Simulado Sophos

Prévia do material em texto

You have received a new hardware Sophos Firewall. What is the 
default IP address and ort that is used to access the device? 
 
A resposta é 172.16.16.16.•4444 
 
You are preparing a Sophos Firewall for installation on a remote 
site. The order for the license has not yet been processed. Which 
device registration option do you select in the Initial Setup wizard? 
 
I do not want to register Now 
 
Lateral movement protection is made possible by which of the 
followin ? 
 
Synchronized security 
What cloud platforms is Sophos Firewall supported on? 
 
Amazon Web Services(AWS), Microsoft Azure, Nutanix 
 
In the example shown London Servers is a.. 
 
IP host group 
 
How many radios do the wireless XGS series models have? 
 
1 
 
 
 
 
TRUE or FALSE: The number of ports can be expanded using 
additional modules. 
 
True 
 
Which 2 of these are features of the Xstream architecture? 
 
TLS 1.3 Decryption, Deep packet inspection 
 
Which feature of the Sophos Firewall helps prevent a computer 
infected by a trojan from transmitting personal information out of 
their network? 
 
Advanced threat protection ATP 
 
 
 
Which feature of the Sophos Firewall identifies unknown applications? 
 
Synchronized App Control 
 
Service objects can be created for which of the following? 
 
All of These 
 
In which of these zones is an interface configured with a gateway? 
 
WAN 
 
 
How many gateways can you include in an SD-WAN profile? 
 
8 
 
Place the route types in the correct default order of precedence 
 
Static Routes- Highest precedence, SD-WAN Routes, VPN Routes, Default Route- Lowest 
precedence 
 
How many servers does Sophos Firewall support for static DNS? 
 
3 
 
 
 
You have an existing DHCP server. What configuration allows 
Sophos Firewall to forward lease requests to this? 
 
Relay 
 
 
Which of these are defined as 'Admin services' in Device access? 
 
HTTPS / SSH 
 
You want a certificate to be signed by a third-party company. Which o tion should ou choose? 
 
GENERATE CSR 
 
What are the different types of traffic shaping policy you can create? 
 
USERS, WEB CATEGORIES, RULES, APPLICATIONS 
 
What do you need to configure before you can start using traffic shaping? 
 
TOTAL WAN BANDWIDTH 
 
TRUE or FALSE: NAT rules are processed in order from top to bottom. 
 
TRUE 
 
Match the firewall icon to the description. 
 
TRUE or FALSE: All firewall rules are evaluated, and the best match is used. 
 
FALSE 
 
Which 3 of the following are matching criteria Sophos Firewall uses to automatically 
assign firewall rules to groups? 
 
SOURCE ZONE, DESTINATION ZONE, RULE TYPE 
 
Complete the sentence below: 
When creating a firewall rule for DNAT, you select the _______ destination zone. 
 
POST-NAT 
 
 
Where would you exclude a website from TLS inspection? 
 
WEB> URL GROUPS 
 
Where would you configure which cipher algorithms to block? 
 
DECRYPTION PROFILE 
 
Match the feature to its description. 
 
SPOOF PROTECTION> Drops traffic that is trying to pretend to corne from a different MAC or IP 
address to by-pass protection. 
DOS PROTECTION> Drops traffic that is maliciously trying to prevent legitimate traffic from being 
able to access services. 
IPS POLICIES> Protects against exploits and malformed traffic. 
 
What 2 things do you need to do to use IPS policies? 
 
Select an IPS policy in firewall rule, Enable IPS using the switch 
 
Which 2 actions can ATP be configured to perform when it detects traffic to a command-and-
control server? 
 
LOG, LOG AND DROP 
 
You want to configure Security Heartbeat, what is the first thing 
you need to do? 
 
REGISTER YOUR SOPHOS FIREWALL WITH YOUR SOPHOS CENTRAL ACCOUNT 
 
 
What information does Sophos Firewall share about devices with a 
RED health status to revent lateral movement Protection? 
 
