Guide for Partners Sophos Central Firewall Manager Document Date: June 2016 June 2016 Page 1 of 15
Contents Change log... 3 Overview... 4 Using Sophos Central Firewall Manager... 4 Step 1: Login to Sophos Central Partner Dashboard directly or via Sophos Partner Portal...4 Step 2: Start using Sophos Central Firewall Manager...6 Step 3: Manage Administrators...8 Step 4: Request Customer Authorization to manage their Firewalls...9 Step 5: Customer approves/rejects request to manage Firewall... 10 Step 6: Customer configures Central Management Settings on Firewall... 12 Step 7: View Firewall Approvals... 13 Step 8: Manage Firewalls from Sophos Central Firewall Manager... 14 Technical Assistance... 15 June 2016 Page 2 of 15
Change log Date Description 07-04-2016 Added section for Technical Assistance 12-04-2016 Added a note in Overview section 12-04-2016 Added a note in Step 4 Request Customer Authorization to manage their Firewalls 12-04-2016 Updated notes in Step 6 Customer configures Central Management Settings on Firewall 08-06-2016 Renamed product name to Sophos Central Firewall Manager from Sophos Cloud Firewall Manager. June 2016 Page 3 of 15
Overview Sophos Central Firewall Manager (previously known as Sophos Cloud Firewall Manager) enables Sophos Partners to manage their customer s firewalls on cloud, and is accessible via Sophos Central. It allows to configure and manage multiple Sophos Firewall devices from a single console. Sophos Central Firewall Manager is currently available only to Sophos Partners. As a Partner, with Sophos Central Firewall Manager you can: Manage multiple Sophos Firewalls from a single console Manage and support Customers anywhere, anytime Create new revenue stream by offering managed services to Customers Save on support cost, time and efforts Note: Sophos Central Firewall Manager allows to manage XG firewall devices sold by partners recorded in Sophos Systems. However Demo devices, Evaluation hardware devices and devices migrated with 30 day full guard trial cannot be managed. Using Sophos Central Firewall Manager Step 1: Login to Sophos Central Partner Dashboard directly or via Sophos Partner Portal Login to Sophos Central Partner Dashboard using the following link and your Partner Portal credentials: https://cloud.sophos.com/manage/partner Login using your SophosID and using multi-factor authentication by following on-screen steps. June 2016 Page 4 of 15
You can know more about multi-factor authentication on Sophos Central Partner Dashboard here. Or Login to Sophos Partner Portal (http://www.sophos.com/partners) and click on Manage Sophos Central to single sign on to Sophos Central Partner Dashboard. June 2016 Page 5 of 15
Step 2: Start using Sophos Central Firewall Manager Only the Primary Partner Contact can accept terms and conditions for Partner account to access Sophos Central Firewall Manager. Other administrators are able to only view information about Sophos Central Firewall Manager. Go to Sophos Central Firewalls in the left menu and click Firewall Approvals. Click on Send Request and then select I Accept on Terms and Conditions as shown below: Your request gets synchronized with Sophos Systems and gets approved in few minutes. Primary Partner contact (Primary administrator) receives an email confirming access to Sophos Central Firewall Manager. Click Check Status to proceed. June 2016 Page 6 of 15
Navigate to following sections to view and manage firewalls: Firewall Customers View list of Firewall Customers and list of Firewalls per Customer. Partners can track earliest license expiry of Customer Firewalls from Firewall Customers tab. Firewall Approvals View and manage Firewall authorizations for Central management. Manage Firewalls Launch Firewall Manager product to manage configuration and updates for managed Firewalls. June 2016 Page 7 of 15
Step 3: Manage Administrators Only the Primary Administrator can allow/deny other users to manage Firewalls. 1. Navigate to Administration > Manage Administrators in the left navigation pane on Central Partner Dashboard 2. The page lists users (administrators) associated with your Partner account created in the Partner Portal. 3. Only the Primary Administrator can allow or deny access to Sophos Central Firewall Manager for other Partner users (administrators). 4. All approved users will be able to manage Customer approvals for firewall management and will be able to access the Sophos Central Firewall Manager. Notes: To add/remove users or change the Primary Administrator, contact your Channel Account Manager. The Primary Partner administrator has the main administrator rights in Firewall Manager. Other authorized Partner users get device administrator rights. June 2016 Page 8 of 15
