Sophos XGS 118 (Gen2) Network Security Appliance User Manual

1. Introduzzjoni

The Sophos XGS 118 (Gen2) is a next-generation network security appliance designed for mid-sized businesses. It offers robust firewall capabilities, advanced threat protection, and flexible connectivity options to secure your network infrastructure.

Il-karatteristiċi ewlenin jinkludu:

Xstream Protection: Provides zero-day defense, cloud sandboxing, email filtering, intrusion prevention, and advanced reporting.
Prestazzjoni Għolja: Up to 15.5 Gbps firewall throughput with 9 x 2.5 GE copper ports and 1 SFP fiber port.
Advanced Threat Inspection: Includes Deep Packet Inspection (DPI), TLS inspection, and Intrusion Prevention System (IPS) to block hidden threats.
Integrated Security Heartbeat: Enables automatic threat isolation.
Konnettività flessibbli: Supports VPN and SD-WAN for reliable and secure connections.
Ġestjoni bbażata fuq il-Cloud: Managed through Sophos Central for unified policies and reporting.

Sophos XGS 118 (Gen2) Network Security Appliance Front View

Figura 1: Quddiem view of the Sophos XGS 118 (Gen2) appliance.

2. Setup

2.1 Spakkjar u Spezzjoni

Carefully unpack the Sophos XGS 118 appliance and its accessories. Verify that all components are present and undamaged. If any items are missing or damaged, contact your vendor immediately.

2.2 Konnessjonijiet Fiżiċi

Before powering on the device, connect all necessary cables. Refer to the rear panel diagram for port identification.

Sophos XGS 118 (Gen2) Network Security Appliance Rear Panel

Figure 2: Rear panel of the Sophos XGS 118 (Gen2) appliance showing various ports.

Qawwa: Connect the power adapter to the DC IN 1 or DC IN 2 port and then to a power outlet.
Portijiet tan-Netwerk: Connect your WAN (Internet) cable to the designated WAN port (e.g., 2/WAN). Connect your internal network devices (switches, computers) to the LAN ports (e.g., 1/LAN, 3/DMZ, 4, 5, 6, 7, 8).
Port SFP: For fiber optic connections, insert an SFP module into the F1 SFP port.
Portijiet USB: USB 2.0 (front) and USB 3.0 (rear) ports are available for external storage or other compatible devices.
Console Port (COM): Use the COM port for direct console access for initial configuration or troubleshooting.

2.3 Konfigurazzjoni Inizjali

After connecting the hardware, power on the appliance. The Sophos XGS 118 is typically managed via Sophos Central, a cloud-based platform. Follow the on-screen instructions or refer to the Sophos Central documentation for initial registration and configuration steps. This usually involves connecting a management computer to a LAN port and accessing the device's web interface or Sophos Central portal.

3. It-tħaddim tal-Appliance

The Sophos XGS 118 runs on Sophos Firewall OS, providing a comprehensive suite of security features. All management and monitoring are performed through Sophos Central.

3.1 Sophos Central Management

Sophos Central offers a unified console for managing your XGS 118 appliance. From Sophos Central, you can:

Configure firewall rules and policies.
Monitor network traffic and security events.
Manage VPN connections and SD-WAN policies.
Deploy and manage Xstream Protection features like sandboxing and IPS.
Generate reports on network activity and security posture.

Figura 3: Eżample of Sophos Central dashboard for unified management.

3.2 Xstream Protection Features

The XGS 118, especially with Xstream Protection, provides advanced security capabilities:

Deep Packet Inspection (DPI) & TLS Inspection: Scans encrypted traffic for hidden threats without compromising privacy.
Sistema ta' Prevenzjoni ta' Intrużjoni (IPS): Jidentifika u jimblokka intrużjonijiet u sfruttamenti fin-netwerk.
Sandboxing tal-Cloud: Analyzes suspicious files in a secure, isolated environment to identify zero-day threats.
Email Filtering: Protects against spam, phishing, and malware delivered via email.
Automated Threat Response: Integrates with Sophos Security Heartbeat to automatically isolate compromised devices.

Sophos Xstream Protection Features Diagram

Figura 4: Aktarview of Xstream Protection features for comprehensive security.

4. Manutenzjoni

Regular maintenance ensures optimal performance and security of your Sophos XGS 118 appliance.

4.1 Aġġornamenti tal-Firmware

Keep your appliance's firmware up-to-date to benefit from the latest security patches, features, and performance improvements. Firmware updates are managed through Sophos Central. Ensure you have a valid support subscription to receive these updates.

4.2 Monitoraġġ u Rappurtar

Utilize Sophos Central's monitoring and reporting tools to regularly review network activity, security alerts, and system health. This proactive approach helps identify and address potential issues before they impact your network.

4.3 Ambjent Fi]iku

Ensure the appliance is placed in a well-ventilated area, free from dust and extreme temperatures. Maintain proper airflow around the device to prevent overheating.

5 Issolvi l-problemi

This section provides basic troubleshooting steps for common issues. For more complex problems, refer to the Sophos knowledge base or contact technical support.

5.1 Kwistjonijiet tal-Enerġija

Ebda Qawwa: Verify the power adapter is securely connected to both the appliance and a working power outlet. Check the power LED indicators on the device.
Qawwa intermittenti: Ensure the power source is stable. Consider using a surge protector or uninterruptible power supply (UPS).