MAC ADDRESS 
 
What 2 ways can you register Sophos Firewall with Sophos 
Central? 
 
Username and password, OTP 
 
Which 2 VPN protocols does Sophos Firewall support for site-to- site VPNs? 
 
SSL, IPsec 
 
 
TRUE or FALSE: RED connections are always automatically added to the VPN zone. 
 
FALSE 
 
What is the default SSL VPN port? 
 
8443 
 
Where do you select the remote networks? 
 
SERVER CONFIGURATION 
 
What types of authentication can be used for IPsec site-to-site VPNs? 
 
DIGITAL CERTIFICATE, RSA KEY, PRE-SHARED KEY 
 
 
In which type of IPsec VPN do you need to define the local and remote networks? 
 
POLICY-BASED 
 
Which 2 ports do Remote Ethernet Devices use? 
 
TCP 3400, UDP 3410 
 
Match the RED mode to its description. 
 
STANDARD/SPLIT> Sophos Firewall is the DHCP server and default gateway for the remote 
network. Only defined traffic is sent through the RED. 
TRANSPARENT/SPLIT> Sophos Firewall gets its IP address from a DHCP server on the remote 
network. 
STANDARD/UNIFIED> All traffic generated on the remote network is sent through the RED to 
Sophos Firewall 
 
 
Which type of server is used for wireless authentication? 
 
RADIUS 
 
When are users who are not administrators able to login to the WebAdmin? 
 
Users who are not administrators are not able to login to the WebAdmin 
 
If an authentication server is added to Sophos Firewall this will become the default 
authentication method. 
 
FALSE 
 
 
 
 
A user is a member of multiple Active Directory groups. What will happen when they 
first login to Sophos Firewall? 
 
They will be added to the first group they match on Sophos Firewall 
 
When configuring Azure AD SSO for administrator; in the Sophos Firewall web console, Where 
can you find the redirect URL that needs to be added to the app registration in Azure AD? 
 
AUTHENTICATION SERVERS 
 
TRUE or FALSE: Azure AD SSO for the web console on Sophos Firewall requires a paid tier of Azure 
AD. 
 
FALSE 
Which 2 of the following are requirements for the secret When creating a token manually? 
 
HEX, MINIMUM OF 32 CHARACTERS 
 
A user has lost their phone with the Authenticator App. What is the most secure way to allow 
authentication? 
 
Manually create single use codes and provide the user with these 
 
What are the 2 ways in which web filtering can be deployed on Sophos Firewall? 
 
TRANSPARENT, EXPLICIT 
 
 
 
 
If you are using the Sophos Firewall as an explicit proxy, which web filtering option will be used? 
 
WEB PROXY 
 
Which of these options IS supported when using the DPI Engine? 
 
CONFIGURE QUOTA TIME 
 
Web protection exceptions apply to all web protection policies no matter when they are applied 
in the Sophos Firewall. 
 
TRUE 
 
 
 
 
Which method would you use to limit bandwidth for a single website? 
 
TRAFFIC SHAPING POLICIES 
 
TRUE or FALSE: Application filter rules are applied to users and groups. 
 
FALSE 
 
If a new application is added that matches an existing application control filter rule, which of the 
following statements is TRUE? 
 
The application is automatically included in the existing rule 
 
 
 
What can traffic shaping policies be associated with? 
 
USERS, WEB CATEGORIES, APPLICATIONS, FIREWALL RULES 
 
 
It is possible to apply a default traffic shaping policy to all traffic 
 
TRUE 
 
What is the default port for SSL VPNs? 
 
8443 
 
 
 
 
 
 
Where do you download the IPsec VPN configuration? 
 
WEB ADMIN 
 
Which 5 protocols does clientless SSL VPN access support? 
 
SSH, VNC, FTP, RDP, SMB 
 
 
What IP address do access points send discovery packets to? 
 
1.2.3.4 
 
What are the different types of hotspot you can create on Sophos Firewall? 
 
