SOPHOS XA1BTCHEU XGS 116 Firewall Instruction Manual

June 6, 2024
SOPHOS

SOPHOS -logoOperating Instructions
XGS 116(w)/126(w)/136(w)

SOPHOS XA1BTCHEU XGS 116 Firewall-

Operating Instructions

Foreword
We are pleased to welcome you as a new customer of our Sophos XGS appliances. To install and configure the hardware appliance you can use the following documents:
Hardware Quick Start Guide : Connection to the system peripherals in a few steps
Operating Instructions: Notes on the security and commissioning of the hardware appliance
Sophos Firewall How-To Library: Installing and configuring the software appliance The Hardware Quick Start Guide and the Safety Instructions are also delivered in a printed
form together with the hardware appliance. The instructions must be read carefully prior to using the hardware and should be kept in a safe place. You may download all user manuals and additional documentation from the support webpage at: sophos.com/support

Security Symbols

The following symbol and its meaning appear in the Hardware Quick Start Guide, Safety Instructions, and in these Operating Instructions.
Caution and Important Note. If these notes are not correctly observed:

  • This is dangerous to life and the environment
  • The appliance may be damaged
  • The functions of the appliance will be no longer guaranteed
  • Sophos shall not be liable for damages arising from a failure to comply with the Safety Instructions

Designed Use

The hardware appliances are developed for use in networks. The XGS 116(w)/126(w)/136(w) models may be operated as a standalone appliance. The hardware appliance can be used in commercial, industrial, and residential environments. The XGS 116(w)/126(w)/136(w) models belong to appliance group B. The hardware appliance must be installed pursuant to the current installation notes. The otherwise failure-free and safe operation cannot be guaranteed. The EU declaration of conformity is available at the following address:

Sophos Technology GmbH
Amalienbadstr. 41/Bau 52
76227 Karlsruhe
Germany

CE Labeling, FCC and Approvals

The XGS 116(w)/126(w)/136(w) appliance comply with CB, CE, UL, FCC Class B, ISED, VCCI, CCC, KC, BSMI, RCM, NOM, Anatel.
Important Note : For computer systems to remain CE and FCC compliant, only CE and FCC compliant parts may be used. Maintaining CE and FCC compliance also require proper cable and cabling techniques.

Operating Elements and Connections
XGS 116(w)

SOPHOS XA1BTCHEU XGS 116 Firewall-XGS

XGS 126(w)/136(w)

SOPHOS XA1BTCHEU XGS 116 Firewall-XGS1

Technical Specifications

| XGS 116(w)| XGS 126(w)| XGS 136(w)
---|---|---|---
Physical Specification

Fixed Ethernet Ports| 8 x GE (1 x PoE)  1 x SFP| 12 x GE (2 x PoE) 2 x SFP|

10 x GE 2 x 2.5G (2 x PoE) 2 x SFP
Expansion Slots| 1| 1| 1
Connectivity  Modules (Optional) (Modules are  supplied with antennas)| 3G/4G Module 2nd Wi-Fi 5/802.11ac Single radio module (XGS 116w)| 3G/4G Module 2nd Wi-Fi 5/802.11ac Single radio module (XGS 126w)| 3G/4G Module 2nd Wi-Fi 5/802.11ac Single radio module (XGS 136w)

Cores/Threads main CPU| 4/4| 2/4| 2/4

Main Memory| 4 GB DDR4| 6 GB DDR4| 8 GB DDR4
NPU Memory| 4 GB DDR4| 4 GB DDR4| 4 GB DDR4
Storage| 64 GB SSD| 64 GB SSD| 64 GB SSD
Power Supply| External auto-ranging

AC-DC 100-240VAC,

2.5A@50-60 Hz,

12VDC, 12.5A, 150W

| External auto-ranging

AC-DC 100-240VAC,

2.5A@50-60 Hz,

12VDC, 12.5A, 150W

| External auto-ranging

AC-DC 100-240VAC,

2.5A@50-60 Hz,

12VDC, 12.5A, 150W

Power Consumption (idle – typical)| 28 W / 96 BTU/hr (116)

30 W / 102 BTU/hr (116w)

| 30 W / 202 BTU/hr (126)

32 W / 212 BTU/hr (126w)

| 30 W / 102 BTU/hr (136)

32 W / 109 BTU/hr (136w)

Power Consumption

(full load – typical)

| 57 W / 195 BTU/hr (126)

60 W / 205 BTU/hr (126w)

| 59 W / 102 BTU/hr (126)

62 W / 109 BTU/hr (126w)

| 62 W / 212 BTU/hr (136)

62 W / 222 BTU/hr (136w)

Mounting| Wall, Rack, DIN-Rail| Wall, Rack, DIN-Rail| Wall, Rack, DIN-Rail
Dimensions

