Firewall role configuration

Hello Alpha ,

Thanks for reaching out to Sophos Community.

You may review the Device Access Profiles and their privileges on this doc guide: https://doc.sophos.com/nsg/sophos-firewall/20.0/help/en-us/webhelp/onlinehelp/AdministratorHelp/Profiles/DeviceAccess/index.html

Regards,

Hello Raphael Alganes 

Hello Alpha ,

Thanks for the additional information. I misunderstood your initial question, and I was under the impression that you were asking for role-based administration details. 

Nonetheless, for the given details, you would need a DNAT rule to the VM provided to Tisax Team, and in Sophos Firewall create a Firewall rule that allows the VM to access any subnet in the network. 

Regards,

Hello Alpha ,

Thanks for the additional information. I misunderstood your initial question, and I was under the impression that you were asking for role-based administration details. 

Nonetheless, for the given details, you would need a DNAT rule to the VM provided to Tisax Team, and in Sophos Firewall create a Firewall rule that allows the VM to access any subnet in the network. 

Regards,

Hello Raphael Alganes 

Thank you for your quick feedback

Hi Raphael Alganes 

Shall i create dnat rule on my firewall or tisax team create it on their firewall.

Hello,

You should create it in your Sophos Firewall. Make sure to only allow the specific IP from where they’re going to connect to the device.
Since opening a DNAT to RDP to a device isn’t recommended. 

Regards,