PASSWORD OF THE DAY, VOUCHER, TERMS OF ACCEPTANCE 
TRUE or FALSE: You can only create hotspots on wireless interfaces. 
 
FALSE 
 
You have created a report that displays data that you wish to check daily. How canyou make this 
data easily available in the WebAdmin interface? 
 
CREATE A BOOKMARK FOR THE REPORT 
 
What is the maximum number of external syslog servers you can configure on Sophos Firewall?
 
5 
 
 
Sophos Firewall can send notifications using which of the following protocols? 
 
SMTP, SNMP 
 
Which of the following statements are TRUE about SD-WAN 
connection groups. 
 
Requires 2 or more firewalls, Can limit access to authenticated users, Can include Security 
Heartbeat configuration, Can automatically create firewall rules. 
 
How many backups can you store on Sophos Central? 
 
5 
 
How many days of data is available in Sophos Central using the free Central Firewall Reporting? 
Enter the answer in digits 
 
7 
How much storage is included with each Central Firewall Reporting Advanced license in GB? 
Enter the answer in digits 
 
100 
 
Enter the URL address for Sophos' support website 
 
SUPPORT 
 
What does the SophosLabs page provide information on? 
 
Real-time data and threat reports 
 
TRUE or FALSE. You can install Sophos Firewall on existing Intel compatible hardware. 
TRUE 
 
TRUE or FALSE. Sophos Firewall is supported on any public cloud. 
(FALSE) 
 
Which 2 features are required if you want to make use of lateral movement protection? 
(SERVER OR ENDPOINT PROTECTION, INTERCEPT X) 
 
Which 4 of the following are tested and supported virtualization platforms for Sophos 
Firewall? 
 
 
 
When configuring SD-WAN profiles for load balancing, what two methods can be used? 
 
 
 
What are the two routing strategies that can be used in SD-WAN profiles? 
 
 
 
 
 
 
Which zone is the most secure by default and is for your internal networks 
 
 
 
Which of the following DoS and spoof protection modes will drop packets if the IP and 
MAC do not match with any entry in the IP-MAC trusted list? 
 
 
You have configured destination-based Security Heartbeat in the firewall rule shown here. 
 
Which zone does not support the Security Heartbeat? 
(WAN) 
 
 
 
 
 TRUE or FALSE. The option to create loopback and reflexive NAT rules is only available when 
adding a NEW NAT rule, not when editing an existing NAT rule. 
(TRUE) 
 
 
 
Which 3 of the following are matching criteria Sophos Firewall uses to automatically assign firewall 
rules to groups? 
(DESTINATION ZONES, DESTINATION NETWORK, SERVICE) 
 
 
 
Which firewall icon shown represents a disabled user rule? 
 
C 
 
 
You are working with sensitive corporate data and want to ensure that traffic from remote 
locations is monitored and blocked from leaving the corporate LAN. What would be the most 
appropriate security mode to deploy the RED devices in? 
 
 
 
You are in the process of deploying multiple RED devices. Due to bandwidth issues at the head 
office, which 2 modes of deployment could be used so that only necessary traffic is routed back to 
the head office? 
(Standard/Split, Transparent/Split) 
 
 
Which 3 types of authentication can be used for IPsec site-to-site VPNs? 
 
 
 
 
 
 
 
 
Which 2 VPN protocols does Sophos Firewall support for site-to-site VPNs? 
 
 
 
 
TRUE or FALSE. The Sophos Chromebook User ID app is deployed to Chromebooks from the 
Sophos Firewall. 
(FALSE) 
 
 
 
Which type of server is used for wireless authentication? 
 
 
 
 
 
What port number is used by Captive portal? 
 
 
 
 
 
 
 
 
 
 
You need to create a user account to authenticate a VoIP system that needs access to the 
Internet. The system does not have the ability to authenticate with your directory service. What 
type of user would you create to accomplish this? 
 
 
 
 
When using STAS, where in the network can the agent software be installed and configured? 
 
