Sophos Central Firewall Management - synchronize in both directions

Question

Hello, 
 I have an XG virtual appliance in my testlab with configured central synchronisation to my Sophos central account. 
 So far its working and I can manage my firewall rules from the sophos central management that are synchronisized to my virtual sophos xg appliance. 
 But for now its only syncing the rules from the central management to the xg appliance but not in the way from the xg to the central management. 
 So how can I configure that the already existings firewall rules on the xg firewall are synced to the central management automatically? 
 I dont found a setting to sync the firewall settings in both directions. How can I do this in the management or firewall settings? 
 Thanks and regards, 
 Florian

LuCar Toni · Accepted Answer

Central can currently Import the "current config" while creating a new group. This will reflect the current status. Working on this group, you can config the new settings on Central and sync those changes back to firewall. 
 Next step is "locking of configs" to avoid changes on Firewall. 
 A sync from Firewall to Central is likely a issue, as it open new issues "What happens if you change it on the firewall, will/should it change on all other firewalls?" etc. There are several issues, therefore the next step is to lock the objects on firewall itself to avoid this mismatch.

LuCar Toni · Answer

The object locking is not implemented yet and is on the roadmap for the next thing to do. 
 Zone concept is not something, you can import, because the zone concept is "per firewall". Therefore if you have a zone, you need to specify the zone via dynamic object per firewall first and then you can use the object within your firewall rule.

Sophos Central Firewall Management - synchronize in both directions

Top Replies