Sophos Firewall Export Configuration
Configure sophos xg firewall as dhcp server.
Sophos firewall export configuration. In the policies pane double click firewall and then double click the policy you want to import to or export from. Export the required configuration. Compress the updated xml file into a tar file. For more information about the default firewall settings see sophos knowledgebase article 57757.
You can perform the initial setup and configuration in sophos central and then export the configuration. Additionally to export the dependent configurations select include dependent entity. Connect xg firewall to parent proxy deployed on internet. Someone on site starts the new xg firewall device with the configuration loaded on a flash drive connecting the firewall to sophos central where you can then finish the configuration remotely.
Extract the xml file and make the required changes. Select the checkbox and select the configurations you want to export. On the welcome page of the firewall policy wizard click advanced firewall policy. This video outlines how to deploy an xg firewall from sophos central using zero touch deployment and then setup a red site to site tunnel between two xg firewall devices.
Especially for the firewall ruleset this would be a good feature because sometimes its necessary to see not the name of the objects but the basic ip dns. I hope sophos will introduce a feature for exporting a totally resolved configuration. Connect xg firewall to parent proxy deployed in the internal network. Therefore you should configure it to allow the applications you want to use and test it before installing it on all computers.
Format go to api help. Configure site to site ipsec vpn between xg and utm. In the firewall policy dialog box on the general tab under managing configuration click import or export. To import or export firewall configuration.
Deploy a remote xg firewall from sophos central and a setup site to site red tunnel. Establish ipsec connection between xg firewall and checkpoint. Select to export the entire configuration and select export. I think many users are missing the feature to see blank ip adresses networks in the configuration.
See check which policies a group uses.