Sophos XGS 108W (Gen2) Wireless Security Appliance User Manual

1. Product Overview

The Sophos XGS 108W (Gen2) is a wireless security appliance designed to provide robust network protection for small to mid-size businesses. It integrates both wired and wireless capabilities, featuring 6 x 2.5 GE copper ports, 1 x SFP fiber port, and Wi-Fi 6 support. This appliance delivers high-performance security with up to 12.5 Gbps firewall throughput. Key functionalities include Deep Packet Inspection (DPI) and Intrusion Prevention System (IPS) for threat defense, alongside SD-WAN and VPN for secure hybrid connectivity. The device is managed through Sophos Central, offering centralized control and monitoring.

2. Key Features

• Next-Generation Firewall: The XGS 108W is a hardware-only appliance. A Sophos subscription is required to enable advanced features such as IPS, web security, VPN, and advanced threat defense.
• High-Performance Connectivity: Equipped with Wi-Fi 6, 6 x 2.5 GE copper ports, and 1 SFP fiber port, supporting up to 12.5 Gbps firewall performance for both wired and wireless environments.
• Optimized Hardware: Engineered for high performance, enhanced visibility, and reliable operation within business networks.
• SD-WAN Optimization: Provides resilient connectivity and intelligent traffic routing across multiple Wide Area Network (WAN) connections.
• VPN Ready Architecture: Supports secure site-to-site networking and encrypted remote employee access.

3. Package Contents

The Sophos XGS 108W (Gen2) package typically includes:

• Sophos XGS 108W (Gen2) Wireless Security Appliance
• Power Adapter
• Ethernet Cable
• Quick Start Guide (if applicable)
• Antennas (for wireless models)

Note: Specific package contents may vary. Please refer to the packaging for a complete list.

4. Setup Instructions

4.1. Physical Installation

1. Unpack the Appliance: Carefully remove the Sophos XGS 108W from its packaging.
2. Connect Antennas (if applicable): For the wireless model (XGS 108W), attach the provided antennas to the connectors on the rear panel.
3. Placement: Place the appliance on a stable, flat surface in a well-ventilated area, away from direct sunlight and heat sources. Ensure adequate space around the device for airflow.
4. Power Connection: Connect the power adapter to the appliance's DC IN port and then plug it into a power outlet.

Image 1: Rear panel of the Sophos XGS 108W, illustrating the various ports including DC IN, USB, COM, LAN/DMZ, WAN, and antenna connectors. This view is crucial for understanding physical connections.

4.2. Network Connections

5. WAN Connection: Connect your internet service provider's modem or router to the WAN port (e.g., 2/WAN) on the Sophos appliance using an Ethernet cable.
6. LAN Connection: Connect your internal network devices (e.g., switches, computers) to the LAN ports (e.g., 1/LAN, 3/DMZ, 4, 5, 6) using an Ethernet cable.
7. SFP Port (Optional): If utilizing fiber connectivity, insert an SFP module into the SFP port and connect the fiber optic cable.
8. USB Ports: USB ports can be used for connecting external devices such as 5G/LTE modems (on supported models) or for firmware updates.

4.3. Initial Configuration

After physical connections are made, power on the appliance. The initial configuration is typically performed via a web browser by connecting a computer to one of the LAN ports. Refer to the Sophos documentation or the Quick Start Guide for detailed steps on accessing the web interface and completing the initial setup wizard.

5. Operating Instructions

The Sophos XGS 108W operates on Sophos Firewall OS and is primarily managed through the Sophos Central platform. Once the initial setup is complete, all security policies, network configurations, and monitoring are performed via the centralized cloud management interface.

5.1. Sophos Central Management

• Access: Log in to your Sophos Central account via a web browser.
• Dashboard: The dashboard provides an overview of your network's security status, active threats, and device health.
• Configuration: Configure firewall rules, VPN settings, Wi-Fi networks, user access policies, and other security features.
• Monitoring & Reporting: Utilize Sophos Central for real-time monitoring, alerts, and detailed reports on network activity and security events.

