okay, now our device is ready to register. So, click “Confirmation Registration”.

Configuring Sophos XG Firewall On Azure

Step 30

Our device is registered now. Click “Initiate License Synchronization”.

Configuring Sophos XG Firewall On Azure

Step 31

Now, the basic setup is completed. Let's click “Continue”.

Configuring Sophos XG Firewall On Azure

Step 32

Now, we can access our “Sophos XG Firewall”.

Configuring Sophos XG Firewall On Azure

Summary

I hope you have understood how to install Sophos XG Firewall. If you have any questions, please leave a comment.