Step 4: Request Customer Authorization to manage their Firewalls View Customer firewalls and request Customer authorization to manage their devices. You can view the Firewalls linked to your Partner account under Sophos Central Firewalls > Firewall Approvals. Under Requests Not Sent tab, you can select a Firewall and click Request to Manage to send request to Customer to manage their Firewall device(s). The devices for which request is sent will move from Requests Not Sent to Approval Pending tab An email is sent to Customer notifying about this request; the Primary administrator is notified when a secondary administrator sends a request. Note: A Firewall appears on Central Partner Dashboard account of only Partner at any time. Sophos Central Firewall Manager allows to manage XG firewall devices sold by partners recorded in Sophos Systems. However Demo devices, Evaluation hardware devices and devices migrated with 30 day full guard trial cannot be managed. June 2016 Page 9 of 15
Step 5: Customer approves/rejects request to manage Firewall Request sent by the Partner appears in the MySophos account under which the said Firewall is registered. An email is sent to the Customer about this request. Customer is required to login to MySophos (MySophos Account > Network Protection > View Devices). The request can be viewed under Sophos Central Firewall Manager access column against the respective Firewall Serial Number as Approval Pending. Customer can view details of the Partner who requested access in a tooltip on the Partner Company name. To approve the Firewall Management request(s), Customer can: o Select Firewall and click Accept Selected under Central Firewall Manager access dropdown below the device list table o Alternatively, approve all requests to manage Firewalls at one go by clicking Accept All Awaiting Approval Click OK in the pop-up screen to confirm the action. The status of the requested device changes to Managed. The Partner contact receives an approval notification email; the MySophos registrant is also notified of the approval. June 2016 Page 10 of 15
Notes: Customer has the option to reject request(s) for selected devices or all devices. After the Firewall Management request is approved, Customer has the right to revoke their approval for Managed Devices. June 2016 Page 11 of 15
Step 6: Customer configures Central Management Settings on Firewall Once the Customer has approved the Firewall management request(s) on MySophos, the Central Management settings on respective Firewalls need to be configured. 1. Login to Firewall. 2. Visit System > Administration > Central Management. 3. Click on Enable Central Management and under IP Address/Domain field enter use1.cfm.sophos.com. 4. Click Apply to save the settings. Notes: After Central Management settings are configured on Firewall device, the device appears under the Discover notification in the top menu of the product. All partner users authorized to access Sophos Central Firewall Manager have rights to add devices from Discovery notification in Central Firewall Manager UI. If Central Management settings are not configured on Firewall device, such devices approved by Customer on MySophos will appear under System Management > Account Settings > Accounts > Device Inventory. Only users with Administrator rights in Firewall Manager have access to Device Inventory. Secondary Partner users (non-primary administrator) get Device Administrator access by default, but to access Device Inventory Administrator rights is a must in Firewall Manager. June 2016 Page 12 of 15
Step 7: View Firewall Approvals The Firewalls approved for management will appear under Approved Firewalls tab: Status tabs include: Requests Not Sent: Shows list of firewalls not yet requested for management. Approval Pending: Firewalls requested for management but pending approval. Rejected by Customer: Firewalls requests rejected by Customer for management. Revoked by Customer: Managed Firewalls for which customer revokes the rights. Rescinded by Partner: Managed Firewalls for which Partner rescinds management. Approved Firewalls: List of Firewalls approved by Customer for management. All Firewalls: List of Firewalls with status. Notes: The Firewall for which requests are denied/revoked by Customer appear under Rejected by Customer and Revoked by Customer respectively. Partner can resend requests for these devices again. In case a Partner decides to not manage a device any more, they can choose to rescind the managed devices which will appear under Rescind By Partner. June 2016 Page 13 of 15
Step 8: Manage Firewalls from Sophos Central Firewall Manager Partner administrators who are authorized to access Sophos Central Firewall Manager can go to Manage Firewalls in left navigation and click Manage. This will open the Firewall Manager in a new tab. The Primary Partner administrator has the main administrator rights. Other authorized Partner users get device administrator rights but are not assigned any devices to manage by default. The primary administrator or secondary administrator need to add device(s) from Discover notification in top menu and assign them to user(s) for their management. June 2016 Page 14 of 15
Technical Assistance For any queries, contact Sophos Customer Support using one of the following methods: Email id: support@sophos.com Telephonic support: 1-888-767-4679 June 2016 Page 15 of 15