Sophos consulting

Sophos firewall work that goes beyond the replacement appliance.

JMB provides Sophos firewall engineering, migration planning, configuration review, and troubleshooting. Jaen’s professional experience includes a complete legacy UTM rebuild on an XGS high-availability pair.

Discuss your project

Rebuild the intended behavior, not just the object list.

A firewall migration needs an explanation of what the old configuration does. Objects, policies, NAT, routes, authentication, and VPNs can carry dependencies that are not obvious from the hardware specification.

Jaen can map the source environment, organize the replacement configuration, and work through the services that need to be checked before and after cutover.

Sophos engineering scope.

Migration and configuration mapping

Legacy UTM assessment, XGS planning, interfaces, network objects, policies, NAT, routing, and configuration comparison.

High availability

HA design and implementation work, administrative access, synchronization checks, maintenance planning, and agreed failover validation.

VPN and application access

Remote and site-to-site connectivity, authentication dependencies, route investigation, and the services that need to cross the firewall.

Troubleshooting and handoff

Connectivity investigation, policy and logging review, configuration backups, documentation, and the ongoing support arrangement.

A complete firewall rebuild.

One professional engagement involved replacing a legacy Sophos environment with a new XGS high-availability deployment. The work included mapping the configuration, comparing old and new settings, and dealing with connectivity, VPN, and legacy-service dependencies.

The public summary focuses on the engineering. It omits the client, location, appliance identifiers, addressing, and security configuration.

Read the anonymous project summary

Planning a Sophos change?

Start with the current product family, the intended change, and the services the business cannot lose. We can define the migration or troubleshooting work from there.