Training
Sophos
Sophos Architect XG Firewall

7854 Reviews star_rate star_rate star_rate star_rate star_half

Sophos Architect XG Firewall

By Request

$1,500 USD GSA $1,435.77

Course Code AT80

Duration 3 days

Available Formats Classroom

Enter your Email to Download Full Course Details

This course provides an in-depth study of Sophos XG Firewall, designed for experienced technical professionals who will be planning, installing, configuring and supporting deployments in production environments.

It consists of presentations and practical lab exercises to reinforce the taught content, and electronic copies of the supporting documents for the course will be provided to each trainee. The course is expected to take 3 days (24 hours) to complete, of which approximately 8 hours will be spent on the practical exercises.

Skills Gained

Deploy XG Firewall in complex network environments
Explain how XG Firewall Processes traffic and use this information to inform the configuration
Configure advanced networking and protection features
Protect web applications using the web server protection
Size hardware, virtual and software XG Firewalls for a given set of requirements

Prerequisites

Have completed and passed the XG Firewall - Certified Engineer course and any subsequent delta modules up to version 18.0
Experience with Windows networking and the ability sto troubleshoot issues
A good understanding of IT security
Experience configuring network security devices
Experience configuring and administering Linux/UNIX systems

Course Details

Certification

To become a Sophos Certified Architect, trainees must take and pass an online assessment. The assessment tests their knowledge of both the presented and practical content. The pass mark for the assessment is 80% and is limited to 3 attempts.

Lab Exercises

Each student will be provided with a pre-configured environment that simulates a company network with two sites, a head office and a branch office and contains Windows Servers, a Windows Desktop and three XG Firewalls.

Module 1: Deployment

Recall important information from the Engineer course
Describe the deployment modes supported by the XG Firewall
Understand a range of scenarios where each deployment mode would commonly be used
Use built-in tools to troubleshoot issues
Labs:
Register for a Sophos Central evaluation

Module 2: Base Firewall

Explain how the XG firewall can be accessed
Understand the types of interfaces that can be created
Understand the benefits of Fast Path technology
Configure routing per firewall rule
Understand best practice for ordering firewall rules
Explain what Local NAT policy is and known how to configure it
Labs:
Activate the Sophos XG Firewalls
Post-installation configuration
Bridge interfaces
Create a NAT rule to load-balance access to servers
Create a local NAT policy
Configure routing using multiple WAN links
Configure policy-based routing for an MPLS Scenario
Install Sophos Central

Module 3: Network Protection

Explain what IPS is and how traffic can be offloaded to FastPath
Demonstrate how to optimize workload by configuring IPS policies
Examine advanced Intrusion Prevention and optimize policies
Configure advanced Dos Protection rules
Demonstrate how the strict policy can be used to protect networks
Labs:
Create advanced Dos Rules

Module 4: Synchronized Security

Explain how Security Heartbeat works
Configure Synchronized Security
Deploy Synchronized Security in discover and inline modes
Understand the advantages and disadvantages of deploying Synchronized Security in different scenarios
Labs:
Configure source-based Security Heartbeat firewall rules
Destination-based Security Heartbeat
Missing Security Heartbeat
Lateral Movement Protection

Module 5: Web Server Protection

Explain how Web Server Protection works
Describe the protection features
Configure protection policies for a web application
Configure web server authentication
Publish a web service using the Web Application Firewall
Use the preconfigured templates to configure Web Server Protection for common purposes
Configure SlowHTTP protection
Labs:
Web Application Firewall
Load balancing with Web Server Protection
Web Server Authentication and path-specific routing

Module 6: Site-to-Site Connections

Configure and deploy site-to-site VPNs in a wide range of environments
Implement IPsec NATing and failover
Check and modify route precedence
Create RED tunnels between XG Firewalls
Understand when to use RED
Labs:
Create an IPsec site-to-site VPN
Configure VPN network NATing
Configure VPN failover
Enable RED on the XG Firewall
Create a RED tunnel between two XG Firewalls
Configure routing for the RED tunnel
Configure route-based VPN

Module 7: Authentication

Demonstrate how to configure and use RADIUS accounting
Deploy STAS in large and complex environments
Configure SATC and STAS together
Configure Secure LDAP and identify the different secure connections available
Labs:
Configure an Active Directory authentication server
Configure single sign-on using STAS
Authenticate users over a Site-to-Site VPN

Module 8: Web Protection

Choose the most appropriate type for web protection in different deployment scenarios
Enable web filtering using the DPI engine or legacy web proxy
Configure TLS inspection using the DPI engine or legacy web proxy
Labs:
Install the SSL CA certificate
Configure TLS inspection rules
Create a custom web policy for users

Module 9: Wireless

Explain how Sophos Access Points are deployed and identify some common issues that may be encountered
Configure RADIUS authentication
Configure a mesh network