Width x Depth x Heigh

| 320 x 213 x 44 mm| 320 x 213 x 44 mm| 320 x 213 x 44 mm
Weight (kg) unpacked/packed| 2.2 kg / 4.85 lbs (unpacked) 4.2 kg /9.26 lbs (packed)| 2.4 kg / 5.29 lbs (unpacked) 4.4 kg /9.70 lbs (packed)| 2.4 kg / 5.29 lbs (unpacked) 4.4 kg /9.70 lbs (packed)
Weight (kg) unpacked/packed| 2.2 kg / 4.85 lbs (unpacked)
4.2 kg /9.26 lbs (packed)| 2.4 kg / 5.29 lbs (unpacked)
4.4 kg /9.70 lbs (packed)| 2.4 kg / 5.29 lbs (unpacked) 4.4 kg /9.70 lbs (packed)
  Environmental

Noise level (avg.) (typical/max)| 29/43 dBA| 29/43 dBA| 29/43 dBA
Operating Temperature| 0°C-40°C| 0°C-40°C| 0°C-40°C
Storage Temperature| -20°C-70°C| -20°C-70°C| -20°C-70°C
Opertional/Storage Humidity| 10% – 90%
non-condensing| 10% – 90%
non-condensing| 10% – 90%
non-condensing
Altitude| 2000m| 2000m| 2000m
MTBF (hours) (Telcordia SR- 332 Issue 3]| 210.107 (XGS 116) 193.047 (XGS 116w)| 200.091 (XGS 126) 184.003 (XGS 126w)| 200.091 (XGS 136)
184.003 (XGS 136w)
Certifications
(Safety, EMC]| CB, CE, UL, FCC, ISED, VCCI, CCC, KC, BSMI, RCM, NOM, Anatel| CB, CE, UL, FCC, ISED, VCCI, CCC, KC, BSMI, RCM, NOM, Anatel| CB, CE, UL, FCC, ISED,
VCCI, CCC, KC, BSMI,
RCM, NOM, Anatel

Interfaces

LAN Ports Type Speed Comment
1–8 RJ45 10/100/1000 Mbps Port 8 on XGS 116(w) can be used to power a

connected device (e.g. access point, IP camera, or

IP Phone) via PoE with up to 30W (PoE 802.3at).

9–10

(XGS 126(w)/136(w) only)

| RJ45| 100/1000 Mbps|
11–12

(XGS 126(w)/136(w) only)

| RJ45| XGS 126(w): 100/1000 Mbps XGS 136(w): 100/1000/2500 Mbps| Both ports can be used to power a connected device (e.g. access point, IP camera, or IP Phone) via PoE with up to 30W (PoE 802.3at) each.
F1| SFP| 1 Gbps| SFP transceivers are sold separately
F2

(XGS 126(w)/136(w) only)

| SFP| 1 Gbps| SFP transceivers are sold separately.
Other Ports| Type| Comment
---|---|---
COM| Micro USB [front]

RJ45 [back]

| You can connect a serial console to the Micro USB or RJ45 COM port to access the CLI. Only one port can be used at any time. If both ports are connected, then the Micro USB port will take precedence. The required connection settings are:

  • Bits per second: 38,400
  • Data bits: 8
  • Parity: N (none)
  • Stop bits: 1

USB| USB 2.0 [Type A] [front] USB 3.0 (Type A) [back]| You can connect a USB 2.0 and/or 3.0 compatible device to these ports (e.g. USB thumb drive, UPS, 3G/4G dongles).
Expansion Bay| Comment|
3G/4G Module| Can be used for Sophos XGS 3G/4G Module, which is optionally available from your Sophos partner.
WiFi Module| Can be used for Sophos XGS WiFi Module, which is optionally available from your Sophos partner.

LED Status

LEDs on each RJ45 Ethernet Connector

ACT/LNK (Left LED)| Green| Solid|

  1. The Ethernet port has established a link.
  2. Good connection between the Ethernet port and hub

Flashing| The adapter is sending or receiving network data.
Off|

  1. The adapter and switch are not receiving power.
  2. No connection between both ends of the network.
  3. Network drivers have not been loaded or do not function correctly.

Speed

(Right LED)

| Amber| On| If Ethernet port is operating at 1000 Mbps.
Green| On| If Ethernet port is operating at 100 Mbps.
Off| If Ethernet port is operating at 10 Mbps.
LEDs on each SFP Connector
ACT/LNK| Green| Solid|

  1.  The SFP connector is receiving power.
  2. Good connection between the SFP port and hub.

Flashing| The adapter is sending or receiving network data.
Off|

  1. The adapter and switch are not receiving power.
  2. No connection between both ends of the network.
  3. Network drivers have not been loaded or do not function correctly.

