Sophos XGS 107 Standard Protection Bundle User Manual

1. Product Overview

The Sophos XGS 107 is a network security appliance designed to provide comprehensive protection for your network. This bundle includes a 12-month license for Standard Protection, which encompasses essential security features and support services.

The Standard Protection Bundle includes:

Base License: Provides core networking, wireless capabilities, Xstream Architecture, unlimited remote access VPN, site-to-site VPN, and reporting functionalities.
Network Protection: Features Xstream TLS and DPI engine, Intrusion Prevention System (IPS), Advanced Threat Protection (ATP), Security Heartbeat, SD-RED VPN, and reporting.
Web Protection: Includes Xstream TLS and DPI engine, web security and control, application control, and reporting.
Enhanced Support: Offers 24/7 support, feature updates, and an advanced replacement hardware warranty for the term of the license.

Sophos XGS 107 Network Security Appliance front view — Figure 1: Front view of the Sophos XGS 107 Network Security Appliance. This image shows the device's compact form factor, Sophos branding, and indicator lights for various network activities and status.

2. Setup Instructions

Follow these general steps to set up your Sophos XGS 107 appliance. For detailed, model-specific instructions, refer to the official Sophos documentation available on their support portal.

Unpack the Appliance: Carefully remove the Sophos XGS 107 from its packaging. Verify all components are present.
Physical Placement: Place the appliance in a well-ventilated area, away from direct sunlight and heat sources. Ensure proper airflow around the device.
Connect Power: Connect the power adapter to the appliance and then to a power outlet. Do not power on the device yet.
Connect Network Cables:
- Connect your internet service provider's modem/router to the WAN port (typically Port 2 or a dedicated WAN port) on the XGS 107.
- Connect your internal network switch or a computer directly to a LAN port (e.g., Port 1) on the XGS 107.
Power On: Connect the power cable to the appliance and then to a power outlet. The device will begin its boot sequence. Wait for the status indicators to stabilize.
Initial Configuration:
- Access the appliance's web-based management interface from a computer connected to a LAN port. The default IP address is typically 172.16.16.16.
- Follow the on-screen wizard to complete the initial setup, including setting up network interfaces, administrator passwords, and registering your license.
- Alternatively, you can use the console port for command-line interface (CLI) configuration.
Sophos Central Integration: For centralized management and reporting, integrate your XGS 107 with Sophos Central. This allows for easy deployment and management of security policies.

Sophos XGS 107 Network Security Appliance with ports and indicators — Figure 2: Close-up view of the Sophos XGS 107 front panel, showing the USB and COM ports, and the LED indicators for link activity, speed, and overall device status.

3. Operating the Sophos XGS 107

The Sophos XGS 107, with its Standard Protection Bundle, offers robust features to secure your network. Management is primarily performed through the web-based interface or Sophos Central.

Key Operational Features:

Network Configuration: Configure WAN, LAN, and other network interfaces. Set up routing, VLANs, and DHCP services.
Firewall Rules: Create and manage firewall policies to control traffic flow between network zones.
VPN Management: Establish secure remote access VPNs (SSL VPN, IPsec) and site-to-site VPNs for connecting multiple locations. SD-RED VPN is also supported for simplified branch office connectivity.
Web Filtering and Application Control: Implement policies to filter web content, control access to specific applications, and enforce safe browsing. The Xstream TLS and DPI engine provides deep packet inspection for encrypted traffic.
Intrusion Prevention System (IPS): Protect against network-based attacks by detecting and blocking malicious traffic patterns.
Advanced Threat Protection (ATP): Identify and block advanced threats, including zero-day attacks and botnets.
Security Heartbeat: Integrate with Sophos Endpoint Protection for synchronized security, allowing the firewall to automatically respond to threats detected on endpoints.
Reporting and Logging: Monitor network activity, security events, and user behavior through comprehensive reports and logs, accessible via the appliance or Sophos Central.

Sophos XGS 107 Xstream Protection Bundle Licensing Options — Figure 3: An overview of the Xstream Protection Bundle licensing options, detailing the features included in Base License, Network Protection, Web Protection, and Enhanced Support.

Sophos Central Management Dashboard Example — Figure 4: Example of a Sophos Central management dashboard, illustrating centralized control and monitoring capabilities for Sophos security solutions.

4. Maintenance

Regular maintenance ensures the optimal performance and security of your Sophos XGS 107 appliance.

