Server: Windows Firewall
You can monitor and configure Windows Firewall (and monitor other registered firewalls) on your servers using a Windows Firewall base policy.
You can apply a Windows Firewall base policy to individual servers or to groups of servers.
Other firewalls or your Windows Group Policy settings may affect how the policy is applied on individual servers. We advise that you test any firewall rules you create (locally or via Group Policy) to make sure that communication with Sophos is allowed.
In Monitor Type, select the level of monitoring you want.
Servers will report their firewall status to Sophos Central. This is the default option.
Monitor & Configure Network Profiles
Servers will report their firewall status to Sophos Central. You can also choose whether to block or allow inbound connections on Domain Networks , Private Networks, and Public Networks.
Block (with exceptions): You must set up the exceptions locally on the computer or server. If you don't set up exceptions all inbound connections are blocked.