Assigning a firewall to the group in central will apply a default configuration to the firewall

Question

Hello All, 
 I am planning to add my all Sophos device to a group for managing them centrally for providing internet access to employee. I don't want to add same rule on 3 firewall again and again i want to add them one time only. 
 My doubt are as follows 
 1.If i add 3 firewall to same group and create a new rule through manage policy option under the group setting will it get synced for all the firewalls. 
 2.Will adding 3 firewall in same group affect my current local firewall rules for all 3 firewall as they rules are created as per the business need for the particular region. 
 3 consider if i configure a rule on local firewall 1 will it affect the firewall 2 and 3 or its scope will be local. 
 4.Do all firewall must be on same OS version. and do all firewall must have same license i got 1 basic license and 2 firewall with Xstream bundle. 
 
 I found one article with respect to same but there is no clarity .It would be a great help for any suggestion to this doubts. 
 community.sophos.com/.../447396

Vivek Jagad · Accepted Answer

1.) Yes, it will be pushed across that group and will be created under all the FWs in that group. 2.) Adding multiple FW's to a group will allow us to manage in a better way and it will not affect the local firewall rules unless you create new rules from the cloud with a higher precedence. 3.) We can create FW rules either to a single FW by logging onto it from the Central and it will be local to that FW alone. If you're creating FW rules to a GROUP in Central then it will affect all the FW's present in the group. 4.) The firewalls should be on the same version if HA is enabled. ===================================================== Additionally Notes : > The local admin cannot modify any rules created from the Central. > The only setting that can be modified is the objects. > The rules can only be placed either at the top or bottom. Drag rule feature is not available in the Web-admin > Deregistering/Detaching the firewall from Sophos Central will remove all the FW rules created from Central. > There are no default CM rules available If a post solves your question please use the 'Verify Answer' button.

Assigning a firewall to the group in central will apply a default configuration to the firewall

Top Replies

Submitted a Tech Support Case lately from the Support Portal?