Skip to content

Installing on KVM

You can install a Sophos Firewall QCOW2 disk on the KVM platform.

  1. Go to Sophos Firewall free trial and download the .zip file containing the QCOW2 disk. Extract and save the disk on the device that has the virt-manager installed.
  2. To connect to the server, open the virt-manager and go to File > Add Connection.
  3. Enter a name and select the QEMU/KVM connection.

  4. To import the Sophos Firewall image for the primary disk, select the .qcow2 file and select Open.

  5. Select the storage location and select Forward.

  6. Set virtual memory (vRAM) to 4096 MB or higher and CPU to 1.

  7. Select the following Advanced options:

    1. Network interface of the host device.
    2. Fixed MAC address, if required.
    3. Set Virt Type to kvm.
    4. Chipset architecture.
    5. Select Customize configuration before install and select Finish.
  8. Specify the advanced settings for Disk 1 (primary disk):

    Disk bus: Virtio

    Storage format: qcow2

  9. To add the auxiliary disk, go to Add Hardware > Storage. Under Select managed or other existing storage, select the auxiliary disk.

  10. To configure the network settings for the appliance, go to Add Hardware > Network. Specify the host device, MAC address and device model.

  11. To specify the network interface cards.

    1. For Virtual Network Interface (NIC 1), set Device model to Hypervisor default.

    2. For Virtual Network Interface (NIC 2), set Device model to Virtio.

  12. Select Begin Installation.

    Sophos Firewall will be installed on the server.

  13. If you're using Proxmox, go to the VM settings and turn off Use QEMU Guest Agent.

    You must do this to ensure the firewall VM works properly.

  14. Configure Sophos Firewall.

    1. Enter the administrator password admin.
    2. Accept the Sophos End User Terms of Use.

      The Main menu appears.

    3. From the management device, go to

    4. Select Start to open the initial setup wizard and complete the basic configuration.


      The wizard won't start if you've changed the default password from the CLI console.

You need to activate and register Sophos Firewall.