Sophos XGS 87 Next-Gen Firewall Instruction Manual

1. Product Overview

The Sophos XGS 87 is a next-generation firewall designed to provide robust network security for small to medium-sized businesses. It integrates advanced threat protection capabilities, including Xstream Architecture, TLS 1.3 Decryption, Deep Packet Inspection, Next-Gen IPS, Web Protection, and Application Control. This device ensures comprehensive defense against various network threats, offering a secure and reliable network environment.

Image: Sophos XGS Next-Gen Firewall with Xstream Protection. This image displays the Sophos XGS series appliances, highlighting their advanced Xstream Flow Processors for high-performance threat protection.

2. Setup Instructions

2.1 Unpacking and Inspection

Carefully remove the Sophos XGS 87 firewall from its packaging.
Inspect the device for any signs of physical damage. If damage is found, contact your vendor immediately.
Verify that all components listed in the packing slip are present.

2.2 Connecting the Device

The Sophos XGS 87 features multiple ports for network connectivity and management. Refer to the diagrams below for port identification.

Image: Rear panel of the Sophos XGS 87 firewall. This view shows the DC IN 12V power input, COM port, USB port, and the LAN/WAN Ethernet ports (L/LAN, S/PoE, 2/WAN, 4).

Sophos XGS 87 Front Panel Indicators and Ports

Image: Front panel of the Sophos XGS 87 firewall. This view displays the XGS 87 model label, a COM port, a USB port, status LEDs for LAN/WAN activity and speed, and system status indicators.

Power Connection: Connect the provided power adapter to the DC IN 12V port on the rear panel and plug it into a power outlet.
Network Connections:
- Connect your internet service provider's modem or router to the 2/WAN port.
- Connect your internal network devices (switches, computers) to the L/LAN or other available LAN ports.
Console Connection (Optional): For initial configuration or troubleshooting, connect a console cable from your computer to the COM port.
USB Devices (Optional): USB ports can be used for external storage or other compatible peripherals.

2.3 Initial Configuration

Upon first power-on, the device will boot up running Sophos Firewall OS. Initial configuration is typically performed via a web-based interface accessible from a connected computer on the LAN side. Refer to the Sophos documentation for detailed steps on accessing the web interface and completing the initial setup wizard.

3. Operating the Firewall

The Sophos XGS 87 operates by inspecting and controlling network traffic based on configured security policies. Its core functionality revolves around the Sophos Firewall OS, which provides a comprehensive suite of security features.

3.1 Key Protection Features

The XGS 87 includes a 1-year Standard Protection license, offering:

Xstream Architecture: High-performance deep packet inspection and TLS 1.3 decryption.
Network Protection: Intrusion Prevention System (IPS), Advanced Threat Protection (ATP), and SD-RED support.
Web Protection: Web filtering, application control, and secure web gateway features.
Application Control: Granular control over thousands of applications.
Reporting: Extensive logging and reporting capabilities for network visibility.

Image: Sophos XGS Protection Modules. This diagram details the various protection modules available, including Base Firewall, Network Protection, Web Protection, Zero-Day Protection, and Central Orchestration, allowing for customized security deployments.

3.2 Management and Monitoring

The firewall can be managed through its web interface or via the Sophos Central platform. The web interface provides detailed control over all settings, policies, and monitoring tools. Sophos Central offers cloud-based management, allowing for centralized control of multiple Sophos devices and enhanced reporting.

Dashboard: Provides an overview of network status, threats, and system performance.
Policy Configuration: Define firewall rules, NAT policies, VPN settings, and application control policies.
Logging and Reporting: Access detailed logs and generate reports on network activity, security events, and user behavior.

4. Maintenance

Regular maintenance ensures the optimal performance and security of your Sophos XGS 87 firewall.

Firmware Updates: Regularly check for and apply the latest firmware updates to ensure your device has the most current security patches and features. The device has security updates available.
Configuration Backups: Periodically back up your firewall configuration. This allows for quick restoration in case of an issue or misconfiguration.
Log Review: Regularly review system logs and security reports to identify potential threats or anomalies.
Physical Inspection: Ensure the device is in a well-ventilated area and free from dust accumulation. Check all cable connections for security.

5. Troubleshooting

This section provides basic troubleshooting steps for common issues.

