Sophos Firewall Setup & Install

Project Inclusions

Analysis & High level Sophos design.

Configure Sophos UTM for as per high level design including: 

• Firmware Upgrade.
• Base UTM setup. 
• Basic Web Proxy Filtering configuration for single user group. 
• Enable IPS & Advanced Threat Protection.
• Configure 5 Basic Firewall Rules.
• Configure 3 port forwards. 
• Onsite Installation.
• 3x Static Route configuration for MPLS private network traffic.
• Project Coordination & Logistics.

Project Exclusions

• Troubleshooting and rectification of any existing Exchange, Active Directory, server, storage or network related issue that is not related to the deliverable or is outside the scope of the project.
• Installation of any software on user workstations and laptops, except where specified in this document.
• Cabling and electrical work, resolution of issues directly attributable to vendor hardware or software faults.
• Any work outside business hours.
• Configuration of any VPN Clients.
• Post implementation support.
• Any item not listed explicitly in the Project Inclusions Section.

Technical Assumptions

• Sophos UTM is compatible with all current local and web based applications in use.
• Sophos device does not support QoS over IPSEC VPN and will not be required for this solution.
• There is sufficient rack capacity with a shelf if unit isn’t rack mountable.
• There is sufficient power including UPS at site.
• There are no VLAN’s required and the network is a flat network.

General Assumptions

• During the project, Technical Design authority will be jointly shared by IT Hardware Shop and will operate within the scope of the existing technical boundaries.
• All the changes to the technical environment will be jointly assessed by (You) ‘The Company’ and IT Hardware Shop.
• (You) ‘The Company’ will provide a resource to assist with logistics, scheduling, implementation and escalation during this project engagement.
• Current Infrastructure Resources at each site (network, rack space, backups and environmental factors) are ready to support this project.
• Additional infrastructure can be added to this engagement, provided there is an assessment done by both (You) ‘The Company’ and IT Hardware Shop, of the impact on the technical boundary of the engagement.

Specific Client Responsibilities

• (You) ‘The Company’ to provide any required firewall policies.
• (You) ‘The Company’ to provide required access to complete the project.
• (You) ‘The Company’ to ensure switching hardware meets and VLAN requirements.

General Client Responsibilities

• Check the inclusions, exclusions and identify any issue prior to the purchase of this service.
• Ensure working conditions that are conducive for the successful completion of the project including suitable office space, internet and telephone access.
• Ensure sufficient onsite and remote access to the Data Centre or environments where the physical hardware is expected to be hosted.
• Provide access to the documentation, staff and resource required to accurately deliver the project in a timely manner. This includes system and network administrator with the ability to affect changes to key directory, backup, server, network and storage systems.
• Liaise with the internal Change Management team for approval and scheduling of any Changes/Outages and manage internal stakeholder expectations.
• Preview and approve the documentation and other deliverables within the project timeframes.
• Ensure all current systems (e.g. Directory Services, Switching, Storage) affected by the scope are in a healthy state and backed up. Ensure that all new systems are backed up using the existing backup system.

By purchasing this Professional Service (You) ‘The Company’ acknowledge that (You) ‘The Company’ have read, understand and accept the terms and conditions as listed above.