Sophos XGS 116(w)/126(w)/136(w) Operating Instructions
Foreword
Welcome to Sophos XGS appliances. This document provides notes on the security and commissioning of the hardware appliance. For installation and configuration, refer to the Hardware Quick Start Guide and the Sophos Firewall How-To Library. The Hardware Quick Start Guide and Safety Instructions are delivered with the appliance. Please read them carefully and keep them in a safe place. Additional documentation is available at sophos.com/support.
Security Symbols: The following symbol indicates important notes regarding safety and potential damage to the appliance. Failure to observe these notes can be dangerous to life and the environment, may damage the appliance, and will void its guaranteed functions. Sophos is not liable for damages arising from non-compliance with safety instructions.
Designed Use
The Sophos XGS hardware appliances are designed for use in networks and can be operated as standalone units. They are suitable for commercial, industrial, and residential environments. The XGS 116(w)/126(w)/136(w) models belong to appliance group B. Proper installation according to current notes is crucial for failure-free and safe operation. The EU declaration of conformity is available from Sophos Technology GmbH, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Germany.
CE Labeling, FCC and Approvals
The XGS 116(w)/126(w)/136(w) appliances comply with CB, CE, UL, FCC Class B, ISED, VCCI, CCC, KC, BSMI, RCM, NOM, and Anatel standards. For continued CE and FCC compliance, only compliant parts and proper cabling techniques should be used.
Operating Elements and Connections
XGS 116(w)
Front Panel: 1 x USB 2.0, 1 x COM Micro USB. Status LEDs indicate operation, with additional WiFi LED for 'w' models. 2 x external antennas.
Rear Panel: 1 x COM (RJ45), 1 x USB 3.0, 6 x GbE copper ports (Port 8 supports PoE up to 30W), 1 x SFP fiber port (F1), 1 x GbE copper port, Optional module expansion bay, Power supply input, Connector for optional 2nd redundant power supply.
XGS 126(w)/136(w)
Front Panel: 1 x USB 2.0. Status LEDs indicate operation, with additional WiFi LED for 'w' models. 3 x external antennas.
Rear Panel: 1 x COM Micro USB, 1 x COM (RJ45), 1 x USB 3.0, 10 x GbE copper ports (Ports 11-12 support PoE up to 30W each), 2 x SFP fiber ports (F1-F2), Optional module expansion bay, Power supply input, Connector for optional 2nd redundant power supply. XGS 136(w) has 2 x 2.5 GbE PoE ports, while XGS 126(w) has 2 x GbE PoE ports.
Technical Specifications
| Physical Specification | XGS 116(w) | XGS 126(w) | XGS 136(w) |
| #Fixed Ethernet Ports | 8 x GE (1 x PoE), 1 x SFP | 12 x GE (2 x PoE), 2 x SFP | 10 x GE, 2 x 2.5G (2 x PoE), 2 x SFP |
| Expansion Slots | 1 | 1 | 1 |
| Connectivity Modules (Optional) | 3G/4G Module, 2nd Wi-Fi 5/802.11ac, Single radio module | 3G/4G Module, 2nd Wi-Fi 5/802.11ac, Single radio module | 3G/4G Module, 2nd Wi-Fi 5/802.11ac, Single radio module |
| #Cores/Threads main CPU | 4 / 4 | 2 / 4 | 2 / 4 |
| Main Memory | 4 GB DDR4 | 6 GB DDR4 | 8 GB DDR4 |
| NPU Memory | 4 GB DDR4 | 4 GB DDR4 | 4 GB DDR4 |
| Storage | 64 GB SSD | 64 GB SSD | 64 GB SSD |
| Power Supply | External 150W (100-240VAC) | External 150W (100-240VAC) | External 150W (100-240VAC) |
| Power Consumption (idle - typical) | 28 W / 96 BTU/hr (116), 30 W / 102 BTU/hr (116w) | 30 W / 202 BTU/hr (126), 32 W / 212 BTU/hr (126w) | 30 W / 102 BTU/hr (136), 32 W / 109 BTU/hr (136w) |
