Sophos XGS 126 Next-Gen Firewall User Manual

1. Entwodiksyon

This manual provides essential information for the installation, operation, maintenance, and troubleshooting of your Sophos XGS 126 Next-Gen Firewall. Please read this manual thoroughly before using the device to ensure proper setup and optimal performance. The Sophos XGS 126 is designed to provide advanced network security for small to medium businesses and branch offices.

2. Pake kontni

Verifye ke tout atik yo prezan nan pakè ou a:

• Sophos XGS 126 Appliance
• US fil elektrik
• Ethernet kab
• Gid Quick Start
• Enfòmasyon sou sekirite ak regilasyon

3. Fizik Plis paseview

3.1 Panèl devan

The front panel of the Sophos XGS 126 features status indicators and a USB port.

Imaj: Devan view of the Sophos XGS 126 appliance, showing LED indicators for status, power, and network activity, along with a USB port.

3.2 Panèl dèyè

The rear panel provides all necessary ports for power, network connectivity, and console access.

Imaj: Dèyè view of the Sophos XGS 126 appliance, detailing the various ports including power inputs (DC IN 1, DC IN 2), console port (COM), USB ports, and multiple Ethernet ports (LAN, WAN, SFP).

• Power Inputs (DC IN 1, DC IN 2): Connect the power adapter here. The device supports redundant power supplies.
• Pò COM: Pò konsole RJ45 pou aksè jesyon dirèk.
• Pò USB: For connecting external devices or for initial setup via USB.
• Pò LAN (1-8): Gigabit Ethernet ports for connecting internal network devices.
• WAN Ports (9, 10): Gigabit Ethernet ports for connecting to external networks (e.g., internet).
• SFP Ports (11, 12): Small Form-Factor Pluggable ports for fiber optic or additional copper connectivity.
• Bouton Reyajiste: Used to reset the device to factory defaults (refer to Troubleshooting section).

4. Enstriksyon Enstalasyon

4.1 Plasman Inisyal

Place the Sophos XGS 126 on a stable, flat surface in a well-ventilated area. Ensure adequate space around the device for airflow. Avoid placing it near heat sources or in direct sunlight.

4.2 Konekte pouvwa

1. Connect the provided power cord to the DC IN 1 port on the rear panel.
2. Ploge lòt pwent fil kouran an nan yon priz elektrik ki chita.
3. The device will power on automatically. Observe the front panel LEDs for boot-up status.
4. For redundant power, connect a second power cord to the DC IN 2 port and another outlet.

4.3 Koneksyon rezo

1. Connect your internet service provider's modem or router to one of the WAN ports (e.g., Port 9) using an Ethernet cable.
2. Connect your internal network switch or a computer directly to one of the LAN ports (e.g., Port 1) using an Ethernet cable.
3. If using SFP modules, insert them into the SFP ports (11, 12) and connect the appropriate fiber or copper cables.

4.4 Aksè Konfigirasyon Inisyal

Pou jwenn aksè nan web-koòdone jesyon ki baze sou:

1. Ensure your computer is connected to a LAN port of the Sophos XGS 126.
2. Louvri a web navigatè a epi ale nan adrès IP default la (jeneralman https://172.16.16.16).
3. Follow the on-screen instructions of the setup wizard to configure basic network settings, administrator credentials, and initial security policies. Refer to the Quick Start Guide for default login credentials.

5. Operasyon Enstriksyon

5.1 Management Interface

The Sophos XGS 126 is managed primarily through its web-based interface. After initial setup, you can access it using the configured IP address and administrator credentials.

• Dach: Bay yon souview of system status, network activity, and security alerts.
• Règ firewall: Configure rules to control network traffic flow and access.
• VPN: Set up Virtual Private Networks for secure remote access or site-to-site connections.
• Pwoteksyon menas: Manage features like Intrusion Prevention System (IPS), Advanced Threat Protection (ATP), and web filtraj.
• Logging & Reporting: Monitor logs and generate reports on network usage and security events.

5.2 Endikatè ki ap dirije

The front panel LEDs provide visual status of the device:

• Pouvwa dirije: Indicates power status (e.g., solid green for normal operation).
• Ki ap dirije Status: Indicates overall system health (e.g., green for healthy, amber for warnings, red for critical errors).
• Network Activity LEDs: Located next to each port, indicate link status and data activity.

6. Antretyen

6.1 Mizajou Firmware

Regularly update the device firmware to ensure optimal performance, security, and access to new features. Firmware updates can be managed through the web koòdone.

1. Navigate to the firmware update section in the management interface.
2. Tcheke pou mizajou ki disponib oswa telechaje yon firmwèr manyèlman file downloaded from the official Sophos websit.
3. Follow the on-screen prompts to complete the update process. The device will reboot during this process.

6.2 Sovgad ak Retablisman Konfigirasyon

It is recommended to regularly back up your device configuration. This allows for quick recovery in case of unexpected issues or when migrating settings to a new device.

• Access the backup/restore section in the web koòdone.
• Sove konfigirasyon an file nan yon kote ki an sekirite.
• To restore, upload the saved configuration file through the same interface.

6.3 Netwayaj fizik

Keep the device clean and free from dust to ensure proper ventilation and prevent overheating. Use a soft, dry cloth for cleaning. Do not use liquid cleaners or aerosols.

NAN. Depanaj

7.1 Pa gen pouvwa

• Verify the power cord is securely connected to both the device and a working electrical outlet.
• Tcheke si priz kouran an ap fonksyone lè w branche yon lòt aparèy ladan l.
• If using a power strip or UPS, ensure it is turned on.

7.2 Pa ka jwenn aksè Web Entèfas

• Ensure your computer is connected to a LAN port of the firewall.
• Verify your computer's IP address is in the same subnet as the firewall's management IP (e.g., if firewall is 172.16.16.16, your computer should be 172.16.16.x with a subnet mask of 255.255.255.0).
• Eseye efase kach navigatè w la oubyen itilize yon lòt navigatè.
• Confirm the firewall's IP address has not been changed from the default.

7.3 Pwoblèm koneksyon rezo

• Check all Ethernet cable connections for looseness or damage.
• Verify the link/activity LEDs on the ports are lit.
• Review firewall rules in the management interface to ensure they are not blocking legitimate traffic.
• Test connectivity to the internet from a device connected to the firewall.

7.4 Reset faktori

A factory reset will erase all configurations and restore the device to its original factory settings. This should be used as a last resort.

1. With the device powered on, locate the Reset button on the rear panel.
2. Using a paperclip or similar pointed object, press and hold the Reset button for approximately 10 seconds.
3. Release the button when the Status LED changes color or flashes.
4. The device will reboot with factory default settings.

8. Espesifikasyon

The following table details the technical specifications of the Sophos XGS 126 Next-Gen Firewall:

Image: Detailed specification sheet for Sophos XGS Series Desktop models, including the XGS 126, showing performance metrics, physical interfaces, power supply, and environmental conditions.

9. Garanti ak sipò

9.1 Pwodwi Garanti

Sophos products typically come with a limited hardware warranty. For detailed information regarding the warranty period and terms for your Sophos XGS 126, please refer to the warranty documentation included with your product or visit the official Sophos websit.

9.2 Sipò teknik

For technical assistance, product documentation, and software downloads, please visit the official Sophos Support Portal:

• Sophos Support Portal: https://support.sophos.com
• Sophos Community: https://community.sophos.com

Before contacting support, please have your product model (XGS 126) and serial number ready. The serial number is typically located on a label on the bottom or rear of the appliance.