Module 10: Remote Access

Configure Sophos Connect and manage the configuration using Sophos Connect Admin
Configure an IPsec remote access VPN
Configure an L2TP remote access VPN for mobile devices
Labs:
Sophos Connect

Module 11: High Availability

Explain what HA is and how it operates
Demonstrate how to configure HA and explain the difference between quick and manual configuration
List the prerequisites for high availability
Perform troubleshooting steps and check the logs to ensure that HA is set up correctly
Explain the packet flow in high availability
Demonstrate how to disable HA
Labs:
Create an Active-Passive cluster
Disable high Availability

Module 12: Public Cloud

Deploy XG Firewall in complex network environments
Explain how XG Firewall processes traffic and use it's information to inform the configuration
Configure advanced networking and protection features
Deploy XG Firewall on public cloud infrastructure
Labs:
Put a service in debug mode to gather logs
Retrieving log files
Troubleshoot an issue from an imported configuration file
Deploy an XG Firewall on Azure (Simulation)

Read Less

0 options available

There are currently no scheduled dates for this course. If you are interested in this course, request a course date with the links above. We can also contact you when the course is scheduled in your area.

Request Other Date Request On-site Course

When does class start/end?

Classes begin promptly at 9:00 am, and typically end at 5:00 pm.

Does the course schedule include a Lunchbreak?

Lunch is normally an hour long and begins at noon. Coffee, tea, hot chocolate and juice are available all day in the kitchen. Fruit, muffins and bagels are served each morning. There are numerous restaurants near each of our centers, and some popular ones are indicated on the Area Map in the Student Welcome Handbooks - these can be picked up in the lobby or requested from one of our ExitCertified staff.

How can someone reach me during class?

If someone should need to contact you while you are in class, please have them call the center telephone number and leave a message with the receptionist.

What languages are used to deliver training?

Most courses are conducted in English, unless otherwise specified. Some courses will have the word "FRENCH" marked in red beside the scheduled date(s) indicating the language of instruction.

What does GTR stand for?

GTR stands for Guaranteed to Run; if you see a course with this status, it means this event is confirmed to run. View our GTR page to see our full list of Guaranteed to Run courses.

How do I find an ExitCertified training location?

We have training locations across the United States and Canada. View a full list of classroom training locations.

Which delivery formats are available?

At ExitCertified we offer training that is Instructor-Led, Online, Virtual and Self-Paced.

Does ExitCertified deliver group training?

Yes, we provide training for groups, individuals and private on sites. View our group training page for more information.

What does vendor-authorized training mean?

As a vendor-authorized training partner, we offer a curriculum that our partners have vetted. We use the same course materials and facilitate the same labs as our vendor-delivered training. These courses are considered the gold standard and, as such, are priced accordingly.

Is the training too basic, or will you go deep into technology?

It depends on your requirements, your role in your company, and your depth of knowledge. The good news about many of our learning paths, you can start from the fundamentals to highly specialized training.

How up-to-date are your courses and support materials?

We continuously work with our vendors to evaluate and refresh course material to reflect the latest training courses and best practices.

Are your instructors seasoned trainers who have deep knowledge of the training topic?

ExitCertified instructors have an average of 27 years of practical IT experience. They have also served as consultants for an average of 15 years. To stay up to date, instructors will at least spend 25 percent of their time learning new emerging technologies and courses.

Do you provide hands-on training and exercises in an actual lab environment?

Lab access is dependent on the vendor and the type of training you sign up for. However, many of our top vendors will provide lab access to students to test and practice. The course description will specify lab access.

Will you customize the training for our company’s specific needs and goals?

We will work with you to identify training needs and areas of growth. We offer a variety of training methods, such as private group training, on-site of your choice, and virtually. We provide courses and certifications that are aligned with your business goals.

How do I get started with certification?

Getting started on a certification pathway depends on your goals and the vendor you choose to get certified in. Many vendors offer entry-level IT certification to advanced IT certification that can boost your career. To get access to certification vouchers and discounts, please contact customerexp@exitcertified.com.

Will I get access to content after I complete a course?

You will get access to the PDF of course books and guides, but access to the recording and slides will depend on the vendor and type of training you receive.

How to request a W9 for ExitCertified LLC?

View our filing status and how to request a W9.

This was a good program to get prepared for the solutions architect associate exam.

ExitCertified Student

ExitCertified

They were very good. They made sure everyone was able to get into the training and got all of the material needed for class.

ExitCertified Student

ExitCertified

ExitCertified was a great. They gave me all the materials and information I needed ahead of time to prepare for the course.

ExitCertified Student

ExitCertified

ExitCertified provided great learning material and the instructor was great.

ExitCertified Student

ExitCertified

I like their training. A lot of material covered. The labs are very good. l learned a lot.

&quot;John O

ExitCertified