Image 2: A screenshot of the Sophos Central dashboard, illustrating the centralized management interface for monitoring and configuring the security appliance.

5.2. Wi-Fi 6 Operation

The XGS 108W supports Wi-Fi 6 (802.11ax) for high-speed wireless connectivity. Configure your wireless networks (SSIDs), security protocols (WPA3 recommended), and access controls through Sophos Central. Ensure your wireless client devices also support Wi-Fi 6 to benefit from the enhanced performance and efficiency.

5.3. SD-WAN and VPN

Leverage the SD-WAN capabilities to optimize traffic routing and ensure business continuity across multiple WAN links. Set up VPN connections for secure remote access for employees or for site-to-site connectivity with other branch offices. Detailed configuration guides for these advanced features are available on the Sophos support portal.

6. Maintenance

Regular maintenance ensures the optimal performance and security of your Sophos XGS 108W appliance.

• Firmware Updates: Keep the Sophos Firewall OS firmware updated to the latest version. Updates often include security patches, new features, and performance improvements. These can typically be managed via Sophos Central.
• Security Subscription Renewal: Ensure your Sophos security subscription is active to maintain protection against the latest threats.
• Physical Cleaning: Periodically clean the appliance's exterior and ventilation openings to prevent dust buildup, which can affect cooling and performance. Use a soft, dry cloth.
• Configuration Backup: Regularly back up your appliance configuration settings through Sophos Central. This allows for quick restoration in case of an issue.
• Monitoring: Regularly review logs and reports in Sophos Central for any unusual activity or performance issues.

7. Troubleshooting

This section provides basic troubleshooting steps for common issues. For more complex problems, refer to the Sophos support documentation or contact Sophos technical support.

7.1. No Power

• Check Power Cable: Ensure the power adapter is securely connected to the appliance and the power outlet.
• Verify Outlet: Test the power outlet with another device to confirm it is functional.
• Power Adapter: Ensure you are using the correct power adapter supplied with the device.

7.2. No Internet Connectivity

• Check WAN Connection: Verify that the Ethernet cable from your modem/router is securely connected to the WAN port on the Sophos appliance.
• Modem/Router Status: Ensure your internet modem or upstream router is powered on and has an active internet connection.
• Firewall Rules: Check your firewall rules in Sophos Central to ensure they are not blocking internet access.
• IP Configuration: Verify that the WAN interface is correctly configured for DHCP or static IP as required by your ISP.

7.3. Wi-Fi Issues

• Antennas: Ensure antennas are securely attached and oriented correctly.
• Wi-Fi Settings: Verify Wi-Fi network (SSID) and password settings in Sophos Central.
• Signal Strength: Check the signal strength of your wireless devices. Relocate the appliance or use Wi-Fi extenders if necessary.
• Interference: Minimize interference from other electronic devices or neighboring Wi-Fi networks.

7.4. Appliance Not Responding

• Reboot: Power cycle the appliance by disconnecting the power, waiting 30 seconds, and then reconnecting it.
• Reset Button: If the appliance remains unresponsive, a factory reset may be necessary. Warning: A factory reset will erase all configurations. Refer to the Sophos documentation for the correct procedure.

8. Technical Specifications

Image 3: A detailed table outlining the technical specifications for the Sophos XGS Series Desktop appliances, including performance metrics, physical interfaces, and environmental conditions.

9. Warranty and Support

Sophos provides comprehensive support and warranty services for its products.

• Warranty Information: For specific warranty terms and conditions, please refer to the official Sophos website or the documentation included with your product.
• Technical Support: Access technical support, knowledge base articles, and community forums through the Sophos Support Portal.
• Sophos Central: Your Sophos Central account is the primary hub for managing your appliance, renewing subscriptions, and accessing support resources.
• Protection Plans: Various protection plans (e.g., Standard Protection, Xstream Protection) are available to enhance your security features and support coverage. These plans typically include IPS, web security, VPN, and advanced threat defense capabilities.

10. Video Resources