5.1 No Power

Verify the power adapter is securely connected to the device and a working power outlet.
Check the power LED on the front panel. If it is off, try a different power outlet or adapter.

5.2 No Network Connectivity

Ensure all Ethernet cables are properly connected to the correct ports (WAN, LAN).
Check the link/activity LEDs on the Ethernet ports. They should be lit or blinking.
Verify your computer's network settings (IP address, gateway) are correctly configured or set to obtain automatically.
Restart the firewall and connected network devices.

5.3 Device Unresponsive / Factory Reset

If the device becomes unresponsive, you may need to perform a factory reset. Locate the Reset button on the rear panel (refer to the rear panel image).
Use a paperclip or similar pointed object to press and hold the reset button for approximately 10 seconds while the device is powered on. This will restore the device to its factory default settings.

6. Specifications

The following table outlines the key technical specifications for the Sophos XGS 87 Next-Gen Firewall.

Image: Technical Specifications for Sophos XGS 87 and XGS 87w. This document provides detailed performance metrics, physical specifications, environmental requirements, and product certifications for the XGS 87 model.

Feature	Specification
Brand	Sophos
Model Name	XGS 87
Model Number	JA8B1CSUS
Operating System	Sophos Firewall OS
Number of Ports	9 (including LAN/WAN)
Data Transfer Rate	3700 Megabits Per Second
Connectivity Technology	Wi-Fi (802.11ac), Ethernet
Security Protocol	WPS (Wireless Protected Setup)
Item Weight	8 Pounds
Control Method	App
Coverage	Protection against various network threats through Xstream Architecture, TLS 1.3 Decryption, Deep Packet Inspection, Next-Gen IPS, Web Protection, and App Control

7. Warranty and Support

The Sophos XGS 87 Next-Gen Firewall includes a 1-Year Standard Protection plan, which typically covers essential security features and basic support during the subscription period. For detailed information regarding your specific warranty coverage and support options, please refer to the documentation provided with your purchase or visit the official Sophos website.

Image: Sophos XGS All Licensing Options. This document outlines various licensing bundles, including Base License, Network Protection, Web Protection, Zero-Day Protection, Central Orchestration, and Enhanced Support options, allowing users to customize their protection.

Sophos offers various support options, including online resources, knowledge bases, and direct technical support. For advanced issues or to inquire about extended support plans, please contact Sophos customer service or your authorized Sophos partner.

Online Resources: Visit the Sophos support portal for documentation, FAQs, and community forums.
Technical Support: Contact Sophos technical support for assistance with product issues.
Enhanced Support: Upgrade options are available for extended hardware warranty and advanced support services.

	Sophos Firewall: Powerful Protection and Performance Explore the Sophos Firewall Xstream architecture, designed to provide robust network security, high performance, and advanced threat protection for businesses of all sizes. Discover features like TLS 1.3 Inspection, Deep Packet Inspection, Application Acceleration, and SD-WAN capabilities.
	Sophos XGS 116(w)/126(w)/136(w) Operating Instructions Comprehensive operating instructions for Sophos XGS 116(w), 126(w), and 136(w) network security appliances, covering installation, configuration, technical specifications, and safety precautions.
	Sophos XGS 116(w)/126(w)/136(w) Operating Instructions This document provides operating instructions for the Sophos XGS 116(w), 126(w), and 136(w) network appliances. It covers installation, configuration, hardware details, technical specifications, safety precautions, and connection information.
	Sophos XGS 2100/2300/3100/3300 Quick Start Guide This guide provides essential information for setting up and connecting your Sophos XGS firewall appliance, including unboxing, initial connections, and basic configuration.
	Sophos XGS Series Appliances: Operating Instructions for XGS 118(w)/128(w)/138 Comprehensive operating instructions for Sophos XGS Series network security appliances, including models XGS 118(w), XGS 128(w), and XGS 138. Covers installation, regulatory compliance, environmental considerations, technical specifications, interfaces, and operational procedures.
	Sophos XGS 118(w)/128(w)/138 Operating Instructions Comprehensive operating instructions for the Sophos XGS 118(w), 128(w), and 138 series network security appliances. This guide covers hardware overview, regulatory compliance, technical specifications, interface details, mounting, and safe operation procedures.

Sophos XGS 87