Sophos XGS 128 (Gen2) Network Security Appliance Instruction Manual

1. บทนำ

This manual provides essential information for the installation, operation, and maintenance of your Sophos XGS 128 (Gen2) Network Security Appliance. The Sophos XGS 128 is designed for larger networks, offering robust security and high performance.

คุณสมบัติที่สำคัญ ได้แก่:

• Next-generation firewall appliance with Xstream Protection for zero-day defense, cloud sandboxing, email filtering, intrusion prevention, and advanced reporting.
• 9 x 2.5 GE copper ports and 1 SFP fiber port, providing up to 19.1 Gbps firewall throughput.
• TLS inspection and next-generation intrusion prevention to block hidden threats in encrypted traffic.
• Managed through Sophos Central for unified policies and reporting.

2. สินค้าหมดview

The Sophos XGS 128 (Gen2) is a compact yet powerful network security appliance. Familiarize yourself with its physical components.

รูปที่ 2.1 : ด้านหน้า view of the Sophos XGS 128 (Gen2) Network Security Appliance.

Figure 2.2: Detailed front panel showing LED indicators and ports.

Figure 2.3: Rear panel illustrating the 9 x 2.5 GE copper ports, 1 SFP fiber port, and other connectors.

3. คำแนะนำในการตั้งค่า

3.1 การแกะและการจัดวาง

• Carefully unpack the appliance and all accessories.
• Place the appliance on a stable, flat surface in a well-ventilated area. Ensure adequate space around the device for airflow.
• ควรหลีกเลี่ยงการวางเครื่องใช้ไฟฟ้าไว้ใกล้แหล่งความร้อนหรือในที่ที่มีแสงแดดส่องโดยตรง

3.2 การเชื่อมต่อเครื่องใช้ไฟฟ้า

1. เชื่อมต่อพลังงาน: Plug the power adapter into the DC IN 1 or DC IN 2 port on the rear of the appliance, then connect it to a power outlet.
2. เชื่อมต่อสายเคเบิลเครือข่าย:
   • Connect your internet service provider's modem or router to the designated WAN port (e.g., Port 2/WAN) using an Ethernet cable.
   • Connect your internal network switch or a computer directly to a LAN port (e.g., Port 1/LAN) using an Ethernet cable.
   • For SFP fiber connectivity, insert the appropriate SFP module into the SFP port (F1 SFP) and connect the fiber optic cable.
3. การเข้าถึงครั้งแรก: Connect a computer to a LAN port. The appliance will typically assign an IP address via DHCP. Access the web administration interface by navigating to the default IP address (refer to the quick start guide or Sophos documentation for the specific default IP).

4. คู่มือการใช้งาน

The Sophos XGS 128 (Gen2) is managed primarily through its web-based administration interface or Sophos Central.

4.1 การกำหนดค่าเริ่มต้น

• Follow the on-screen wizard for initial setup, including setting up network zones, basic firewall rules, and administrative passwords.
• Register your appliance with Sophos Central for centralized management and licensing.

4.2 Core Security Features

• ไฟร์วอลล์: Configure rules to control network traffic based on source, destination, service, and user.
• ระบบป้องกันการบุกรุก (IPS): Enable IPS to detect and block known exploits and attacks.
• TLS Inspection: Decrypt and inspect encrypted traffic (HTTPS, SMTPS) for hidden threats.
• Xstream Protection: Leverage advanced threat protection features like cloud sandboxing and zero-day defense.
• SD-WAN: Optimize network performance and reliability for branch office connectivity.

For detailed configuration of specific features, refer to the comprehensive Sophos Firewall documentation available on the Sophos support portal.

รูปที่ 4.1: อดีตample of the Sophos Central dashboard, providing centralized management and visibility.

5. การบำรุงรักษา

Regular maintenance ensures optimal performance and security of your Sophos XGS 128 appliance.

• อัพเดตเฟิร์มแวร์: Regularly check for and apply the latest firmware updates to benefit from new features, performance improvements, and security patches.
• การสำรองข้อมูลการกำหนดค่า: Periodically back up your appliance configuration. This is crucial for quick recovery in case of unforeseen issues.
• การตรวจสอบระบบ: Monitor system logs, resource utilization, and security alerts through the web interface or Sophos Central.
• การตรวจร่างกาย: ตรวจสอบให้แน่ใจว่าเครื่องใช้ไฟฟ้าปราศจากฝุ่น และช่องระบายอากาศไม่ถูกปิดกั้น

6 การแก้ไขปัญหา

This section covers common issues and basic troubleshooting steps.

6.1 ไฟแสดงสถานะ LED

Refer to the front panel LEDs for quick status checks:

• กำลังไฟ LED: บ่งชี้สถานะพลังงาน
• ไฟ LED แสดงสถานะ: Provide information on system health and activity. Consult the Sophos documentation for specific LED patterns and their meanings.
• ไฟ LED พอร์ต: ระบุสถานะการเชื่อมต่อและกิจกรรมสำหรับพอร์ตเครือข่ายแต่ละพอร์ต

6.2 ปัญหาทั่วไป

• ไม่มีการเชื่อมต่อเครือข่าย:
  • Check all network cable connections.
  • Verify power status of the appliance and connected devices.
  • Ensure correct IP configuration on connected devices.
• ประสิทธิภาพการทำงานช้า:
  • Check CPU and memory utilization via the administration interface.
  • Review firewall rules and security policies for potential bottlenecks.
  • Ensure the appliance firmware is up to date.

If issues persist, consult the Sophos support resources or contact Sophos technical support.

7. ข้อมูลจำเพาะ

Detailed technical specifications for the Sophos XGS 128 (Gen2) Network Security Appliance.

Figure 7.1: Technical specifications table for the Sophos XGS 128 (Gen2) and related models.

Figure 7.2: Product matrix comparing various Sophos XGS Series models and their technical specifications.

8. Licensing and Protection

The Sophos XGS 128 (Gen2) leverages various licensing options to provide comprehensive security. This appliance includes a 3-year Xstream Protection subscription.

รูปที่ 8.1: เกินview of all available licensing options for Sophos XGS appliances, including Xstream Protection and Standard Protection bundles.

8.1 Xstream Protection

Xstream Protection is an advanced security bundle designed to provide comprehensive defense against sophisticated cyberattacks. It includes:

• Zero-day protection with cloud sandboxing.
• Email filtering.
• Automated threat response.
• Advanced reporting.

Figure 8.2: Detailed breakdown of features included in the Xstream Protection bundle, covering network, web, and zero-day protection.

9. การรับประกันและการสนับสนุน

Your Sophos XGS 128 (Gen2) Network Security Appliance comes with a manufacturer's warranty. The specific duration and terms of the warranty are dependent on your purchase agreement and region. This particular model includes 3 years of Xstream Protection, which typically includes support services.

For technical assistance, warranty claims, or to access additional resources, please visit the official Sophos support webเว็บไซต์:

• Sophos Support Portal

It is recommended to register your product with Sophos to ensure you receive timely updates and support notifications.