FAQ

Do I need security solutions beyond what Microsoft Azure provides?

Microsoft Azure promotes a shared responsibility model, so it is important to understand the difference between security measures Microsoft implements and manages versus security measures that you must implement and manage. Microsoft actively manages the security of the Azure cloud, while you retain responsibility for managing and maintaining the security of the applications and data you place in the Azure cloud. You can learn more by visiting the Microsoft Azure Shared Responsibilities for Cloud Computing page.

What is Sophos Firewall on Microsoft Azure?

Sophos Firewall is a next-generation firewall you can select and launch from within the Microsoft Azure Marketplace. Sophos Firewall deploys as an all-in-one solution that combines advanced networking, and protections such as Intrusion Prevention (IPS), and web application firewalling (WAF), as well as user and application controls. Sophos Firewall is designed to help you protect your Azure-based workloads against advanced threats.

How is Sophos Firewall on Azure different than the Sophos Firewall that I run on-premises?

Sophos Firewall on Azure offers the same features and benefits as Sophos Firewall running on-premises, but has been optimized to run in the Microsoft Azure cloud. For example you can use Azure Traffic Manager and Azure Load Balancer to help distribute traffic to your Firewall on Azure workers. This allows you to scale your protection up or down to match the capacity and protection requirements of your applications and workloads. You can use Azure Resource Manager templates to specify your Firewall configuration, and all of your configuration information is stored in the Azure cloud.

More on Sophos Firewall

What is Sophos Server Protection?

Sophos Central Server Protection is a next-generation anti-malware product that in not yet in the Microsoft Azure Marketplace, but can be purchased BYOL to use in Azure. Sophos Server Protection protects servers and server images (VMs) from malicious attacks using traditional and next-generation methods, including CryptoGuard anti-ransomware, Malicious Traffic Detection and Server Lockdown for application whitelisting.

How does it get deployed in Azure?

The Server Protection in Azure guide tells you how to do the following on Windows or Linux servers:

• Deploy VMs with Sophos Server Protection Agent when launched.
• Create an image with Sophos Server Protection Agent.
• Deploy a new VM with a Sophos agent from an image.

How is it licensed?

Sophos Central Server Protection is licensed per server, with a choice of the Standard or Advanced licenses depending on the features desired. Sophos tracks license usage information in your Sophos Central management console, so you simply need to select the number of Server Protection licenses based on the estimated number of servers. Sophos Central will count and indicate the number of Server Protection agents actually in use.

More on Sophos Server Protection

Does Sophos Firewall on Azure leverage other Microsoft Azure services?

Yes. Sophos Firewall on Azure leverages a number of Microsoft Azure services including Azure Traffic Manager, ExpressRoute, Azure Load Balancer, Azure Active Directory and more. For example, you can use Azure Traffic Manager and Azure Load Balancer to help distribute traffic to your Firewall on Azure workers. This allows you to scale your protection up or down to match the capacity and protection requirements of your applications and workloads. You can use Azure Resource Manager templates to specify your Firewall configuration, and all of your configuration information is stored in the Azure cloud.

How do I get started with Sophos Firewall on Azure?

Getting started with Sophos Firewall on Azure is simple. Visit the Microsoft Azure Marketplace and select Sophos Firewall. It is available as a preconfigured virtual machine. Use Azure Resource Manager templates to speed deployment, or customize the configuration to meet your needs.

How is Sophos Firewall on Azure licensed?

Sophos Firewall on Azure offers you 2 licensing options – pay-as-you-go (PAYG) or bring-your-own-license (BYOL). PAYG licensing allows you to get started with the least amount of friction, so you can evaluate the Firewall solution and pay only for what you use. BYOL allows you to bring a license that you have purchased from a Sophos Partner, often at a discount from PAYG.

Is Sophos Firewall on Azure available for free trial?

Yes. Sophos Firewall on Azure is available for a 30-day free trial. At the end of your free trial your Sophos Firewall on Azure will convert to the normal PAYG rate.

How much does Sophos Firewall on Azure cost?

The cost of Sophos Firewall on Azure depends on whether you choose PAYG or BYOL. Pricing consists of 2 variables including the hourly Sophos software cost and the hourly Azure Virtual Machine (VM) cost. For PAYG you will pay the hourly sum of the Sophos software and Azure VM costs. For example, in the Eastern U.S., running Sophos Firewall on Azure with a D2 VM, the software cost is $0.70/hr and the VM cost is $0.28, for a total hourly cost of $0.98. If you choose to BYOL, you only pay for the hourly VM cost, because you are bringing a license for which you’ve already paid. You can visit the Sophos Firewall on Azure listing for the latest pricing information on both PAYG and BYOL. 

How can I get support for issues I encounter with Sophos Firewall on Azure?

You can get Sophos support by phone and email. You may receive additional support, including Enhanced Plus Support, if you purchase a BYOL license and a support contract through a Sophos Partner. Finally, you can also visit the community-driven support site.