 
 
 
 
You have a large number of mobile and guest devices that you want to apply web filtering to, You 
do not want to spend time applying additional configuration to these devices. Which proxy mode 
allows you to apply web filtering without additional configuration needed for mobile and guest 
devices? 
(TRANSPARENT) 
 
 
 
 Web policy rules apply to which 2 of the following? 
 
 
 
 
When testing a new web policy, you are still able to access pages that should be blocked. What is 
the most likely reason for this? 
(Ports 80 and 443 were not added to the transparent filter list) 
 
 
 
 Which method would you use to limit bandwidth for a single website? 
(Traffic shaping) 
 
 
You have been asked to create a surfing quota for guests that allows access to the Internet for 20 
hours in a week and then terminates the connection with no recurrence. 
 
 
TRUE or FALSE. It is possible to apply a default application traffic shaping policy to all traffic. 
 
 
 
 
 
 If a new application is added that matches an existing application control filter rule, which of the 
following statements is TRUE? 
 
 
 
 
 
 
 
Which 4 of the following can traffic shaping policies be associated with? 
 
 
 
 You have enabled active-active high availability on your Sophos Firewall and notice that 
synchronized application control is not working across your network. Why would this happen? 
(Synchronized Application Control is not supported in this deployment scenario) 
 
 
 TRUE or FALSE: The SSL VPN and User Portal can share the same port? 
 
 
 
 
What is the Clientless Access Portal used for? (Para acessar dados da caixa sem necessidade de vpn) 
(Clientless SSL VPN connections can be found in the user portal and can be used to 
provide access to internal resources without the need for a VPN client to be 
installed. They are in the VPN section and will appear below any IPsec and SSL 
VPNs that have been enabled for the user. This form of remote access is most 
useful for providing IT staff with access to internal systems without exposing them 
directly to the Internet. For example, providing access to TELNET, SSH, and RDP, so 
that IT staff can securely administer key pieces of infrastructure remotely. Other 
examples for using this include providing special access for a user to a specific 
machine with RDP, often for accounting or finance, or access to timesheets, client 
tracking, web-based ticking systems and so forth.) 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Which 2 protocols does the Sophos Connect IPsec VPN client support? 
IPSEC AND SSL 
(Clientless SSL VPN provides access to internal resources through bookmarks in the 
VPN section of the user portal. Bookmarks can be created for: RDP, TELNET, SSH, 
FTP, SMB, and VNC. Each bookmark is a single session for that resource.) 
 
 
10a FW5005 19.0v1 Getting Started with Remote Access VPNs on Sophos 
Firewall.pdf 
 
 
 
Which 2 operating systems is the Sophos Connect IPsec VPN client available for? 
(Sophos Firewall’s SSL remote access VPN is based on OpenVPN, a full-
featured VPN solution. The encrypted tunnels between remote devices and 
the Sophos Firewall use both SSL certificates and username and password 
to authenticate the connection, and you can also enable multi-factor 
authentication for additional security. The IPsec remote access VPN can be 
authenticated using a pre-shared key or digital certificate, with users then 
authenticating with their username and password, and optionally multi-
factor authentication. As a standard IPsec VPN, it is compatible with third-
party VPN clients. For both the SSL and IPsec remote access VPNs we 
provide the Sophos Connect VPN client for Windows and Mac OS X devices. 
For SSL remote access VPNs, we still support the legacy Sophos SSL VPN 
Client; however, we recommend upgrading to Sophos Connect when 
possible) 
Com base nas informações do texto, o Sophos Connect VPN client está 
disponível para dispositivos Windows e macOS. Este cliente é oferecido 
tanto para o VPN SSL quanto para o VPN IPsec. Isso significa que os 
usuários de ambas as plataformas podem utilizar o Sophos Connect para 
estabelecer conexões VPN seguras com o Sophos Firewall.What are the 3 different types of hotspot you can create on Sophos Firewall? 
 
 
file:///C:/Users/rober/Downloads/Sophos/10a%20FW5005%2019.0v1%20Getting%20Started%20with%20Remote%20Access%20VPNs%20on%20Sophos%20Firewall.pdf
file:///C:/Users/rober/Downloads/Sophos/10a%20FW5005%2019.0v1%20Getting%20Started%20with%20Remote%20Access%20VPNs%20on%20Sophos%20Firewall.pdf
Which of the following best describes the Bridge to VLAN security mode for wireless networks? 
 
