Sophos XGS Firewall Zero-Day Exploits: Hardening Enterprise Perimeter Defense

Securing the Administrative Attack Surface

Enterprise firewalls are the primary gateway guarding corporate databases and endpoints. A common operational mistake in Kenyan companies is leaving the Sophos User Portal and WebAdmin interface exposed to the public WAN interface.

Mandatory Access Control Configuration

• Disable WAN WebAdmin: Under Administration > Device Access, uncheck HTTPS and SSH on the WAN zone. Management must occur strictly via trusted internal LAN subnets or dedicated management VPNs.
• Enable Sophos Central Synchronized Security: Link firewalls directly to endpoint agents to automatically isolate compromised workstations from the local network.
• Implement Geo-IP Filtering: Block inbound connection attempts originating from countries where your organization has no legitimate business operations.