Sophos & Fortinet Firewall Assistance

My network edge relies on a Sophos XG appliance and a Fortinet FortiGate unit. Both devices are in production, but their current configuration is a mix of legacy rules and quick fixes that now interfere with performance and security. I want a seasoned firewall engineer to step in, examine every setting, correct what is wrong, and design a clean, least-privilege rule base.

Scope of work
• Configuration – back up the existing setups, remove or refine redundant rules, and align all interfaces, NAT, VPN, IPS and logging options with best-practice guidelines for Sophos SFOS and FortiOS.
• Troubleshooting – identify and eliminate the intermittent drops we see on site-to-site VPN and outbound web traffic. Validation must include live traffic tests and log review.
• Security policy setup – build a clear, documented policy package that segregates internal zones, controls external exposure, and can be imported or restored easily if needed.

Deliverables are the updated running configurations, the original backups, and a brief hand-over document listing every change made and the reasoning behind it.

Remote access will be provided through HTTPS/SSH; please follow change-control etiquette and keep me informed while you work.