if i take backup of sophos firewall then how can i view it for audit point of view??? same like we do with Cisco config. and Fortigate confg. we can view the config.
You can do an unencrypted XML export which contains all configuration items structured like internal variables.
This makes it easy to track config changes with just comparing.
However to do a real security audit you have to follow and understand the security logic of the system (i.e. firewall entries), that's not what this export was made for.
Quote