Sophos XG 125 Central Orchestration

Key feature

SD-WAN

As a security administrator, you know the challenges of manually creating VPN connections between multiple firewalls. Sophos Central Orchestration is a powerful solution that greatly simplifies this task. It allows you to create VPN connections in seconds and with just a few clicks, and manage complex network structures.

With Sophos Central Orchestration, you can quickly and efficiently create complex network structures such as full-mesh networks, hub-and-spoke models, and tunnel setups. In addition to VPN connections, Sophos Central Orchestration provides a variety of SD-WAN features that improve network performance and increase network resilience. Not only will you save time and effort, but you'll also benefit from improved network performance and security.

Various network models that can be created using Sophos Central Orchestration:

Full mesh networks: This network design is characterized by each device being directly connected to every other device. With four firewalls, you would need six separate VPN connections, which is calculated by the formula n(n-1)/2, where n is the number of firewalls. With six firewalls, there would be 15 connections, and with ten, there would be as many as 45. This model provides maximum redundancy and performance, as data can be sent directly from any device to any other without being routed through an intermediate device.

Hub-and-spoke models: In this model, all devices are connected to a central device, the “hub”. This acts as an intermediary for communication between the individual “spokes” (the devices). With four firewalls, each firewall would be connected only to the hub, requiring a total of three VPN connections. With six firewalls, there would be five connections, and with ten firewalls, there would be nine. This model is easier to manage and requires fewer connections than a full mesh network, but may provide less redundancy and performance because all data must be routed through the hub.

Tunnel setups: In a tunnel setup, private network data and communications are sent securely over public networks such as the Internet. Data is encrypted before sending and decrypted upon receipt to ensure security and privacy. VPN connections are a common example of tunneling. With Sophos Central Orchestration, you can set up VPN tunnels between your firewalls easily and efficiently.

Overall, Sophos Central Orchestration enables faster, easier and more efficient management of VPN connections between multiple firewalls. This makes your job as an admin much easier while improving the performance and resilience of your network. With Sophos Central Orchestration, you can implement all these network designs and more quickly and easily, minimizing complex configuration tasks.