LEDs (Front)
Storage| Blue| Flashing| SSD is being accessed.
Status| Green| Solid| Normal operation.
Flashing| The device is booting up or shutting down.
Red| Solid| SSD or boot failure.
Flashing| General error (please contact support).
WiFi| Green| On| WiFi is active.
Off| WiFi is inactive.
Power 1| Green| Solid| Power adapter 1 in normal operation.
Red| Solid| Power adapter 1 failed or disconnected.
Power 2| Green| Solid| Power adapter 2 in normal operation.
Red| Solid| Power adapter 2 failed or disconnected.

Putting into Operation

Caution: Risk of explosion if the battery is replaced by an incorrect type. Dispose of used batteries according to the instructions.
Scope of Supply
The supplied parts are indicated in the Hardware Quick Start Guide.
Mounting Instructions
The XGS 116/126/136 appliance can be placed on a stable horizontal surface or can be mounted to a rack or you can hang it on the wall by using the optionally available
rackmount kit.
Warnings and Precautions
The appliance can be operated safely if you observe the following notes and the notes on the appliance itself.
Rack Precautions

  • Ensure that the leveling jacks on the bottom of the rack are fully extended to the floor with the full weight of the rack resting on them.
  • In single rack installation, stabilizers should be attached to the rack.
  • In multiple rack installations, the racks should be coupled together.
  • Always make sure the rack is stable before extending a component from the rack.
  • You should extend only one component at a time—extending two or more simultaneously may cause the rack to become unstable.

General Server Precautions

  • Review the electrical and general safety precautions that came with the components you are adding to your appliance.
  • Determine the placement of each component in the rack before you install the rails.
  • Install the heaviest server components on the bottom of the rack first, and then work up.
  • Allow the hot-plug hard drives and power supply modules to cool before touching them.
  • Always keep the rack‘s front door, all panels, and server components closed when not servicing to maintain proper cooling.

Rack Mounting Considerations

  • Ambient operating temperature: If installed in a closed or multiunit rack assembly, the ambient operating temperature of the rack environment may be greater than the
    ambient temperature of the room. Therefore, you should install the equipment in an environment compatible with the manufacturer’s maximum rated ambient temperature.

  • Reduced airflow: Equipment should be mounted into a rack with sufficient airflow to allow cooling.

  • Mechanical loading: Equipment should be mounted into a rack so that a hazardous condition does not arise due to uneven mechanical loading.

  • Circuit overloading: Consideration should be given to the connection of the equipment to the power supply circuitry and the effect that any possible overloading of circuits might have on overcurrent protection and power supply wiring. Appropriate consideration of equipment nameplate ratings should be used when addressing this concern.

  • Reliable ground: Reliable grounding must be maintained at all times. To ensure this, the rack itself should be grounded. Particular attention
    should be given to power supply connections other than the direct connections to the branch circuit (i.e., the use of power strips, etc.).

Connection and Configuration

How to connect the appliance is described in the Hardware Quick Start Guide. For configuration, you can follow the initial setup wizard described in the Web Admin Quick
Start Guide or cancel it and perform a manual setup (see the Sophos Firewall How-To Library). Serial Console You can connect a serial console to either of the COM ports of the Sophos XGS hardware appliances. You can use, for instance, the Hyperterminal terminal program which is included with most versions of Microsoft Windows to log on to the appliance console. Use an RJ45 to DB9 adapter cable or the provided USB cable to connect the console to your hardware appliance.
The required connection settings are:

  • Bits per second: 38,400
  • Data bits: 8
  • Parity: N (none)
  • Stop bits: 1

Access via the serial console is activated by default on ttyS0. The connections of the appliances and the respective functionality are listed in chapter ‘Operating Elements and Connections’.

United Kingdom and Worldwide Sales
Tel: +44 (0)8447 671131
Email: sales@sophos.com

North American Sales
Toll Free: 1-866-866-2802
Email: nasales@sophos.com

Australia and New Zealand Sales
Tel: +61 2 9409 9100
Email: sales@sophos.com.au

Asia Sales
Tel: +65 62244168
Email: salesasia@sophos.com

© Copyright 2021. Sophos Ltd. All rights reserved.
Registered in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UK
Sophos is the registered trademark of Sophos Ltd. All other product and company names mentioned are
trademarks or registered trademarks of their respective owners.
21-04-08 OI-EN (PC)
XGS 116(w)/126(w)/136(w)

SOPHOS -logo

Read User Manual Online (PDF format)

Read User Manual Online (PDF format)  >>

Download This Manual (PDF format)

Download this manual  >>

Related Manuals