Sophos XGS 108 (Gen2) Network Security Appliance User Manual

Introduction

The Sophos XGS 108 (Gen2) is a powerful network security appliance designed for growing organizations. It features 6 copper 2.5 GE ports and 1 SFP fiber port, delivering up to 12.5 Gbps firewall throughput. This appliance integrates advanced security features such as Deep Packet Inspection (DPI), Intrusion Prevention System (IPS), and TLS 1.3 decryption to secure encrypted traffic. It also supports SD-WAN optimization and VPN for resilient connectivity and simplified administration through Sophos Central.

Setup Instructions

1. Unboxing and Package Contents

Carefully unpack the Sophos XGS 108 appliance and verify that all components are present. The standard package typically includes:

• Sophos XGS 108 (Gen2) Appliance
• Power Adapter
• Ethernet Cable
• Quick Start Guide

2. Physical Connections

Before powering on the device, connect the necessary cables.

Image: Rear panel of the Sophos XGS 108 appliance, illustrating the various ports including DC IN, USB, COM, SFP, and 2.5 GE Ethernet ports.

1. Power Connection: Connect the power adapter to one of the DC IN 1 or DC IN 2 ports on the rear of the appliance and plug it into a power outlet.
2. Network Connections:
   • Connect your internet service provider's modem or router to the WAN port (typically labeled 1/LAN or 2/WAN, refer to the device labeling).
   • Connect your internal network switch or a computer to one of the available LAN ports (e.g., 1/LAN, 3/DMZ, 4, 5, 6).
   • For fiber connections, use the SFP port (F1 SFP).
3. Console Connection (Optional): For initial command-line interface (CLI) access, connect a console cable to the COM port.
4. USB Devices (Optional): USB ports can be used for external storage or other compatible peripherals.

3. Initial Power On and Configuration

Once all physical connections are secure, power on the appliance. The device will boot up, which may take a few minutes. Refer to the Quick Start Guide for initial access to the Sophos Firewall OS web interface. Typically, you will connect a computer to a LAN port and navigate to a default IP address (e.g., 172.16.16.16) in a web browser to begin the setup wizard.

Note: This appliance is hardware-only. To enable full functionality including IPS, web security, VPN, and advanced threat defense, a Sophos subscription is required.

Operating the Sophos XGS 108

Sophos Firewall OS

The Sophos XGS 108 runs on Sophos Firewall OS, providing a comprehensive suite of security features. The web-based interface allows for configuration and monitoring of all aspects of network security.

Key Features and Functionality

• Next-Gen Firewall: Provides advanced threat protection, including Deep Packet Inspection (DPI) and Intrusion Prevention System (IPS).
• TLS 1.3 Decryption: Secures encrypted traffic by decrypting, inspecting, and re-encrypting it.
• SD-WAN Optimization: Ensures resilient connectivity and intelligent traffic routing across multiple WAN connections.
• Secure VPN: Supports site-to-site networking and encrypted remote employee access.
• Centralized Management: Manage your appliance through Sophos Central for simplified administration and unified security.

Image: Diagram illustrating the Sophos security ecosystem, showing how various components like SaaS apps, cloud apps, remote workers, and endpoints are protected and managed through Sophos Central.

Sophos Central Management

Sophos Central offers a unified cloud management platform for all your Sophos products. Once your XGS 108 is registered, you can manage its configuration, monitor its status, and deploy policies from a single console.

Image: Table detailing the features included with Sophos Xstream Protection, covering base firewall features, network protection, web protection, zero-day protection, DNS protection, Sophos Central management, and enhanced support.

Maintenance

Firmware Updates

Regularly check for and apply firmware updates to ensure your appliance has the latest security patches and features. Firmware updates are typically managed through the Sophos Firewall OS web interface or Sophos Central.

Monitoring and Logging

Utilize the monitoring and logging capabilities within Sophos Firewall OS and Sophos Central to keep track of network activity, security events, and appliance performance. This helps in proactive identification and resolution of potential issues.

Physical Inspection

Periodically inspect the appliance for proper ventilation and ensure all cables are securely connected. Keep the device in a cool, dry environment to prevent overheating.

Troubleshooting

This section provides general guidance for common issues. For detailed troubleshooting, refer to the Sophos documentation or contact support.

No Power

• Ensure the power adapter is securely connected to both the appliance and a working power outlet.
• Check the power outlet with another device to confirm it is functional.
• Verify the power LED on the appliance is illuminated.

No Network Connectivity

• Check that Ethernet cables are properly connected to the correct ports (WAN for internet, LAN for internal network).
• Verify the link/activity LEDs on the connected ports are active.
• Ensure your computer or network devices are configured to obtain an IP address automatically (DHCP) or have correct static IP settings.
• Restart the appliance and connected network devices.

Cannot Access Web Interface

• Confirm your computer is connected to a LAN port of the Sophos XGS 108.
• Ensure your computer's IP address is in the same subnet as the appliance's default management IP (e.g., 172.16.16.x if the appliance is 172.16.16.16).
• Try clearing your browser's cache or using a different browser.
• If the issue persists, a factory reset might be necessary (refer to the Quick Start Guide for instructions, as this will erase all configurations).

Technical Specifications

The Sophos XGS 108 (Gen2) offers robust performance and connectivity. Below are key technical specifications:

Image: Detailed technical specifications table for the Sophos XGS 108 (Gen2) appliance, covering performance, physical interfaces, physical specifications, environment, power supply, and product certifications.

Warranty Information

Sophos products typically come with a standard manufacturer's warranty. Specific warranty terms and duration may vary by region and purchase agreement. For detailed warranty information, please refer to the documentation included with your purchase or visit the official Sophos website. Extended protection plans and support services are available separately and can enhance your coverage.

Support

For technical assistance, product documentation, and software downloads, please utilize the following resources:

• Sophos Central: Your centralized management platform for configuration, monitoring, and reporting.
• Sophos Support Portal: Access knowledge base articles, FAQs, and submit support tickets. Visit www.sophos.com/support.
• Sophos Community: Engage with other users and Sophos experts for advice and solutions.
• Contact your Reseller: For purchase-specific support or inquiries regarding your subscription.