| AC Power (Max. PoE Enabled) Addition | 38 W / 130 BTU/hr | 76 W / 260 BTU/hr | 76 W / 260 BTU/hr |
| Power Consumption (full load - typical) | 57 W / 195 BTU/hr (126), 60 W / 205 BTU/hr (126w) | 59 W / 102 BTU/hr (126), 62 W / 109 BTU/hr (126w) | 62 W / 212 BTU/hr (136), 62 W / 222 BTU/hr (136w) |
| Mounting | Wall, Rack, DIN-Rail | Wall, Rack, DIN-Rail | Wall, Rack, DIN-Rail |
| Dimensions (Width x Depth x Height) | 320 x 213 x 44 mm | 320 x 213 x 44 mm | 320 x 213 x 44 mm |
| Weight (kg) unpacked/packed | 2.2 kg / 4.85 lbs (unpacked), 4.2 kg / 9.26 lbs (packed) | 2.4 kg / 5.29 lbs (unpacked), 4.4 kg / 9.70 lbs (packed) | 2.4 kg / 5.29 lbs (unpacked), 4.4 kg / 9.70 lbs (packed) |
| Environmental | |||
| Noise level (avg.) (typical/max) | 29/43 dBA | 29/43 dBA | 29/43 dBA |
| Operating Temperature | 0°C - 40°C | 0°C - 40°C | 0°C - 40°C |
| Storage Temperature | -20°C - 70°C | -20°C - 70°C | -20°C - 70°C |
| Opertional/Storage Humidity | 10%-90% non-condensing | 10%-90% non-condensing | 10%-90% non-condensing |
| Altitude | 2000 m | 2000 m | 2000 m |
| MTBF (hours) (Telcordia SR-332 Issue 3) | 210,107 (XGS 116), 193,047 (XGS 116w) | 200,091 (XGS 126), 184,003 (XGS 126w) | 200,091 (XGS 136), 184,003 (XGS 136w) |
| Certifications (Safety, EMC) | CB, CE, UL, FCC, ISED, VCCI, CCC, KC, BSMI, RCM, NOM, Anatel | CB, CE, UL, FCC, ISED, VCCI, CCC, KC, BSMI, RCM, NOM, Anatel | CB, CE, UL, FCC, ISED, VCCI, CCC, KC, BSMI, RCM, NOM, Anatel |
Interfaces
| LAN Ports | Type | Speed | Comment |
| 1-8 | RJ45 | 10/100/1000 Mbps | Port 8 on XGS 116(w) supports PoE up to 30W (PoE 802.3at). |
| 9-10 (XGS 126(w)/136(w) only) | RJ45 | 100/1000 Mbps | |
| 11-12 (XGS 126(w)/136(w) only) | RJ45 | XGS 126(w): 100/1000 Mbps XGS 136(w): 100/1000/2500 Mbps | Both ports support PoE up to 30W (PoE 802.3at) each. |
| F1 | SFP | 1 Gbps | SFP transceivers sold separately. |
| F2 (XGS 126(w)/136(w) only) | SFP | 1 Gbps | SFP transceivers sold separately. |
| Other Ports | Type | Comment |
| COM | Micro USB [front] RJ45 [back] | Connect to CLI via Micro USB or RJ45 COM port. If both are connected, Micro USB takes precedence. Settings: 38,400 baud, 8 data bits, N parity, 1 stop bit. |
| USB | USB 2.0 [Type A] [front] USB 3.0 [Type A] [back] | Connect USB devices (e.g., thumb drive, UPS, 3G/4G dongles). |
| Reset | Button [back] | Press and hold for >10 seconds to reset to factory default settings, clearing all configuration, reports, and patterns. |
| Expansion Bay | Comment | |
| 3G/4G Module | Optional Sophos XGS 3G/4G Module available from Sophos partner. | |
| WiFi Module | Optional Sophos XGS WiFi Module available from Sophos partner. |
LED Status
LEDs on each RJ45 Ethernet Connector
| LED | Color | State | Description |
| ACT/LNK (Left LED) | Green | Solid | Ethernet port link established; good connection. |
| Flashing | Network data being sent or received. | ||
| Off | No power to adapter/switch; no connection; or network drivers not loaded/functioning. | ||
| Speed (Right LED) | Amber | On | Ethernet port operating at 1000 Mbps. |
| Green | On | Ethernet port operating at 100 Mbps. | |
| Off | Ethernet port operating at 10 Mbps. |
LEDs on each SFP Connector
| LED | Color | State | Description |
| ACT/LNK | Green | Solid | SFP connector receiving power; good connection. |
| Flashing | Network data being sent or received. | ||
| Off | No power to adapter/switch; no connection; or network drivers not loaded/functioning. |
LEDs (Front)
| LED | Color | State | Description |
