Sophos XGS Series Operating Instructions

Foreword

Sophos is pleased to welcome you as a new customer of our Sophos XGS Series appliances. To install and configure the hardware appliance, you can use the following documents:

• Hardware Quick Start Guide: Connection to the system peripherals in a few steps.
• Operating Instructions: Notes on the security and commissioning of the hardware appliance.
• Sophos Firewall How-To Library: Installing and configuring the software appliance.

The Hardware Quick Start Guide and the Safety Instructions are also delivered in printed form together with the hardware appliance. These instructions must be read carefully prior to using the hardware and should be kept in a safe place.

You may download all user manuals and additional documentation from the support webpage at: sophos.com/support

Security Symbols

The following symbol and its meaning appears in the Hardware Quick Start Guide, Safety Instructions, and in these Operating Instructions.

⚠️ Caution and Important Note.

If these notes are not correctly observed:

• This is dangerous to life or the environment.
• The appliance may be damaged.
• The functions of the appliance will no longer be guaranteed.
• Sophos shall not be liable for damages arising from a failure to comply with the Safety Instructions.

Designed Use

The hardware appliances are developed for use in networks. The XGS XGS 118(w)/128(w)/138 models may be operated as standalone appliances. The hardware appliance can be used in commercial, industrial, and residential environments.

The XGS XGS 118(w)/128(w)/138 models belong to the appliance group B.

The hardware appliance must be installed pursuant to the current installation notes. Otherwise, failure-free and safe operation cannot be guaranteed. The EU declaration of conformity is available from the following address:

Sophos Technology GmbH
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Germany

Regulatory Compliance

The XGS 118(w)/128(w)/138 appliances comply with CB, CE, UKCA, UL, FCC, ISED, KC, BSMI, RCM, NOM, Anatel and TEC MTCTE regulations.

Certificates and declarations of conformity are available at: https://docs.sophos.com/nsg/RegulatoryCompliance/en-us/index.html

Environmental Compliance

The XGS 118(w)/128(w)/138 appliances comply with the following environmental compliance requirements:

• RoHS (2011/65/EU amended by (EU) 2015/863)
• REACH (Regulation (EC) No 1907/2006)
• WEEE (2012/19/EU)
• BSMI ROHS
• China RoHS
• U.S. 40 CFR, Part 751, Subpart E (PBT chemicals under TSCA Section 6(h))
• CMRT 5

Important Note: For computer systems to remain CE and FCC compliant, only CE and FCC compliant parts may be used. Maintaining CE and FCC compliance also requires proper cable and cabling techniques.

Operating Elements and Connections

XGS 118(w)/128(w)

Front Panel:

• 1 x COM (Micro USB)
• 1 x USB 2.0 (Type A)
• Status LEDs (including Wi-Fi LED for w-models)

Back Panel:

• 9 x 2.5GE copper ports
• 1 x SFP fiber port
• Optional module expansion bay
• Power supply connector
• Connector for optional 2nd redundant power supply

XGS 138

Front Panel:

• 1 x COM (RJ45)
• 1 x USB 3.0 (Type A)
• Status LEDs

Back Panel:

• 4 x GE copper ports
• 2 x 2.5GE PoE ports
• 2 x SFP+ ports
• Optional module expansion bay
• Power supply connector
• Connector for optional 2nd redundant power supply
• 2 x external antenna (XGS 118w and 128w only)

Technical Specifications

Interfaces

LAN Ports

Other Ports

Expansion Bay

LEDs on each RJ45 Ethernet Connector / SFP+ connector

Speed Port LED

* For SFP+ port, a Plug-in NBASE-T modules may have their own Speed indicator.

LEDs (Front)

Starting Operation

⚠️ Caution: Risk of explosion if battery is replaced by an incorrect type. Dispose of used batteries according to the instructions.

Scope of Supply

The supplied parts are indicated in the Hardware Quick Start Guide.

Mounting Instructions

The XGS 118/128/138 appliance can be placed on a stable horizontal surface, can be mounted to a rack, or you can hang it on the wall by using the optionally available rackmount kit.

Warnings and Precautions

The appliance can be operated safely if you observe the following notes and the notes on the appliance itself.

Rack Precautions

• Ensure that the leveling jacks on the bottom of the rack are fully extended to the floor with the full weight of the rack resting on them.
• In single rack installation, stabilizers should be attached to the rack.
• In multiple rack installations, the racks should be attached together.
• Always make sure the rack is stable before extending a component from the rack.
• You should extend only one component at a time - extending two or more simultaneously may cause the rack to become unstable.

General Server Precautions

• Review the electrical and general safety precautions that came with the components you are adding to your appliance.
• Determine the placement of each component in the rack before you install the rails.
• Install the heaviest server components on the bottom of the rack first, and then work up.
• Allow the hot-plug hard drives and power supply modules to cool before touching them.
• Always keep the rack's front door, all panels, and server components closed when not servicing to maintain proper cooling.

Rack Mounting Considerations

• Ambient operating temperature: If installed in a closed or multiunit rack assembly, the ambient operating temperature of the rack environment may be greater than the ambient temperature of the room. Therefore, you should install the equipment in an environment compatible with the manufacturer's maximum-rated ambient temperature.
• Reduced airflow: Equipment should be mounted into a rack with sufficient airflow to allow cooling.
• Mechanical loading: Equipment should be mounted into a rack so that hazardous conditions do not arise due to uneven mechanical loading.
• Circuit overloading: Consideration should be given to the connection of the equipment to the power supply circuitry and the effect that any possible overloading of circuits might have on overcurrent protection and power supply wiring. Appropriate consideration of equipment nameplate ratings should be used when addressing this concern.
• Reliable ground: Reliable grounding must be maintained at all times. To ensure this, the rack itself should be grounded. Particular attention should be given to power supply connections other than the direct connections to the branch circuit (i.e., the use of power strips, etc.).

Connection and Configuration

How to connect the appliance is described in the Hardware Quick Start Guide. For configuration you can follow the initial setup wizard described in the Web Admin Quick Start Guide or cancel it and perform a manual setup (see the Sophos Firewall How-To Library).

Serial Console

You can connect a serial console to either of the COM ports of the Sophos XGS hardware appliances. You can use, for instance, the Hyperterminal terminal program which is included with most versions of Microsoft Windows to log on to the appliance console. Use an RJ45 to DB9 adapter cable or the provided USB cable to connect the console to your hardware appliance.

The required connection settings are:

• Bits per second: 38,400
• Data bits: 8
• Parity: N (none)
• Stop bits: 1

Access via the serial console is activated by default on ttySO. The connections of the appliances and the respective functionality are listed in the chapter 'Operating Elements and Connections'.

Please Note: If you are connecting to the Micro USB port and it doesn't show up as a COM port but as unknown hardware in your system, please download a Micro USB Driver from https://ftdichip.com/drivers/d2xx-drivers/.

Contact Information

United Kingdom and Worldwide Sales
Tel: +44 (0)8447 671131
Email: sales@sophos.com

North American Sales
Toll Free: 1-866-866-2802
Email: nasales@sophos.com

Australia and New Zealand Sales
Tel: +61 2 9409 9100
Email: sales@sophos.com.au

Asia Sales
Tel: +65 62244168
Email: salesasia@sophos.com

Copyright 2024. Sophos Ltd. All rights reserved.
Registered in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, 0X14 3YP, UK
Sophos is the registered trademark of Sophos Ltd. All other product and company names mentioned are trademarks or registered trademarks of their respective owners.