• Sophos Monitoring App
• Sophos Employee Monitoring
• Sophos Network Monitoring
• Sophos Monitoring System
• Sophos Web Page Monitoring

Gaining Internet activity insights and keeping abreast about security events is a challenging task as the security appliance generates a huge quantity of security and traffic logs. With a package of features, Firewall Analyzer's Sophos reporting capability fit like a glove enabling you to strengthen the network security. Firewall Analyzer lets you collect, archive, analyze Sophos device logs and generate security and forensic reports.

Sophos firewall security and capacity management

Sophos Endpoint Detection and Response (EDR) lets you investigate detected threats (“threat cases”) and search for new threats. It also lets you monitor devices and fix issues remotely. Managed Threat Response. Managed Threat Response (MTR) is a service that warns you. Our analysts monitor and research malware, spam and web threats as they happen, around the globe. We collect what we know in these dashboards, and update them as soon as we detect new threats. You'll find threats itemized by country, volume and prevalence. Our dashboards help you decide exactly what you're up against — and how to fix it.

With Firewall Analyzer, a Sophos firewall monitoring toll, you can access predefined reports that help in analyzing bandwidth usage and understanding security and network activities. These reports help you to study the security vulnerability with top denied hosts, blocked URL hits, attacks, targets, virus, affected hosts, spam, receiving hosts.

Sophos firewall bandwidth capacity planning

Sophos firewall trend reports in Firewall Analyzer trace patterns in network behavior and bandwidth usage over time. Analysis of trend reports gives better insight into the nature of web site traffic or network traffic, and helps you make decisions on capacity planning, business risk assessment, bandwidth management, traffic shaping, and network security posture.

Sophos firewall bandwidth monitoring

Firewall Analyzer, a Sophos bandwidth monitor tool, provides a unique way to monitor the Internet traffic of the network in near real-time. Firewall traffic data is collected and analyzed to get granular details about the traffic across each firewall. There is no requirement for any probes or collection agents to get these details on the traffic.

Sophos traffic analyzer

Firewall Analyzer is a Sophos traffic monitor tool. It measures network traffic based on the analysis of logs received from different network firewalls. Firewall logs are collected, archived, and analyzed to get granular details about traffic across Sophos firewall devices.

Employee internet usage monitoring

With Firewall Analyzer for Sophos, you can maximize the business usage of Internet bandwidth using employee Internet monitoring. You can fine tune the Firewall policies to block or restrict bandwidth guzzling web sites and effectively control employee Internet usage. This will ensure that the bandwidth is available for smooth functioning of the business.

Sophos firewall alerts

Apart from exhaustive firewall reports with respect to network security, Firewall Analyzer offers comprehensive alarms and notifications.
The Sophos firewall log viewer tool generates alarms for anomalous security criteria, bandwidth values, and any normal criteria of security interest.
Alarms can be notified via email and SMS. It can trigger a script to achieve various threat mitigation activities. Alarms are also displayed in the UI screen.

To configure Sophos firewalls, refer the Sophos UTM and Sophos XG help pages.
Firewall Analyzer Sophos reports provide a unified solution to manage your organization's network security. The reports help you safeguard your network from external vulnerabilities. Download a 30-day free trial version of Firewall Analyzer today!

Sophos supported versions

Company	Firewall/Version	WELF Certified	Other Log Format
Sophos	UTM 9.0 or later

You can monitor and configure Windows Firewall (and monitor other registered firewalls) on your computers and servers using a Windows Firewall policy.

You can apply a Windows Firewall policy to individual devices (computers or servers) or to groups of devices.

Warning

Sophos Monitoring App

Other firewalls or your Windows Group Policy settings may affect how the policy is applied on individual computers and servers.

Sophos Employee Monitoring

We advise that you test any firewall rules you create (locally or via Group Policy) to make sure that communication with Sophos is allowed.

Go to Endpoint Protection > Policies to manage Windows Firewall.

Sophos Network Monitoring

To set up a policy, do as follows:

Sophos Monitoring System

• Create a Windows Firewall policy.
• Open the policy's Settings tab and configure it as described below. Make sure the policy is turned on.

Sophos Web Page Monitoring

Monitor Type

In Monitor Type, select the level of monitoring you want:

• Monitor Only. Devices will report their firewall status to Sophos Central. This is the default option.
• Monitor & Configure Network Profiles. Devices will report their firewall status to Sophos Central. You can also choose whether to block or allow inbound connections on Domain Networks, Private Networks, and Public Networks.

  Choose from:

  • Block All
  • Block (with exceptions). You must set up the exceptions locally on the computer or server. If you don't set up exceptions all inbound connections are blocked.
  • Allow All