How to replace Sophos SG by Meraki + Secure Connect

[Daniel-BC]

Hi Experts,

as a consultant I find myself challenged to replace existing Sophos SG Firewall with Meraki + Secure Connect. At present the end customer has set some rules, which seem not to be replaceable 1-2-1. How do we solve the following requests:

a) Masking to create DNAT rules

b) transparent proxy

c) Sophos RED has a (permanent) connection to external service providers, restriction of rights to SQL access

d) Not a full web application firewall.
e) Live firewall protocol for problem analysis not available

Hoping for your expertise, how to offer the same or even better solution by using Meraki and Secure Connect. Thank you in advance!
Daniel

[cmr]

As someone who managed Sophos SG and XG for quite a few years, can you expand a bit on what exactly you want as a-d are correct, but there might be ways to cover them off.

For e) this is now available, see below:

[Daniel-BC]

Thank you cmr for taking this topic.
How to cover "a-d" off by using MX (or Meraki in general) and Secure Connect, that is exactly my lack of knowledge. Can you inform me, high level, what the solution would be?
best wishes 🙂  

[RobustMeraki]

Hi everyone,

I think what Daniel is trying here is to get his points a-e which Sophos already offers - to replace it with a Meraki Solution and if needed adding Secure Connect or Cisco's Security Softwares to it. 

It should be fully able to replace the exisiting Sophos solution that the customer is using. If at all this is not doable directly as Sophos does it are there any workarounds to it with Meraki?

[cmr]

C is Meraki's AutoVPN, I've used both RED and AutoVPN for more than five years and they have similarities, I'd say the Meraki AutoVPN is more resilient, easier to use and slightly less configurable.  I prefer AutoVPN over RED.

D isn't an MX in my experience, a Cisco FirePower device running FTD is closer to an SG for more advanced features like that.