guide for partners

June 2016 of 15

Guide for Partners Sophos Central Firewall Manager Document Date: June 2016

Sophos Central Firewall Manager – Guide for Partners

June 2016 of 15

Contents

Change log ...................................................................................................................................... 3

Overview .......................................................................................................................................... 4

Using Sophos Central Firewall Manager ..................................................................................... 4 Step 1: Login to Sophos Central Partner Dashboard directly or via Sophos Partner Portal ..........................4 Step 2: Start using Sophos Central Firewall Manager .........................................................................................6 Step 3: Manage Administrators ...............................................................................................................................8 Step 4: Request Customer Authorization to manage their Firewalls .................................................................9 Step 5: Customer approves/rejects request to manage Firewall ..................................................................... 10 Step 6: Customer configures Central Management Settings on Firewall ...................................................... 12 Step 7: View Firewall Approvals ........................................................................................................................... 13 Step 8: Manage Firewalls from Sophos Central Firewall Manager ................................................................. 14 Technical Assistance .............................................................................................................................................. 15


June 2016 of 15

Change log

Date Description

07-04-2016 Added section for Technical Assistance

12-04-2016 Added a note in Overview section

12-04-2016 Added a note in Step 4 “Request Customer Authorization to manage their Firewalls”

12-04-2016 Updated notes in Step 6 “Customer configures Central Management Settings on Firewall”

08-06-2016 Renamed product name to “Sophos Central Firewall Manager” from “Sophos Cloud Firewall Manager”.


June 2016 of 15

Overview

Sophos Central Firewall Manager (previously known as Sophos Cloud Firewall Manager) enables Sophos Partners to manage their customer’s firewalls on cloud, and is accessible via Sophos Central. It allows to configure and manage multiple Sophos Firewall devices from a single console.

Sophos Central Firewall Manager is currently available only to Sophos Partners.

As a Partner, with Sophos Central Firewall Manager you can:

Manage multiple Sophos Firewalls from a single console Manage and support Customers anywhere, anytime Create new revenue stream by offering managed services to Customers Save on support cost, time and efforts

Note: Sophos Central Firewall Manager allows to manage XG firewall devices sold by partners recorded in Sophos Systems. However Demo devices, Evaluation hardware devices and devices migrated with 30 day full guard trial cannot be managed.

Using Sophos Central Firewall Manager

Step 1: Login to Sophos Central Partner Dashboard directly or via Sophos Partner Portal

Login to Sophos Central Partner Dashboard using the following link and your Partner Portal credentials:

https://cloud.sophos.com/manage/partner

Login using your SophosID and using multi-factor authentication by following on-screen steps.

https://cloud.sophos.com/manage/partner


June 2016 of 15

You can know more about multi-factor authentication on Sophos Central Partner Dashboard here.

Or

Login to Sophos Partner Portal (http://www.sophos.com/partners) and click on Manage Sophos Central to single sign on to Sophos Central Partner Dashboard.

https://community.sophos.com/kb/en-US/122893

http://www.sophos.com/partners

http://www.sophos.com/partners


June 2016 of 15

Step 2: Start using Sophos Central Firewall Manager

Only the Primary Partner Contact can accept terms and conditions for Partner account to access Sophos Central Firewall Manager. Other administrators are able to only view information about Sophos Central Firewall Manager.

Go to Sophos Central – Firewalls in the left menu and click Firewall Approvals.

Click on Send Request and then select I Accept on Terms and Conditions as shown below:

Your request gets synchronized with Sophos Systems and gets approved in few minutes. Primary Partner contact (Primary administrator) receives an email confirming access to Sophos Central Firewall Manager. Click Check Status to proceed.


June 2016 of 15

Navigate to following sections to view and manage firewalls: Firewall Customers

View list of Firewall Customers and list of Firewalls per Customer. Partners can track earliest license expiry of Customer Firewalls from Firewall Customers tab.

Firewall Approvals View and manage Firewall authorizations for Central management.

Manage Firewalls Launch Firewall Manager product to manage configuration and updates for managed Firewalls.


June 2016 of 15

Step 3: Manage Administrators

Only the Primary Administrator can allow/deny other users to manage Firewalls.

1. Navigate to Administration > Manage Administrators in the left navigation pane on Central Partner Dashboard

2. The page lists users (administrators) associated with your Partner account created in the Partner Portal.

3. Only the Primary Administrator can allow or deny access to Sophos Central Firewall Manager for other Partner users (administrators).

4. All approved users will be able to manage Customer approvals for firewall management and will be able to access the Sophos Central Firewall Manager.