Firmware Updates: Regularly check for and apply the latest firmware updates. These updates often include security patches, bug fixes, and new features. Sophos Central can assist with managing firmware updates across multiple devices.
Configuration Backups: Periodically back up your appliance's configuration. This allows for quick restoration in case of a system failure or misconfiguration. Sophos Central offers cloud-based backup options.
Monitor System Health: Use the appliance's dashboard or Sophos Central to monitor system resources, network traffic, and security alerts.
Review Logs and Reports: Regularly review logs and security reports to identify potential threats, unusual activity, or performance issues.
Physical Inspection: Ensure the appliance remains in a clean, well-ventilated environment. Check cables for secure connections.

5. Troubleshooting

If you encounter issues with your Sophos XGS 107, consider the following troubleshooting steps:

Check Power and Connections: Ensure the appliance is powered on and all network cables are securely connected to the correct ports. Verify LED indicators for power and link status.
Verify Network Configuration: Confirm that IP addresses, subnet masks, and gateway settings are correctly configured for your network interfaces.
Access Web Interface: Try accessing the web-based management interface. If inaccessible, attempt to connect via the console port for diagnostics.
Review Logs: Examine system logs for error messages or warnings that might indicate the cause of the problem. Sophos Central provides detailed logging and reporting.
Restart Appliance: As a basic troubleshooting step, try restarting the appliance.
Consult Documentation: Refer to the official Sophos XGS 107 documentation and knowledge base for specific troubleshooting guides.
Contact Support: If the issue persists, contact Sophos Enhanced Support for assistance.

6. Specifications

Key technical specifications for the Sophos XGS 107 appliance:

Feature	Detail
Model Name	XGS 107 Standard Protection Bundle
Item Model Number	XGS 107
Brand	Sophos
ASIN	B095KZT3QL
UPC	739420468557
Connectivity Technology	Wi-Fi (for management/wireless features, if applicable)
Wireless Communication Standard	802.11ax (if applicable for integrated wireless)
Security Protocol	WPS (Wi-Fi Protected Setup, if applicable for integrated wireless)
Control Method	App (Sophos Central), Web Interface, CLI
Recommended Uses	Security
Manufacturer	Sophos

7. Warranty and Support

Your Sophos XGS 107 Standard Protection Bundle includes comprehensive support and warranty services for the duration of your 12-month license.

Enhanced Support: Provides 24/7 technical assistance to help resolve any issues you may encounter.
Feature Updates: Ensures your appliance receives the latest software features and security enhancements throughout the license term.
Advanced Replacement Hardware Warranty: In the event of a hardware failure, Sophos offers an advanced replacement service to minimize downtime.

For further details on warranty terms and to access support resources, please visit the official Sophos support website or contact your Sophos partner.

Sophos Central provides a unified platform for managing your Sophos products, including access to support resources and monitoring device health.

	Sophos Firewall: Powerful Protection and Performance Explore the Sophos Firewall Xstream architecture, designed to provide robust network security, high performance, and advanced threat protection for businesses of all sizes. Discover features like TLS 1.3 Inspection, Deep Packet Inspection, Application Acceleration, and SD-WAN capabilities.
	Sophos XGS 87(w)/107(w) Quick Start Guide A comprehensive guide to quickly set up your Sophos XGS 87(w) or 107(w) firewall, covering unboxing, hardware connections, network configuration, and initial console access for network security.
	Sophos UTM Manager Administration Guide for Gateway Manager Comprehensive administration guide for Sophos UTM Manager (SUM) version 4.300, detailing setup, configuration, monitoring, maintenance, and reporting for Sophos gateway products. Essential for managing network security infrastructure.
	Sophos XGS 116(w)/126(w)/136(w) Operating Instructions Comprehensive operating instructions for Sophos XGS 116(w), 126(w), and 136(w) network security appliances, covering installation, configuration, technical specifications, and safety precautions.
	Sophos XGS 116(w)/126(w)/136(w) Operating Instructions This document provides operating instructions for the Sophos XGS 116(w), 126(w), and 136(w) network appliances. It covers installation, configuration, hardware details, technical specifications, safety precautions, and connection information.
	Sophos XGS 2100/2300/3100/3300 Quick Start Guide This guide provides essential information for setting up and connecting your Sophos XGS firewall appliance, including unboxing, initial connections, and basic configuration.

Sophos XGS 107