This course provides an in-depth study of Sophos Firewall, designed for experienced technical professionals who will be planning, installing, configuring, and supporting deployments in production environments

To complete this course, trainees must take and pass an online assessment. Trainees will have 3 hours to complete the assessment; the pass mark is 80% and trainees will have 3 attempts to pass

On completion of this course, trainees will be able to:

• Deploy Sophos Firewall in complex network environments
• Explain how Sophos Firewall processes traffic and use this information to inform the configuration
• Configure advanced networking and protection features
• Protect web applications using the web server protection

Experienced technical professionals

Prior to taking this training, trainees should:

• Have completed and passed the Sophos Firewall
• Certified Engineer course
• Have completed any subsequent delta modules up to version 19.5
• We recommend that trainees have the following knowledge and experience:

• Windows networking and the ability to troubleshoot issues
• A good understanding of IT security
• Configuring network security devices
• Configuring and administering Linux/UNIX systems
• If you are uncertain whether you meet the necessary prerequisites, please email us at globaltraining@sophos.com and we will be happy to help.

1. Sophos Firewall Deployment

Considerations for Deploying Sophos Firewall in common scenarios

Deploying Sophos Firewall in Discover Mode

Lab Tasks

Register for a Sophos Central Evaluation

Activate the Sophos Firewall

2. Getting Started with Sophos Firewall

Advanced Interface Configuration on Sophos Firewall

Advanced Routing and SD-WAN Configuration on Sophos Firewall

Dynamic Routing on Sophos Firewall

Considerations for Configuring Device Access on Sophos Firewall

Lab Tasks

Multiple WAN Link

SD WAN Profiles

Create a Policy-Based Route for an MPLS Scenario

Configuring Device Access

Bridge Interfaces

3. Base Firewall

Advanced Firewall Rule Management on Sophos Firewall

Advanced NAT Configuration on Sophos Firewall

Network Traffic Shaping on Sophos Firewall

Lab Tasks

Load-Balanced NAT

Local NAT Policy

Install Sophos Central

4. Network Protection

Advanced IPS Configuration

Advanced DoS Protection

Managing and Deploying Security Heartbeat on Sophos Firewall

Lab Tasks

Advanced DoS Policy

Source-based Security Heartbeat

Destination-Based Security Heartbeat

Missing Security Heartbeat

5. Site-to-Site Connections

Advanced IPsec Site-to-Site VPN Configuration on Sophos Firewall

Advanced Remote Ethernet Device (RED) Configuration on Sophos Firewall

Lab Tasks

Create an IPsec site-to-site VPN

Configure VPN networking NATing

Configure VPN failover

Enable RED on the Sophos Firewall

Create a RED tunnel between two Sophos firewalls

Configure routing for the RED tunnel

Configure route-based VPN

6. Authentication

Advanced STAS Configuration

Lab Tasks

Configure an Active Directory Authentication Server

Configure Single Sign-On using STAS

Authenticate users over a site-to-site VPN

7. Web Protection

Managing TLS Decryption for Web Protection on Sophos Firewall

Lab Tasks

Install the SSL CA Certificate

Configure TLS inspection rules

Configure a custom web policy for users

8. Remote Access

Advanced Sophos Remote Access VPN Configuration on Sophos Firewall

Lab Tasks

Sophos Connect

Auto provisioning

9. Wireless Protection

Troubleshooting Access Point Deployment

Wireless Authentication

Configuring Wireless Mesh Networks

Troubleshooting Wireless Performance

10. Web Server Protection

Overview of Web Server Protection on Sophos Firewall

Configuring Web Server Protection on Sophos Firewall

Troubleshooting Web Server Protection Policies

Configuring Web Server Authentication on Sophos Firewall

Lab Tasks

Web Application Firewall

Load balancing with Web Server Protection

Web server authentication and path-specific routing

11. High Availability

Overview of High Availability on Sophos Firewall

Configuring High Availability on Sophos Firewall

Managing High Availability on Sophos Firewall

Troubleshooting High Availability on Sophos Firewall

Lab Tasks

High Availability:

• Active-passive cluster
• Disable High Availability

Troubleshooting　:

Overview of Sophos Firewall on Public Cloud

Basic Sophos Firewall Deployment on Azure

Sophos Firewall Deployment Scenarios on Azure

Basic Sophos Firewall Deployment on AWS

Sophos Firewall Deployment Scenarios on AWS

Connecting to Amazon VPC on Sophos Firewall

Simulations :

Deploy Sophos Firewall on Azure

Deploy Sophos Firewall on AWS

How to find help from Sophos

Course Review

If you require any further information on this course, please contact Sophos at globaltraining@sophos.com