| Storage | Blue | Flashing | SSD is being accessed. |
| Status | Green | Solid | Normal operation. |
| Flashing | Device booting up or shutting down. | ||
| Red | Solid | SSD or boot failure. | |
| Flashing | General error (contact support). | ||
| WiFi | Green | On | WiFi is active. |
| Off | WiFi is inactive. | ||
| Power 1 | Green | Solid | Power adapter 1 in normal operation. |
| Red | Solid | Power adapter 1 failed or disconnected. | |
| Power 2 | Green | Solid | Power adapter 2 in normal operation. |
| Red | Solid | Power adapter 2 failed or disconnected. |
Putting into Operation
Caution: Risk of explosion if battery is replaced by an incorrect type. Dispose of used batteries according to instructions.
Scope of Supply: Refer to the Hardware Quick Start Guide for supplied parts.
Mounting Instructions: The appliance can be placed on a stable horizontal surface, mounted in a rack, or hung on a wall using an optional rackmount kit.
Warnings and Precautions: Safe operation requires adherence to these notes and those on the appliance.
Rack Precautions
- Ensure leveling jacks on the rack bottom are fully extended to the floor.
- In single rack installations, attach stabilizers.
- Couple multiple racks together.
- Ensure rack stability before extending components.
- Extend only one component at a time to prevent instability.
General Server Precautions
- Review electrical and general safety precautions for added components.
- Determine component placement before installing rails.
- Install heaviest server components at the bottom of the rack first.
- Allow hot-plug hard drives and power supply modules to cool before touching.
- Keep rack doors, panels, and components closed when not servicing to maintain proper cooling.
Rack Mounting Considerations
- Ambient operating temperature: Ensure the rack environment's ambient temperature is compatible with the manufacturer's maximum rated temperature, especially in closed or multiunit assemblies.
- Reduced airflow: Mount equipment in a rack with sufficient airflow for cooling.
- Mechanical loading: Ensure equipment mounting does not create hazardous conditions due to uneven loading.
- Circuit overloading: Consider power supply circuitry connections and potential effects of overloading on overcurrent protection and wiring. Adhere to equipment nameplate ratings.
- Reliable ground: Maintain reliable grounding at all times. Ground the rack itself and pay attention to power supply connections, including power strips.
Connection and Configuration
Connection details are in the Hardware Quick Start Guide. For configuration, use the initial setup wizard from the Web Admin Quick Start Guide or perform a manual setup as described in the Sophos Firewall How-To Library.
Serial Console
Connect a serial console to either COM port (Micro USB or RJ45) to access the CLI. Use an RJ45 to DB9 adapter cable or the provided USB cable. Required connection settings: 38,400 baud, 8 data bits, N parity, 1 stop bit. Access is activated by default on ttyS0.
Note: If the Micro USB port is not recognized as a COM port, download the appropriate Micro USB Driver from ftdichip.com/drivers/d2xx-drivers/.
Contact Information
United Kingdom and Worldwide Sales
Tel: +44 (0)8447 671131
Email: sales@sophos.com
North American Sales
Toll Free: 1-866-866-2802
Email: nasales@sophos.com
Australia and New Zealand Sales
Tel: +61 2 9409 9100
Email: sales@sophos.com.au
Asia Sales
Tel: +65 62244168
Email: salesasia@sophos.com
