Sophos Xg On Azure



Businesses move to the Public Cloud for a variety of reasons, whether it’s flexibility, the ability to customize, or lower costs. That’s why Sophos XG Firewall has been available through the Microsoft Azure Marketplace for some time, offering pay-as-you-go (PAYG) and bring-your-own-license (BYOL) options, providing industry leading price-performance, and the ultimate in flexibility.

Best value in price-performance on Azure

XG Firewall for PAYG delivers all features and functionality of XG Firewall on Azure (FullGuard License), including Network Protection, Web Protection, Email, and Web Server Protection modules ­– already installed and ready to go. And we’re pleased to announce we recently updated the template package for our Azure Marketplace offer of XG Firewall.

Sophos Xg On Azure

New PAYG pricing and recommended VM performance tiers

  1. Sophos XG Firewall provides the world’s best network visibility, protection, and response to secure your Azure environments. Integrate multiple, leading security technologies into a single, preconfigured virtual-machine image with extensive reporting, including full insight into user and network activity.
  2. With version 18 Sophos brings changes to RADIUS settings on XG Firewall. We now have possibility to set timeout for authentication and this allows us to use Azure MFA for 2-factor authentication. Here is few simple steps how to enable this on network policy server and on XG Firewall.
  3. Configure Sophos XG Firewall to forward Syslog messages to your Azure workspace via the Syslog agent. In the Azure Sentinel portal, click Data connectors and select Sophos XG Firewall connector. Select Open connector page. Follow the instructions on the Sophos XG Firewall page.

The same set of Azure AD DS features exists for both environments. Azure AD domain services offer an LDAP interface to XG that can replicate the working of an on-premise Active Directory. This article assumes there is an existing Azure AD environment in place.

Sophos

You now have complete flexibility to select any virtual machine series* for your XG Firewall, allowing you to fine-tune your virtual machine selection and compute costs to meet your exact requirements. Plus, our recommended Fsv2-series has been chosen to provide the best value in price-performance in the Azure portfolio based on the Azure Compute Unit (ACU) per vCPU.

Recommended VM sizesPerformancePrice per hour**
Standard_F2s_v2Dev/Test (<50 users)$0.575
Standard_F4s_v2Small (50-200 users)$1.15
Standard_F8s_v2Medium (200-4000 users)$2.30
Standard_F16s_v2Large (400-1500 users)$4.60
Standard_F32s_v2Extra Large (1500 – 5000 users)$9.20
Standard_F64s_v2Enterprise (5000+ users)$18.40

*Virtual machine series exceptions A0, A1, B1 and B1ms
** Prices listed are in U.S. dollars. You can find pricing in your local currency by using the Azure Pricing Calculator

In the same update, your current PAYG pricing for new and existing XG Firewall Azure VMs may change dependent on the country where you purchase Azure services. From March 10, 2020 Sophos will use standardized currency exchange rates to localize your pricing based on the U.S. dollar pricing in the table above. This will not affect services currently payed for in US Dollars. Microsoft will notify you of any changes to pricing affecting your bill prior to the correction.

Now sell XG Firewall in more regions than ever

Providing our partners with greater flexibility will also extend to licensing in this update, with two major improvements to PAYG and BYOL options.

PAYG is now available in 12 additional regions:

  • Armenia
  • Belarus
  • Brazil
  • Croatia
  • Monaco
  • Russia
  • Saudi Arabia
  • Serbia
  • South Africa
  • South Korea
  • Turkey
  • United Arab Emirates

BYOL availability grows from 90, to all 141 Azure enabled countries – a huge expansion to help you become more competitive than ever selling Sophos XG Firewall on Azure. See all 51 new countries below:

  • Afghanistan
  • Albania
  • Andorra
  • Angola
  • Armenia
  • Azerbaijan
  • Bangladesh
  • Barbados
  • Belize
  • Bermuda
  • Bolivia
  • Bosnia and Herzegovina
  • Botswana
  • Brunei
  • Cabo Verde
  • Cameroon
  • Cayman Island
  • Côte d’Ivoire
  • Curaçao
  • Ethiopia
  • Faroe Islands
  • Fiji
  • Georgia
  • Honduras
  • Iraq
  • Jamaica
  • Kyrgyzstan
  • Lebanon
  • Libya
  • Macao SAR
  • Mauritius
  • Moldova
  • Mongolia
  • Namibia
  • Nepal
  • Nicaragua
  • Palestinian Authority
  • Rwanda
  • Saint Kitts and Nevis
  • Senegal
  • Tajikistan
  • Tanzania
  • Turkmenistan
  • Uganda
  • Uzbekistan
  • Vatican City
  • Vietnam
  • Virgin Islands of the United States
  • Yemen
  • Zambia
  • Zimbabwe

We hope this important update enables you to be more competitive as a Sophos Partner, and provide a service that meets the exact requirements of your customers’ who have already moved or are planning to move to Microsoft Azure.

Sophos Xg In Azure

Integrate

Sophos Xg On Azure Client

You can now utilize XG Firewall to build a complete SD-WAN overlay network in Microsoft Azure’s Virtual WAN, enabling seamless connectivity between workloads, hosts, and locations connected to Azure’s global virtual network.

Azure Virtual WAN is a networking service that brings many networking, security, and routing functionalities together to provide a single operational SD-WAN network. The Virtual WAN architecture is a hub and spoke architecture, with scale and performance built in for branches (VPN/SD-WAN devices), users (Azure VPN/OpenVPN/IKEv2 clients), ExpressRoute circuits, and virtual networks.

Sophos xg setup guide

It enables a global transit network architecture, where the cloud-hosted network “hub” enables connectivity between points that may be distributed across different types of “spokes”. Onenote to pdf.

Is beamng drive free on steam. Azure regions serve as the SD-WAN hubs, which are fully mesh-connected, making it easy to use the Microsoft backbone for any-to-any type of connectivity.

Sophos Xg Azure Ad

XG Firewall’s integration with Azure Virtual WAN enables you to build a scalable SD-WAN network deployed across the global Microsoft enterprise WAN backbone, while utilizing XG Firewall’s full suite of protection capabilities for securing applications and traffic flows. This greatly simplifies connectivity and can dramatically reduce expenses compared to traditional leased-lines.

Deploy Sophos Xg On Azure

If you’re interested in leveraging Azure Virtual WAN with your XG Firewall, we’ve prepared an extensive deployment guide: How to Integrate XG Firewall with Azure Virtual WAN (Secure SD-WAN)

This guide highlights the step-by-step configuration involved in connecting XG Firewalls located at an HQ to an Azure Virtual WAN hub in order to access the virtual networks across multiple availability zones. It also outlines the configuration required for connecting remote offices to the virtual WAN and backhauling traffic through Microsoft’s global network to create the ultimate SD-WAN solution.

If you’re new to XG Firewall, learn more about how XG Firewall can help with your SD-WAN ambitions and goals.





Comments are closed.