 
 
 
You are checking the application risk meter which is reporting a risk score of 4.2. Which of the 
following statements are true in this circumstance? 
 
(There are users performing risky actions on the network) 
 
 
Sophos Firewall can send notifications using which 2 of the following protocols? 
 
 
 
 
 Which 4 of the following statements are TRUE about SD-WAN connection groups in Sophos 
Central? 
 
 
 
 
TRUE or FALSE. You must have an additional Sophos Central license to use Central Firewall 
Management. 
(FALSE) 
 
 
 
You have received a new hardware Sophos Firewall and are preparing to connect to it for the first 
time. What is the default IP address and port that is used to access the device? 
o endereço será 172.16.16.16 e o WebAdmin em um Sophos Firewall é executado na porta 
4444. 
 
 
You have created a DNAT rule for server access and are now creating a firewall rule to allow the 
traffic. What destination host or network do you use in the firewall rule? 
Let’s have a look at using the server access assistant to create a DNAT and firewall rule for 
this scenario. Start by selecting the internal server or enter the IP address and an IP host 
object will be created for it. Choose the interface that users will connect to when accessing 
the internal server. Alternatively, you can enter the IP address that users will be connecting 
to, and an IP host object will be created for it. 
a parte do texto fornecido pode ajudar a responder à pergunta. A parte que 
menciona a criação de uma regra DNAT e de firewall usando o assistente de 
acesso ao servidor sugere que você pode selecionar o servidor interno ou inserir 
o endereço IP, o que resultará na criação de um objeto de host IP. Isso implica 
que, ao criar a regra de firewall, você usaria o objeto de host IP criado, que 
corresponde ao endereço IP do servidor interno, como o destino na regra de 
firewall. 
Portanto, essa parte do texto sugere implicitamente que você usaria o endereço 
IP do servidor interno como o host ou rede de destino na regra de firewall 
associada à regra DNAT. 
4a FW2005 19.0v2 Getting Started with Firewall and NAT Rules on Sophos 
Firewall.pdf 
 
 
 
 
 
 
 
 
file:///C:/Users/rober/Downloads/Sophos/4a%20FW2005%2019.0v2%20Getting%20Started%20with%20Firewall%20and%20NAT%20Rules%20on%20Sophos%20Firewall.pdf
file:///C:/Users/rober/Downloads/Sophos/4a%20FW2005%2019.0v2%20Getting%20Started%20with%20Firewall%20and%20NAT%20Rules%20on%20Sophos%20Firewall.pdf
What is required when creating an IPsec VPN policy? 
(With policy-based VPNs, you define the local and remote networks as part of the VPN connection and 
routes will be created for these networks Only) 
1. Com VPNs baseadas em política, você define as redes locais e remotas como parte 
da conexão VPN e rotas serão criadas apenas para essas redes. Ao criar uma política 
de VPN IPsec baseada em política, você precisa especificar as redes locais e remotas 
que estarão incluídas na conexão VPN. 
Portanto, o texto fornece informações relevantes sobre os requisitos ao criar uma política de 
VPN IPsec, especialmente no que diz respeito aos tipos de VPN suportados e à configuração de 
rotas e redes locais e remotas. 
 
