CIS Sophos Firewall Benchmark

This recommendation verifies that Hostname Is Configured on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Hostname Is Configured. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Hostname Is Configured. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Admin Port Is Changed from Default on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to implement this control may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Admin Port Is Changed from Default. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Admin Port Is Changed from Default. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Firmware Is Updated to Latest Supported Version on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to implement this control may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Firmware Is Updated to Latest Supported Version. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Firmware Is Updated to Latest Supported Version. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Device Access Profiles Are Configured on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Device Access Profiles Are Configured. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Device Access Profiles Are Configured. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that NTP Is Configured with Authenticated Time Source on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that NTP Is Configured with Authenticated Time Source. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure NTP Is Configured with Authenticated Time Source. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Management Interface Is on Dedicated Zone on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to implement this control may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Management Interface Is on Dedicated Zone. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Management Interface Is on Dedicated Zone. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Unused Interfaces Are Disabled on the Sophos Firewall network security appliance. Using the recommended component or protocol ensures alignment with security best practices and reduces risk.

Using an insecure or legacy component instead of the recommended approach increases the risk of compromise. Ensuring the Sophos Firewall network security appliance uses the correct component aligns with industry best practices and standards.

Log in to the Sophos web admin console and verify that Unused Interfaces Are Disabled. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Unused Interfaces Are Disabled. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that DNS Settings Use Trusted Resolvers on the Sophos Firewall network security appliance. Using the recommended component or protocol ensures alignment with security best practices and reduces risk.

Using an insecure or legacy component instead of the recommended approach increases the risk of compromise. Ensuring the Sophos Firewall network security appliance uses the correct component aligns with industry best practices and standards.

Log in to the Sophos web admin console and verify that DNS Settings Use Trusted Resolvers. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure DNS Settings Use Trusted Resolvers. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Zone Isolation Is Properly Configured on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to implement this control may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Zone Isolation Is Properly Configured. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Zone Isolation Is Properly Configured. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Default Admin Password Is Changed on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to implement this control may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Default Admin Password Is Changed. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Default Admin Password Is Changed. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Multi-Factor Authentication Is Enabled for Admins on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Multi-Factor Authentication Is Enabled for Admins. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Multi-Factor Authentication Is Enabled for Admins. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Admin Session Timeout Is Configured on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Admin Session Timeout Is Configured. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Admin Session Timeout Is Configured. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Login Lockout Policy Is Configured on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Login Lockout Policy Is Configured. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Login Lockout Policy Is Configured. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that RADIUS or LDAP Authentication Is Configured on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that RADIUS or LDAP Authentication Is Configured. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure RADIUS or LDAP Authentication Is Configured. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Captive Portal Authentication Is Configured for Guest Networks on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Captive Portal Authentication Is Configured for Guest Networks. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Captive Portal Authentication Is Configured for Guest Networks. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation ensures that Password Complexity Requirements Are Enforced on the Sophos Firewall network security appliance. Enforcing this requirement establishes a minimum security standard and prevents insecure configurations.

Without this enforcement, the Sophos Firewall network security appliance may accept insecure configurations that weaken overall security posture. Mandating this control ensures consistent protection against common attack vectors.

Log in to the Sophos web admin console and verify that Password Complexity Requirements Are Enforced. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Password Complexity Requirements Are Enforced. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that STAS or AD SSO Is Configured for Internal Users on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that STAS or AD SSO Is Configured for Internal Users. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure STAS or AD SSO Is Configured for Internal Users. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Default Drop Rule Is Configured on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Default Drop Rule Is Configured. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Default Drop Rule Is Configured. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Rules Follow Least Privilege Principle on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to implement this control may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Rules Follow Least Privilege Principle. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Rules Follow Least Privilege Principle. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Source and Destination Zones Are Explicitly Defined on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to implement this control may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Source and Destination Zones Are Explicitly Defined. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Source and Destination Zones Are Explicitly Defined. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Unused Rules Are Removed or Disabled on the Sophos Firewall network security appliance. Disabling or removing unnecessary components reduces the attack surface and limits potential vectors for exploitation.

Running unnecessary components on the Sophos Firewall network security appliance increases the attack surface and the risk of exploitation. Disabling or removing them follows the principle of least functionality and reduces exposure to known vulnerabilities.

Log in to the Sophos web admin console and verify that Unused Rules Are Removed or Disabled. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Unused Rules Are Removed or Disabled. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Application Control Is Enabled on WAN Rules on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Application Control Is Enabled on WAN Rules. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Application Control Is Enabled on WAN Rules. Navigate to the relevant section, apply the setting, and save the configuration.

This setting ensures that High-Risk Applications Are Blocked on the Sophos Firewall network security appliance. Restricting this capability limits potential abuse and enforces the principle of least privilege across the environment.

Unrestricted access to this capability could allow unauthorized users or processes to perform actions beyond their intended scope. Applying least-privilege principles to the Sophos Firewall network security appliance is essential for defense in depth.

Log in to the Sophos web admin console and verify that High-Risk Applications Are Blocked. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure High-Risk Applications Are Blocked. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Intrusion Prevention System Is Enabled on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Intrusion Prevention System Is Enabled. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Intrusion Prevention System Is Enabled. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that IPS Policy Is Set to Recommended or Stricter on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that IPS Policy Is Set to Recommended or Stricter. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure IPS Policy Is Set to Recommended or Stricter. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that IPsec Uses Strong Encryption Algorithms on the Sophos Firewall network security appliance. Using the recommended component or protocol ensures alignment with security best practices and reduces risk.

