SOPHOS Professional Services for Network Products

Firewall Implementation and Configuration
Configuring firewalls is very complex and minor configuration mistakes can have a significant impact on your business.  The Sophos Professional Services team has the expertise you need to implement your Sophos Firewall quickly, accurately, and without disrupting your business operations. We recognize that your business is unique and so are your requirements and expectations for the Sophos Firewall.  Our goal is to help ensure that your Sophos Firewall is properly configured and integrated into your network correctly, the first time.
A scoping call is required for all firewall implementation and configuration services.
WAN/LAN Configuration Configuration of firewall rules .
 Configuration of NAT rules . Creation of network objects . Routing configuration . SDWAN Configuration .

Web Proxy Configuration
Web filtering policy enforcement . Single sign-on integration . VPN Configuration SSL/IPSec client VPN configuration . Site-to-site VPN configuration . Web Application Firewall (WAF) Antivirus scanning . SQL injection attacks . ●  XSS attacks Deep Packet Scanning .
 Determining when and where DPI should be used Deployment of certificates to endpoints . Assistance with identifying unconventional use of SSL .
 Comprehensive knowledge transfer of Sophos .
 SSL inspection configuration and design Determining the best method for .
 enablement in production environment
Synchronized Security
●  Registration of XG Firewall in Sophos Central Enablement of Synchronized Security .
 Email Protection ●    SPAM/Antivirus protection ●  SPX encryption .
 Sandstorm protection
Firewall migrations typically require anywhere from 4 to 24 hours (per firewall) depending on the complexity of the existing firewall configuration.  This does not include time for the cutover.
A scoping call is required for all firewall upgrade/migration services.
The following outlines our engagement process for Sophos-to-Sophos firewall migrations: . o We begin with a 1-hour planning call Our engineer will review the configuration of the current firewall and discuss the environment and requirements. The engineer will also discuss the options for completing the migration. o The engineer will also discuss options for cutover services and the amount of time required to complete the o migration. . Option 1 - Utilizing our internal migration tools. This would involve the engineer obtaining a backup of the configuration from the current device. o The engineer will then convert the configuration off-line. o On the next engagement. o . Import the new configuration to the new device on next engagement. . Manually complete any non-migratable features. The engineer will then review the configurations of the legacy and new firewall. o . Option 2 - Configuring the new device manually. This would require that both devices would be online and accessible. o The engineer will work with your team to manually convert the configuration. o The engineer will then review the configurations of the legacy and new firewall. o Product Code: PM4ZTCCAA
NDR Sensor/MDR Integrations
This service is delivered remotely for a duration of a half-day or for a total of up to 4 hours. The Professional Services engineer will assist with the deployment of the Sophos NDR Sensor and/or MDR Integration software and provide guidance and knowledge transfer. The following is an outline of the tasks and knowledge transfer that may be completed during a NDR Sensor/MDR Integration engagement.
Activities
. Implementation of up to 2 NDR Sensors or 2 MDR Integration Packs or 1 of each . Downloading of OVA for VMware (as needed) Installation of OVA Template for NDR Sensor or Log . Collector (as needed) Configuration of virtual host o . CPU . RAM . HDD . NICs . . . Best practice walk-through of Initial Setup Wizard Creation of LAN & WAN interfaces Registration of NDR Sensor Synchronization with Sophos Licensing o Servers . Configuration of NDR Sensor Enabling HTTPS WAN administration of NDR o Sensor Enabling Discover (TAP) Mode o Enabling Advanced Threat Protection o Registering with Sophos Central o Accepting NDR Sensor within Sophos o Central . Discussion on gathering network traffic Creation of SPAN port o Attaching SPAN port to virtual NIC o . Verifying NDR Sensor data collection Checking interfaces in GUI and CLI o Contacting Sophos NDR Team o . Walk through of Sophos Central NDR Reporting Q&A (as time permits) .
Implementation Process
.
 We begin with a 1-hour planning/kick-off meeting to review the technical requirements and pre-requisites to prepare for the implementation.