SophosFirewall.Firewall

Author(s)

• Jan Weis

Tags

Sophos Firewall API XGS SFOS NAT TLS Security

Functions

Get-SfosFirewallRule New-SfosFirewallRule Set-SfosFirewallRule Remove-SfosFirewallRule New-SfosFirewallRuleNetworkPolicy New-SfosFirewallRuleUserPolicy New-SfosFirewallRuleHTTPBasedPolicy Get-SfosFirewallRuleGroup New-SfosFirewallRuleGroup Set-SfosFirewallRuleGroup Remove-SfosFirewallRuleGroup Add-SfosFirewallRuleGroupMember Remove-SfosFirewallRuleGroupMember Get-SfosNATRule New-SfosNATRule Set-SfosNATRule Remove-SfosNATRule Get-SfosSSLTLSInspectionRule New-SfosSSLTLSInspectionRule Set-SfosSSLTLSInspectionRule Remove-SfosSSLTLSInspectionRule Get-SfosSSLTLSInspectionSettings Set-SfosSSLTLSInspectionSettings

PSEditions

Desktop Core

Dependencies

• • SophosFirewall.Core (>= 1.4.2)

Release Notes

1.4.2: New-SfosFirewallRule and Set-SfosFirewallRule now cover the user and HTTP-based policy types, which were previously refused, and expose the exclusion lists of network and user policies. New-SfosFirewallRuleUserPolicy and New-SfosFirewallRuleHTTPBasedPolicy build the matching policy objects. A user rule sent without identity matching is turned into a network rule by the firewall while success is reported, so both write cmdlets refuse that combination. An HTTP-based rule requires the hosted address to name an interface and at least one access path; without both the firewall rejects the request without saying which field is missing.