PLEASE READ Advisory: Kernel memory issue affecting multiple OS (aka F**CKWIT, KAISER, KPTI, Meltdown & Spectre) for the latest updates.
This article describes a step-by-step instructions on how to deploy Sophos Firewall in gateway mode.
Sophos Firewall can be deployed in two different modes:
As an example, we are going to consider a hypothetical network with a firewall serving as a gateway. We will replace the existing firewall with Sophos Firewall without having to change the existing network LAN schema.
A Gateway is a network point that acts as an entry point to another network or subnet to access resources. In the workplace, the gateway is the appliance that routes the traffic from a workstation to the outside network. In homes, the gateway is the Internet service provider that connects the user to the Internet. When deployed in Gateway mode, Sophos Firewall acts as a gateway for the network.
Gateway mode provides an ideal solution for workplaces that already have an existing firewall and plan to replace their existing firewall and add security through Sophos Firewall’s security features. All of these features, except Hardware bypass (LAN bypass), are supported in gateway mode.
The following sections are covered:
Applies to the following Sophos products and versions Sophos Firewall
Sophos Firewall is shipped with the following default configuration:
Connect port A of the device to the configuring computer’s Ethernet interface and set the computer's IP address to 172.16.16.2/24. Browse to https://172.16.16.16:4444 to access the graphical user interface (GUI) and follow the wizard.
If you've spotted an error or would like to provide feedback on this article, please use the section below to rate and comment on the article. This is invaluable to us to ensure that we continually strive to give our customers the best information possible.
Every comment submitted here is read (by a human) but we do not reply to specific technical questions. If you need technical support please post a question to our community. Alternatively for licensed products open a support ticket.