Short answer
FirstNet manages the firewall itself, from setup and policy to updates, monitoring, approved changes and incident response. You stay responsible for your internal LAN, endpoints, cabling, ISP handoffs and apps, and for giving accurate inputs.
In detail
Who does what:
- FirstNet: the firewall platform, setup, applying policy, firmware and signature updates, monitoring, approved changes and incident response, within the contracted scope. For hosted firewalls, FirstNet also runs the hosting platform.
- You: approve scope, design inputs and changes through your authorised technical contacts.
- You: supply correct rules, NAT and routing needs, VPN peer details, certificates, addressing and ISP details.
- You: own those items unless agreed separately, plus your overall compliance position and governance.
Onsite hands-and-feet support is not part of the standard service. Full network redesigns, security audits and penetration tests are scoped as separate work.
With Sophos, incident response on your endpoints is out of scope unless you contract Sophos MDR. Agreeing this split at the start avoids gaps after go-live.
Source: FirstNet Hosted Firewall & Network Security service page →
Didn’t answer your question?