Projects
/
Firewall Configuration
Learn how we configured Sophos XG firewall rules and secure remote- access VPN tunnels for a 65-user Chicago manufacturing company needing reliable off-site access.
Business Problem
A 65-user manufacturing company with several remote corporate users needed secure access to on-premise office systems from home and field locations. Their Sophos XG firewall had never been properly configured, leaving remote access either completely blocked or dangerously open without authentication.
Our Solution
We assessed the Sophos XG configuration, created role-based firewall rules for remote users, set up SSL VPN with Azure AD authentication, and implemented VLAN segmentation to isolate corporate traffic from guest networks β all within a 3-day engagement.
Project Plan
1
Firewall Audit
Reviewed existing Sophos XG ruleset, identified misconfigured any-to-any rules and unused policies. Documented current network topology across all VLANs.
2
Segmented corporate, guest, and IoT traffic into separate VLANs with inter-VLAN routing rules enforced at the firewall layer.
3
SSL VPN Setup
Configured Sophos SSL VPN with Azure AD SAML authentication. Deployed VPN client to all remote users via Intune device management support β zero manual installs required.
4
Policy Hardening & Testing
Applied IPS policies, enabled WAF rules for internal web apps, and ran penetration tests to confirm no unintended external exposure remained.
Outcomes
65
+
Users with secure remote access
3
Days
Full configuration and go-live
4
VLANs
Segmented network for full isolation
"Our client had a manufacturing floor with flat network architecture β everything on one VLAN. Inputiv redesigned the whole thing with Sophos XG, proper segmentation, and SSL VPN. Three days, 65 users, no downtime on the production line. Exactly what we needed."
β Technical Director Β· MSP, Chicago
Tech Stack
π₯ Sophos XG
π SSL VPN
βοΈ Azure AD SAML
π± Intune
Project Details
Users
65 users
Firewall
Sophos XG
Delivery model
Fixed-cost project
Need firewall work?
We work with Sophos, Fortinet, Palo Alto and more. Get a free audit.
Discuss your project β