 
6c FW3020 19.0v1 Getting Started with IPsec Site-to-Site VPNs on Sophos 
Firewall.pdf 
 
 
Which RED mode matches this description? All traffic generated on the remote network is sent 
through the RED to Sophos Firewall. 
In Standard/Unified mode the remote network is managed by the Sophos Firewall, 
which serves as the DHCP server and default gateway for all clients connecting 
through the RED. All traffic generated on the remote network is sent through the 
RED to Sophos Firewall. 
6d FW3035 19.0v1 Getting Started with Remote Ethernet Devices on Sophos 
Firewall.pdf 
 
 
Which 2 methods can be used to generate one-time passwords for authenticating with the Sophos 
Firewall? 
Multi-factor authentication is not enabled by default and must be turned on. This 
can be done for either all users, or a selected set of users and groups. 
You can choose to have the Sophos Firewall automatically token secret (key) when 
users try to authenticate, and they don't have one. Sophos Firewall generated 
secrets can be used with software tokens. Hardware tokens need to be added 
manually. 
Sophos Firewall can use multi-factor authentication to improve the security of the 
WebAdmin, User Portal (including the Clientless VPN Portal), and SSL and IPsec 
remote access VPNs. 
You can configure the global token settings. For example, if you are using a 
hardware token with a 
60 second timestep you can configure this here. You can also configure the 
passcode offset Steps which we discussed in the previous slide. 
o texto fornece informações relevantes sobre os métodos que podem ser usados para gerar 
senhas de uso único (OTP - One-Time Password) para autenticação com o Sophos Firewall. Aqui 
estão as duas opções mencionadas: 
file:///C:/Users/rober/Downloads/Sophos/6c%20FW3020%2019.0v1%20Getting%20Started%20with%20IPsec%20Site-to-Site%20VPNs%20on%20Sophos%20Firewall.pdf
file:///C:/Users/rober/Downloads/Sophos/6c%20FW3020%2019.0v1%20Getting%20Started%20with%20IPsec%20Site-to-Site%20VPNs%20on%20Sophos%20Firewall.pdf
file:///C:/Users/rober/Downloads/Sophos/6d%20FW3035%2019.0v1%20Getting%20Started%20with%20Remote%20Ethernet%20Devices%20on%20Sophos%20Firewall.pdf
file:///C:/Users/rober/Downloads/Sophos/6d%20FW3035%2019.0v1%20Getting%20Started%20with%20Remote%20Ethernet%20Devices%20on%20Sophos%20Firewall.pdf
1. Sophos Firewall pode automaticamente gerar um segredo (chave) do token 
quando os usuários tentam autenticar e não possuem um. Esses segredos gerados 
pelo Sophos Firewall podem ser usados com tokens de software. 
2. Tokens de hardware precisam ser adicionados manualmente. Isso implica que, além 
da geração automática de segredos pelo Sophos Firewall para uso com tokens de 
software, os tokens de hardware podem ser utilizados, mas precisam ser adicionados 
manualmente. 
Portanto, com base no texto fornecido, os dois métodos que podem ser usados para gerar 
senhas de uso único (OTP) para autenticação com o Sophos Firewall são: a geração automática 
de segredos pelo Sophos Firewall para uso com tokens de software e a adição manual de tokens 
de hardware. 
 
7e FW3545 19.0v1 Enabling Multifactor Authentication on Sophos Firewall.pdf 
 
 
 
Which 3 of the following forms of access can be secured using one-time passwords? 
7e FW3545 19.0v1 Enabling Multifactor Authentication on Sophos Firewall.pdf 
 
 
Which method allows a web quota to be based on category and time? 
Quotas and Traffic Shaping???????VERIFICAR POIS NO EXAME BAIXADO RESPONDEU E ERROU 
 
8c FW4030 19.0v1 Sophos Firewall Web Protection Quotas and Traffic Shaping.pdf 
 
file:///C:/Users/rober/Downloads/Sophos/7e%20FW3545%2019.0v1%20Enabling%20Multifactor%20Authentication%20on%20Sophos%20Firewall.pdf
file:///C:/Users/rober/Downloads/Sophos/7e%20FW3545%2019.0v1%20Enabling%20Multifactor%20Authentication%20on%20Sophos%20Firewall.pdf
file:///C:/Users/rober/Downloads/Sophos/8c%20FW4030%2019.0v1%20Sophos%20Firewall%20Web%20Protection%20Quotas%20and%20Traffic%20Shaping.pdf
TRUE or FALSE. Applications which have been discovered via synchronized application control 
can be added as a traffic selector under SD WAN routing. 
 
