SUM Quick Start Guide

Sophos UTM Manager
quick start guide
Product version: 4.200
Document date: Monday, April 07, 2014
The specifications and information in this document are subject to change without notice. Companies,
names, and data used in examples herein are fictitious unless otherwise noted. This document may not
be copied or distributed by any means, in whole or in part, for any reason, without the express written
permission of Sophos Limited. Translations of this original manual must be marked as follows: "Translation of the original manual".
© 2014 Sophos Limited. All rights reserved.
http://www.sophos.com
Sophos UTM, Sophos UTM Manager, Astaro Security Gateway, Astaro Command Center, Astaro
Gateway Manager, and WebAdmin are trademarks of Sophos Limited. Cisco is a registered trademark
of Cisco Systems Inc. iOS is a trademark of Apple Inc. Linux is a trademark of Linus Torvalds. All further
trademarks are the property of their respective owners.
Limited Warranty
No guarantee is given for the correctness of the information contained in this document. Please send
any comments or corrections to [email protected].
Contents
1 Introduction
5
2 How to get SUM
6
2.1 Get 30-days version
2.2 Get full package
6
6
3 Configuring SUM
8
4 Connecting UTMs to SUM
9
Contents
1 Introduction
Sophos UTM Manager (SUM) is the central management tool for UTM. With SUM you can
offer management security services, while quickly and easily managing all UTM devices, regardless of location.
SUM provides a centralized Dashboard which displays the health and status of all UTMs. With
SUM you have single sign-on to all UTMs. SUM stores device configuration backups centrally to
speed recovery. You can easily define reusable objects to manage and distribute network, services and time-event definitions. Via a specialized wizard you can build, edit and deploy site-tosite VPN tunnels and related policies. You are also able to configure network, mail and web filtering policies for multiple sites or customers to avoid repetitive tasks and save time.
With the real-time monitoring and alerting functionality you can view threat, network and hardware status across your entire estate of UTMs. You also can get daily, weekly, monthly or
annual insights into trends in network utilization and security.
Sophos UTM Manager is a free tool that can be used as part of any Sophos UTM subscription.
Figure 1 Sophos UTM Manager
SUM 4
5
Contents
2 How to get SUM
For getting SUM you have two possibilities. If you, for example, want to test SUM for a while,
you can get a 30-days version with the option to create the license afterwards or you can get a
full package (download link, full license file, installation guidelines) directly.
2.1 Get 30-days version
To get SUM with the 30-days version, proceed as follows:
1. Navigate to the Sophos downloads area.
2. Click at Sophos UTM Manager on Download ISO.
The download dialog opens directly and you get the ISO with 30-days-license.
3. Mount the ISO on a virtual drive or burn a CD and install SUM.
4. Give SUM an IP-address of your network environment so that it's reachable from your
UTMs and the management PC.
5. After installation open SUM in your web browser and make the basic system setup by following the displayed steps.
You can use SUM now for 30 days.
If you want to get a license you have to create a MyUTM account and generate it there. Additional information for the MyUTM account you will find in the MyUTM User Guide. Information
about license installation you will find in the online help of the SUM WebAdmin in the menu Installation > Basic Configuration.
2.2 Get full package
To get the full package, proceed as follows:
1. Navigate to the Sophos downloads area.
2. Click at Sophos UTM Manager on Get full package.
A web form opens.
6
SUM 4
Contents
3. Fill out the web form and submit it.
You will get an email containing installation instructions and your MyUTM account information.
4. Follow the instructions in the email.
Note – It is also possible to mount the ISO-file on an virtual drive instead of burning it
onto a CD-ROM.
Note – Give SUM an IP-address of your network environment so that it's reachable
from your UTMs and the management PC.
5. After installation open SUM in your web browser by entering the IP address
(e.g. 'https://10.1.2.33:4444').
6. Make the basic system setup by following the displayed steps.
7. Log on to SUM with username 'admin' and your password.
You can now configure your SUM and connect to your UTMs.
With the MyUTM account you are able to extend your license or create a new one (in case the
old one expires). Information about license installation you will find in the online help of the
SUM WebAdmin in the menu Installation > Basic Configuration.
SUM 4
7
Contents
3 Configuring SUM
SUM is divided into the WebAdmin and the Gateway Manager. With the Gateway Manager you
are able to configure your UTMs. To configure the Gateway Manager proceed as follows:
1. Log on to SUM WebAdmin (for example with 'https://10.1.2.33:4444').
2. Navigate to Management > Sophos UTM Manager.
3. In the General tab make general settings like language changing and port changing.
The Gateway Manager on default is reachable via Port 4422 (for example
'https://10.1.2.33:4422').
4. In the Access Control tab make the access configuration.
5. In the Device Security tab make device authentication and access control settings.
6. With the Open Gateway Manager tab you can open the Gateway Manager.
Please find additional information about configuring SUM in the SUM WebAdmin help on Management > Sophos UTM Manager.
Figure 2 Configuring SUM
8
SUM 4
Contents
4 Connecting UTMs to SUM
One of the first steps with SophosUTM Manager will be to set up the connections between
SUM and your UTMs. Proceed as follows:
1. Log on to your UTM (for example with 'https://10.1.2.34:4444').
2. Navigate to Management > Central Management > Sophos UTM Manager.
3. Activate SUM by clicking on the toggle switch.
4. Specify the SUM host.
5. On demand use Authentication and provide the same password as specified on the
SUM.
6. Click Apply to save your settings.
SUM is activated now and UTM will connect to SUM. The UTM is now available in
SUM Gateway Manager.
Please find additional information about configuring SUM on UTM in the UTM WebAdmin help
on Management > Central Management > Sophos UTM Manager.
Figure 3 Connecting UTMs to SUM
SUM 4
9