Sophos XGS 126 Next-Gen Firewall User Manual

1. Introduction

This manual provides essential information for the installation, operation, maintenance, and troubleshooting of your Sophos XGS 126 Next-Gen Firewall. Please read this manual thoroughly before using the device to ensure proper setup and optimal performance. The Sophos XGS 126 is designed to provide advanced network security for small to medium businesses and branch offices.

2. Package Contents

Verify that all items are present in your package:

• Sophos XGS 126 Appliance
• US Power Cord
• Ethernet Cable
• Quick Start Guide
• Safety and Regulatory Information

3. Physical Overview

3.1 Front Panel

The front panel of the Sophos XGS 126 features status indicators and a USB port.

Image: Front view of the Sophos XGS 126 appliance, showing LED indicators for status, power, and network activity, along with a USB port.

3.2 Rear Panel

The rear panel provides all necessary ports for power, network connectivity, and console access.

Image: Rear view of the Sophos XGS 126 appliance, detailing the various ports including power inputs (DC IN 1, DC IN 2), console port (COM), USB ports, and multiple Ethernet ports (LAN, WAN, SFP).

• Power Inputs (DC IN 1, DC IN 2): Connect the power adapter here. The device supports redundant power supplies.
• COM Port: RJ45 console port for direct management access.
• USB Ports: For connecting external devices or for initial setup via USB.
• LAN Ports (1-8): Gigabit Ethernet ports for connecting internal network devices.
• WAN Ports (9, 10): Gigabit Ethernet ports for connecting to external networks (e.g., internet).
• SFP Ports (11, 12): Small Form-Factor Pluggable ports for fiber optic or additional copper connectivity.
• Reset Button: Used to reset the device to factory defaults (refer to Troubleshooting section).

4. Setup Instructions

4.1 Initial Placement

Place the Sophos XGS 126 on a stable, flat surface in a well-ventilated area. Ensure adequate space around the device for airflow. Avoid placing it near heat sources or in direct sunlight.

4.2 Connecting Power

1. Connect the provided power cord to the DC IN 1 port on the rear panel.
2. Plug the other end of the power cord into a grounded electrical outlet.
3. The device will power on automatically. Observe the front panel LEDs for boot-up status.
4. For redundant power, connect a second power cord to the DC IN 2 port and another outlet.

4.3 Network Connections

1. Connect your internet service provider's modem or router to one of the WAN ports (e.g., Port 9) using an Ethernet cable.
2. Connect your internal network switch or a computer directly to one of the LAN ports (e.g., Port 1) using an Ethernet cable.
3. If using SFP modules, insert them into the SFP ports (11, 12) and connect the appropriate fiber or copper cables.

4.4 Initial Configuration Access

To access the web-based management interface:

1. Ensure your computer is connected to a LAN port of the Sophos XGS 126.
2. Open a web browser and navigate to the default IP address (typically https://172.16.16.16).
3. Follow the on-screen instructions of the setup wizard to configure basic network settings, administrator credentials, and initial security policies. Refer to the Quick Start Guide for default login credentials.

5. Operating Instructions

5.1 Management Interface

The Sophos XGS 126 is managed primarily through its web-based interface. After initial setup, you can access it using the configured IP address and administrator credentials.

• Dashboard: Provides an overview of system status, network activity, and security alerts.
• Firewall Rules: Configure rules to control network traffic flow and access.
• VPN: Set up Virtual Private Networks for secure remote access or site-to-site connections.
• Threat Protection: Manage features like Intrusion Prevention System (IPS), Advanced Threat Protection (ATP), and web filtering.
• Logging & Reporting: Monitor logs and generate reports on network usage and security events.

5.2 LED Indicators

The front panel LEDs provide visual status of the device:

• Power LED: Indicates power status (e.g., solid green for normal operation).
• Status LED: Indicates overall system health (e.g., green for healthy, amber for warnings, red for critical errors).
• Network Activity LEDs: Located next to each port, indicate link status and data activity.

6. Maintenance

6.1 Firmware Updates

Regularly update the device firmware to ensure optimal performance, security, and access to new features. Firmware updates can be managed through the web interface.

1. Navigate to the firmware update section in the management interface.
2. Check for available updates or manually upload a firmware file downloaded from the official Sophos website.
3. Follow the on-screen prompts to complete the update process. The device will reboot during this process.

6.2 Configuration Backup and Restore

It is recommended to regularly back up your device configuration. This allows for quick recovery in case of unexpected issues or when migrating settings to a new device.

• Access the backup/restore section in the web interface.
• Save the configuration file to a secure location.
• To restore, upload the saved configuration file through the same interface.

6.3 Physical Cleaning

Keep the device clean and free from dust to ensure proper ventilation and prevent overheating. Use a soft, dry cloth for cleaning. Do not use liquid cleaners or aerosols.

7. Troubleshooting

7.1 No Power

• Verify the power cord is securely connected to both the device and a working electrical outlet.
• Check if the power outlet is functional by plugging in another device.
• If using a power strip or UPS, ensure it is turned on.

7.2 Cannot Access Web Interface

• Ensure your computer is connected to a LAN port of the firewall.
• Verify your computer's IP address is in the same subnet as the firewall's management IP (e.g., if firewall is 172.16.16.16, your computer should be 172.16.16.x with a subnet mask of 255.255.255.0).
• Try clearing your browser's cache or using a different browser.
• Confirm the firewall's IP address has not been changed from the default.

7.3 Network Connectivity Issues

• Check all Ethernet cable connections for looseness or damage.
• Verify the link/activity LEDs on the ports are lit.
• Review firewall rules in the management interface to ensure they are not blocking legitimate traffic.
• Test connectivity to the internet from a device connected to the firewall.

7.4 Factory Reset

A factory reset will erase all configurations and restore the device to its original factory settings. This should be used as a last resort.

1. With the device powered on, locate the Reset button on the rear panel.
2. Using a paperclip or similar pointed object, press and hold the Reset button for approximately 10 seconds.
3. Release the button when the Status LED changes color or flashes.
4. The device will reboot with factory default settings.

8. Specifications

The following table details the technical specifications of the Sophos XGS 126 Next-Gen Firewall:

Image: Detailed specification sheet for Sophos XGS Series Desktop models, including the XGS 126, showing performance metrics, physical interfaces, power supply, and environmental conditions.

9. Warranty and Support

9.1 Product Warranty

Sophos products typically come with a limited hardware warranty. For detailed information regarding the warranty period and terms for your Sophos XGS 126, please refer to the warranty documentation included with your product or visit the official Sophos website.

9.2 Technical Support

For technical assistance, product documentation, and software downloads, please visit the official Sophos Support Portal:

• Sophos Support Portal: https://support.sophos.com
• Sophos Community: https://community.sophos.com

Before contacting support, please have your product model (XGS 126) and serial number ready. The serial number is typically located on a label on the bottom or rear of the appliance.