5.2 Kwistjonijiet ta' Konnettività tan-Netwerk

Ebda Aċċess għall-Internet: Check WAN cable connection and status lights. Verify your ISP connection. Review firewall rules in Sophos Central to ensure traffic is allowed.
Internal Network Problems: Confirm LAN cable connections. Check device IP configurations. Ensure Sophos Firewall OS is correctly configured for your internal network segments.
Prestazzjoni bil-mod: Monitor network usage and appliance performance in Sophos Central. High CPU or memory usage might indicate a bottleneck or misconfiguration.

5.3 Accessing Sophos Central

Cannot Log In: Verify your Sophos Central credentials. Ensure your management device has internet access.
Appliance Not Reporting: Check the appliance's internet connectivity. Ensure the appliance is properly registered with Sophos Central.

6. Speċifikazzjonijiet

Detailed technical specifications for the Sophos XGS 118 (Gen2) Network Security Appliance.

Sophos XGS 118 (Gen2) Technical Specifications Table

Figure 5: Comprehensive technical specifications for the Sophos XGS 118 (Gen2) appliance.

Sophos XGS 118 (Gen2) Key Specifications
Kategorija	Speċifikazzjoni
Isem tal-Mudell	XGS 118
Firewall Throughput	15.5 Gbps
Portijiet	9 x 2.5 GE Copper Ports, 1 x SFP Fiber Port
Sistema Operattiva	Sophos Firewall OS
Teknoloġija tal-Konnettività	Ethernet, Fiber Optic, Wi-Fi (802.11ax for XGS 118w)
Dimensjonijiet (H x W x D)	44 x 320 x 212 mm
Piż (mhux ippakkjat)	2.4 kg (5.29 lbs)
Provvista tal-Enerġija	External auto-ranging AC-DC 100-240VAC
Temperatura operattiva	0°C sa 40°C (32°F sa 104°F)
Umdità	10% sa 90%, mingħajr kondensazzjoni
Karatteristika Speċjali	Internet Security, Advanced Threat Protection

For a complete list of specifications and performance metrics, refer to the official Sophos documentation or the detailed technical specifications image above.

7. Garanzija u Appoġġ

7.1 Garanzija tal-Prodott

The Sophos XGS 118 (Gen2) appliance typically comes with a standard hardware warranty. This specific product includes 3 Years Xstream Protection, which bundles advanced security features and support services.

7.2 Servizzi ta' Appoġġ

A valid support subscription is required to receive firmware upgrades and access to technical assistance. Enhanced support is included with all protection bundles, such as Xstream Protection. You can upgrade your support plan for additional services and faster response times.

Sophos Central provides comprehensive management and reporting capabilities, which are integral to your support experience. For detailed information on support tiers and services, please visit the official Sophos website or consult your sales representative.

Sophos Licensing Options and Support Tiers

Figura 6: Aktarview of Sophos licensing and support options.

7.3 Vidjo Uffiċjali tal-Prodott

Video 1: An official video providing an overview of the Sophos XGS Series 2nd Gen Desktop Appliances. This video highlights key features and benefits of the product line.

	Sophos Firewall: Protezzjoni u Prestazzjoni Qawwija Esplora l-arkitettura tas-Sophos Firewall Xstream, iddisinjata biex tipprovdi sigurtà robusta tan-netwerk, prestazzjoni għolja, u protezzjoni avvanzata kontra t-theddid għal negozji ta’ kull daqs. Skopri karatteristiċi bħal TLS 1.3 Inspection, Deep Packet Inspection, Application Acceleration, u kapaċitajiet SD-WAN.
	Apparati tas-Serje Sophos XGS: Istruzzjonijiet Operattivi għal XGS 118(w)/128(w)/138 Istruzzjonijiet komprensivi dwar l-operat għall-apparati tas-sigurtà tan-netwerk tas-Serje Sophos XGS, inklużi l-mudelli XGS 118(w), XGS 128(w), u XGS 138. Ikopri l-installazzjoni, il-konformità regolatorja, il-kunsiderazzjonijiet ambjentali, l-ispeċifikazzjonijiet tekniċi, l-interfaċċji, u l-proċeduri operattivi.
	Sophos XGS 116(w)/126(w)/136(w) Operating Instructions Comprehensive operating instructions for Sophos XGS 116(w), 126(w), and 136(w) network security appliances, covering installation, configuration, technical specifications, and safety precautions.
	Sophos XGS 116(w)/126(w)/136(w) Operating Instructions This document provides operating instructions for the Sophos XGS 116(w), 126(w), and 136(w) network appliances. It covers installation, configuration, hardware details, technical specifications, safety precautions, and connection information.
	Gwida ta' Bidu Mgħaġġel għas-Sophos XGS 2100/2300/3100/3300 Din il-gwida tipprovdi informazzjoni essenzjali għat-twaqqif u l-konnessjoni tal-firewall appliance Sophos XGS tiegħek, inkluż il-ftuħ tal-kaxxa, il-konnessjonijiet inizjali, u l-konfigurazzjoni bażika.
	Sophos XGS 118(w)/128(w)/138 Operating Instructions Comprehensive operating instructions for the Sophos XGS 118(w), 128(w), and 138 series network security appliances. This guide covers hardware overview, regulatory compliance, technical specifications, interface details, mounting, and safe operation procedures.

Sophos XGS 118