Using an insecure or legacy component instead of the recommended approach increases the risk of compromise. Ensuring the Sophos Firewall network security appliance uses the correct component aligns with industry best practices and standards.

Log in to the Sophos web admin console and verify that IPsec Uses Strong Encryption Algorithms. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure IPsec Uses Strong Encryption Algorithms. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that IKEv2 Is Used for IPsec on the Sophos Firewall network security appliance. Using the recommended component or protocol ensures alignment with security best practices and reduces risk.

Using an insecure or legacy component instead of the recommended approach increases the risk of compromise. Ensuring the Sophos Firewall network security appliance uses the correct component aligns with industry best practices and standards.

Log in to the Sophos web admin console and verify that IKEv2 Is Used for IPsec. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure IKEv2 Is Used for IPsec. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Perfect Forward Secrecy Is Enabled on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Perfect Forward Secrecy Is Enabled. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Perfect Forward Secrecy Is Enabled. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Dead Peer Detection Is Configured on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Dead Peer Detection Is Configured. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Dead Peer Detection Is Configured. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that SSL VPN Uses TLS 1.2 or Higher on the Sophos Firewall network security appliance. Using the recommended component or protocol ensures alignment with security best practices and reduces risk.

Using an insecure or legacy component instead of the recommended approach increases the risk of compromise. Ensuring the Sophos Firewall network security appliance uses the correct component aligns with industry best practices and standards.

Log in to the Sophos web admin console and verify that SSL VPN Uses TLS 1.2 or Higher. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure SSL VPN Uses TLS 1.2 or Higher. Navigate to the relevant section, apply the setting, and save the configuration.

This setting ensures that SSL VPN Portal Is Restricted by Source on the Sophos Firewall network security appliance. Restricting this capability limits potential abuse and enforces the principle of least privilege across the environment.

Unrestricted access to this capability could allow unauthorized users or processes to perform actions beyond their intended scope. Applying least-privilege principles to the Sophos Firewall network security appliance is essential for defense in depth.

Log in to the Sophos web admin console and verify that SSL VPN Portal Is Restricted by Source. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure SSL VPN Portal Is Restricted by Source. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that SSL VPN Authentication Uses MFA on the Sophos Firewall network security appliance. Using the recommended component or protocol ensures alignment with security best practices and reduces risk.

Using an insecure or legacy component instead of the recommended approach increases the risk of compromise. Ensuring the Sophos Firewall network security appliance uses the correct component aligns with industry best practices and standards.

Log in to the Sophos web admin console and verify that SSL VPN Authentication Uses MFA. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure SSL VPN Authentication Uses MFA. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Web Filtering Policy Is Applied to All Outbound Rules on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to implement this control may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Web Filtering Policy Is Applied to All Outbound Rules. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Web Filtering Policy Is Applied to All Outbound Rules. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that HTTPS Scanning Is Enabled on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that HTTPS Scanning Is Enabled. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure HTTPS Scanning Is Enabled. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Malware Scanning Is Enabled for Web Traffic on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Malware Scanning Is Enabled for Web Traffic. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Malware Scanning Is Enabled for Web Traffic. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Pharming Protection Is Enabled on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Pharming Protection Is Enabled. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Pharming Protection Is Enabled. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that WAF Is Enabled for Published Web Servers on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that WAF Is Enabled for Published Web Servers. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure WAF Is Enabled for Published Web Servers. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that WAF Protection Mode Is Set to Reject on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that WAF Protection Mode Is Set to Reject. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure WAF Protection Mode Is Set to Reject. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that WAF Cookie Signing Is Enabled on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that WAF Cookie Signing Is Enabled. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure WAF Cookie Signing Is Enabled. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Syslog Server Is Configured on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Syslog Server Is Configured. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Syslog Server Is Configured. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Firewall Rule Logging Is Enabled on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Firewall Rule Logging Is Enabled. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Firewall Rule Logging Is Enabled. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Admin Activity Logging Is Enabled on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Admin Activity Logging Is Enabled. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Admin Activity Logging Is Enabled. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Log Retention Period Is Set to 90 Days or More on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Log Retention Period Is Set to 90 Days or More. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Log Retention Period Is Set to 90 Days or More. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Email Notifications Are Configured for Critical Events on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Email Notifications Are Configured for Critical Events. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Email Notifications Are Configured for Critical Events. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that SNMP Is Configured with SNMPv3 on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to properly configure this setting may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that SNMP Is Configured with SNMPv3. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure SNMP Is Configured with SNMPv3. Navigate to the relevant section, apply the setting, and save the configuration.

This recommendation verifies that Sophos Central Management Is Connected on the Sophos Firewall network security appliance. Implementing this control strengthens the overall security configuration and reduces exposure to potential threats.

Failure to implement this control may leave the Sophos Firewall network security appliance vulnerable to attack or non-compliant with organizational security policies. This control helps establish a consistent, hardened configuration baseline.

Log in to the Sophos web admin console and verify that Sophos Central Management Is Connected. Navigate to the relevant configuration page and review the current settings.

In the Sophos web admin console, configure Sophos Central Management Is Connected. Navigate to the relevant section, apply the setting, and save the configuration.