Notes:

To add/remove users or change the Primary Administrator, contact your Channel Account Manager. The Primary Partner administrator has the main administrator rights in Firewall Manager. Other

authorized Partner users get device administrator rights.


June 2016 of 15

Step 4: Request Customer Authorization to manage their Firewalls

View Customer firewalls and request Customer authorization to manage their devices.

You can view the Firewalls linked to your Partner account under Sophos Central – Firewalls > Firewall Approvals.

Under Requests Not Sent tab, you can select a Firewall and click Request to Manage to send request to Customer to manage their Firewall device(s).

The devices for which request is sent will move from Requests Not Sent to Approval Pending tab An email is sent to Customer notifying about this request; the Primary administrator is notified when

a secondary administrator sends a request.

Note:

A Firewall appears on Central Partner Dashboard account of only Partner at any time. Sophos Central Firewall Manager allows to manage XG firewall devices sold by partners recorded in

Sophos Systems. However Demo devices, Evaluation hardware devices and devices migrated with 30 day full guard trial cannot be managed.


June 2016 of 15

Step 5: Customer approves/rejects request to manage Firewall

Request sent by the Partner appears in the MySophos account under which the said Firewall is registered.

An email is sent to the Customer about this request.

Customer is required to login to MySophos (MySophos Account > Network Protection > View

Devices). The request can be viewed under ‘Sophos Central Firewall Manager access’ column against the respective Firewall Serial Number as Approval Pending.

Customer can view details of the Partner who requested access in a tooltip on the Partner Company name.

To approve the Firewall Management request(s), Customer can: o Select Firewall and click Accept Selected under Central Firewall Manager access

dropdown below the device list table o Alternatively, approve all requests to manage Firewalls at one go by clicking Accept All

Awaiting Approval Click OK in the pop-up screen to confirm the action. The status of the requested device changes to Managed. The Partner contact receives an approval notification email; the MySophos registrant is also notified

of the approval.


June 2016 of 15

Notes:

Customer has the option to reject request(s) for selected devices or all devices. After the Firewall Management request is approved, Customer has the right to revoke their approval

for Managed Devices.


June 2016 of 15

Step 6: Customer configures Central Management Settings on Firewall

Once the Customer has approved the Firewall management request(s) on MySophos, the Central Management settings on respective Firewalls need to be configured.

1. Login to Firewall.

2. Visit System > Administration > Central Management.

3. Click on Enable Central Management and under IP Address/Domain field enter “us-e1.cfm.sophos.com”.

4. Click Apply to save the settings.

Notes:

After Central Management settings are configured on Firewall device, the device appears under the Discover notification in the top menu of the product. All partner users authorized to access Sophos Central Firewall Manager have rights to add devices from Discovery notification in Central Firewall Manager UI.

If Central Management settings are not configured on Firewall device, such devices approved by Customer on MySophos will appear under System Management > Account Settings > Accounts > Device Inventory. Only users with Administrator rights in Firewall Manager have access to Device Inventory. Secondary Partner users (non-primary administrator) get Device Administrator access by default, but to access Device Inventory Administrator rights is a must in Firewall Manager.


June 2016 of 15

Step 7: View Firewall Approvals

The Firewalls approved for management will appear under Approved Firewalls tab:

Status tabs include:

Requests Not Sent: Shows list of firewalls not yet requested for management. Approval Pending: Firewalls requested for management but pending approval. Rejected by Customer: Firewalls requests rejected by Customer for management. Revoked by Customer: Managed Firewalls for which customer revokes the rights. Rescinded by Partner: Managed Firewalls for which Partner rescinds management. Approved Firewalls: List of Firewalls approved by Customer for management. All Firewalls: List of Firewalls with status.

Notes:

The Firewall for which requests are denied/revoked by Customer appear under Rejected by Customer and Revoked by Customer respectively. Partner can resend requests for these devices again.

In case a Partner decides to not manage a device any more, they can choose to rescind the managed devices which will appear under Rescind By Partner.


June 2016 of 15

Step 8: Manage Firewalls from Sophos Central Firewall Manager

Partner administrators who are authorized to access Sophos Central Firewall Manager can go to Manage Firewalls in left navigation and click Manage. This will open the Firewall Manager in a new tab.

The Primary Partner administrator has the main administrator rights. Other authorized Partner users get device administrator rights but are not assigned any devices to manage by default.

The primary administrator or secondary administrator need to add device(s) from Discover notification in top menu and assign them to user(s) for their management.


June 2016 of 15

Technical Assistance

For any queries, contact Sophos Customer Support using one of the following methods:

Email id: [email protected]

Telephonic support: 1-888-767-4679

mailto:[email protected]

guide for partners

Documents