WS1100 to Sophos XG Web Protection

Question

Hi, 
 We currently have a WS1100 appliance that has served us very well for a number of years. 
 As this is approaching EOL we will have to move to something else. 
 We now have Sophos XG210 and will probably use the Web Protection and App control on there to replace the WS1100. Does anyone know of any guides to help make this transfer easier. Looking at the XG, it does not seem as easy to use and configure as the WS1100. 
 Particularly interested in 
 1. How to add/sync the users from our AD domain, 2. HTTPS scanning Exemptions 3. Certificate Validation 
 Many thanks for any information. 
 Trev

emmosophos · Answer

Hello Tstan, 
 You can just add the forest.com as long as the trusts are there, by default the subdomain child/parent trust should be there. 
 In this case, since it works as in the SWA this should be the same in the XG. 
 Regards,

FormerMember · Answer

Hi tstan , 
 Thank you for reaching out to the Community! 
 Please check out the following KB Articles, and let us know if you have any questions. 
 
 Sophos Firewall: How to integrate Sophos Firewall with Active Directory 
 Sophos Firewall: How to import Active Directory OUs and groups 
 Sophos Firewall: Group membership behavior with Active Directory 
 HTTPS Decrypt and Scan FAQ 
 Sophos XG Firewall: How to bypass the web proxy in Transparent Mode 
 
 Thanks,

WS1100 to Sophos XG Web Protection

Top Replies