{"id":479,"date":"2020-02-05T15:59:38","date_gmt":"2020-02-05T12:59:38","guid":{"rendered":"http:\/\/as7ablog.com\/kinan\/?p=479"},"modified":"2020-02-05T15:59:40","modified_gmt":"2020-02-05T12:59:40","slug":"adfs-with-sophos-xg-firewall","status":"publish","type":"post","link":"http:\/\/as7ablog.com\/kinan\/?p=479","title":{"rendered":"ADFS With Sophos XG Firewall"},"content":{"rendered":"\n
\n\n

It’s basically simple process.
\nYou may even use the Exchange ready-made firewall publishing policy as base for\nthis one.
\nThis is for SFOS 17.X<\/em>
\n
\n<\/p>\n\n

So, let’ move on:<\/p>\n\n

1.     \n<\/span><\/span><\/span>I assume you already have the SSL\ncertificate installed properly on the XG box.<\/p>\n\n

2.     \n<\/span><\/span><\/span>Need to add the ADFS server to\nhave a name under "Hosts andServices<\/span>"<\/p>\n\n

3.     \n<\/span><\/span><\/span>Create new "Web Server"\nentry and use the host you added in step 1<\/p>\n\n

4.     \n<\/span><\/span><\/span>Create new protection policy with\nthese settings:<\/p>\n\n

a.      \n<\/span><\/span><\/span>Set \u201cMode\u201d to \u201cMonitor\u201d. You may\nuse \u201cReject\u201d if you\u2019re concerned.<\/p>\n\n

b.     \n<\/span><\/span><\/span>Enable \u201cBlock clients with bad\nreputation\u201d.<\/p>\n\n

c.      \n<\/span><\/span><\/span>Enable \u201cCommon threat filter\u201d.<\/p>\n\n

5.     \n<\/span><\/span><\/span>Create new business rule with\nthese settings:<\/p>\n\n

a.      \n<\/span><\/span><\/span>Hosted\naddress \u201c#Port2\u201d assuming it\u2019s the WAN port.<\/p>\n\n

b.     \n<\/span><\/span><\/span>Enable \u201cHTTPS\u201d.<\/p>\n\n

c.      \n<\/span><\/span><\/span>Select the SSL certificate, and\nadd the URL under \u201cDomains\u201d.
\nFor example \u201cadfs.as7ablog.com\u201d.<\/p>\n\n

d.     \n<\/span><\/span><\/span>Under \u201cprotected server(s)\u201d select\nthe ADFS server.<\/p>\n\n

e.      \n<\/span><\/span><\/span>Select the \u201cAny IPv4\u201d under \u201cAccess\npermission\u201d.<\/p>\n\n

f.       \n<\/span><\/span><\/span>Select the protection policy you\u2019ve\ncreated on step 4.<\/p>\n\n

g.     \n<\/span><\/span><\/span>Select the intrusion prevention\npolicy if you like to.<\/p>\n\n

h.     \n<\/span><\/span><\/span>Enable "Pass host\nheader"<\/p>\n\n<\/div>\n","protected":false},"excerpt":{"rendered":"

It’s basically simple process. You may even use the Exchange ready-made firewall publishing policy as base for this one. This is for SFOS 17.X So, let’ move on: 1.      I assume you already have the SSL certificate installed properly on the XG box. 2.      Need to add the ADFS server to have a name under […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[4],"tags":[45,30,14,29],"class_list":["post-479","post","type-post","status-publish","format-standard","hentry","category-4","tag-adfs","tag-firewalls","tag-microsoft","tag-sophos"],"_links":{"self":[{"href":"http:\/\/as7ablog.com\/kinan\/index.php?rest_route=\/wp\/v2\/posts\/479","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/as7ablog.com\/kinan\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/as7ablog.com\/kinan\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/as7ablog.com\/kinan\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/as7ablog.com\/kinan\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=479"}],"version-history":[{"count":5,"href":"http:\/\/as7ablog.com\/kinan\/index.php?rest_route=\/wp\/v2\/posts\/479\/revisions"}],"predecessor-version":[{"id":485,"href":"http:\/\/as7ablog.com\/kinan\/index.php?rest_route=\/wp\/v2\/posts\/479\/revisions\/485"}],"wp:attachment":[{"href":"http:\/\/as7ablog.com\/kinan\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=479"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/as7ablog.com\/kinan\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=479"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/as7ablog.com\/kinan\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=479"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}