9a FW4505 19.0v1 Getting Started with Application Control on Sophos Firewall.pdf 
 
 
Which 3 of the following features are provided by Cloud Applications on theSophos Firewall? 
9a FW4505 19.0v1 Getting Started with Application Control on Sophos Firewall.pdf 
 
 
 
Sophos Firewall hosts the SSL VPN on which port by default? 
8443 
By default, Sophos Firewall hosts the SSL VPN on port 8443, however this can be 
changed to a different available port in the SSL VPN settings. Note that the SSL VPN 
can share port 443 with other services on Sophos Firewall, such as the user portal 
and web application firewall rules. 
o texto fornece uma resposta relevante à pergunta. Ele afirma que por 
padrão, o Sophos Firewall hospeda o SSL VPN na porta 8443. No entanto, 
ressalta que essa porta pode ser alterada para uma porta disponível 
diferente nas configurações do SSL VPN. Isso confirma que, por padrão, o 
SSL VPN do Sophos Firewall é hospedado na porta 8443. 
10a FW5005 19.0v1 Getting Started with Remote Access VPNs on Sophos 
Firewall.pdf 
 
 
Which of the following best describes the Bridge to AP LAN security mode for wireless networks? 
Here you can see the main configuration for a wireless network. The main 
elements are: • The SSID, which is the visible network name that devices will 
connect to • The security mode, we recommend using WPA2 either with a 
passphrase or using a RADIUS server to authenticate users by selecting Enterprise 
• How to route client traffic, either to the same network as the access point, a 
specific VLAN or directly back to the Sophos Firewall using a separate zone 
Separate zone configuration is used to create a wireless interface on the Sophos 
Firewall. The traffic for the wireless network is then routed back to that interface 
on the Sophos Firewall using a VXLAN. 
 
 
11b FW5510 19.0v1 Deploying Wireless Protection on Sophos Firewall.pdf 
 
 
 
 
 
 
 
 
file:///C:/Users/rober/Downloads/Sophos/9a%20FW4505%2019.0v1%20Getting%20Started%20with%20Application%20Control%20on%20Sophos%20Firewall.pdf
file:///C:/Users/rober/Downloads/Sophos/9a%20FW4505%2019.0v1%20Getting%20Started%20with%20Application%20Control%20on%20Sophos%20Firewall.pdf
file:///C:/Users/rober/Downloads/Sophos/10a%20FW5005%2019.0v1%20Getting%20Started%20with%20Remote%20Access%20VPNs%20on%20Sophos%20Firewall.pdf
file:///C:/Users/rober/Downloads/Sophos/10a%20FW5005%2019.0v1%20Getting%20Started%20with%20Remote%20Access%20VPNs%20on%20Sophos%20Firewall.pdf
file:///C:/Users/rober/Downloads/Sophos/11b%20FW5510%2019.0v1%20Deploying%20Wireless%20Protection%20on%20Sophos%20Firewall.pdf
What is the maximum number of external syslog servers you can configure on Sophos Firewall? 
(You can select which events Sophos Firewall will log, and optionally choose to 
suppress identical firewall events. Sophos Firewall supports up to five external 
syslog servers to ties into your existing reporting systems) 
12b FW8015 19.0v1 Managing Logs and Notifications on Sophos Firewall.pdf 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
Sophos Firewall Overview OK 
Sophos Firewall Deployment OK 
Getting Started with Sophos Firewall OK 
Base Firewall OK 
Network Protection OK 
Site-to-Site Connections OK 
Authentication OK 
Web Protection OK 
Application Control OK 
Remote Access OK 
Wireless Protection OK 
Logging and Reporting OK 
Central Firewall Management OK 
 
 
 
file:///C:/Users/rober/Downloads/Sophos/12b%20FW8015%2019.0v1%20Managing%20Logs%20and%20Notifications%20on%20Sophos%20Firewall.pdf