Sophos APX 740 operation manual

Operating Instructions

APX 320/530/740

Operating Instructions

Foreword

We are pleased to welcome you as a new Sophos APX Series customer.

Sophos APX Series access points are high performance wireless products using
the latest 802.11ac Wave 2 technology for a best-in-class user experience. The
APX Series models can be easily managed in Sophos Central, our cloud-based
security management platform. All you need to do is set up a Sophos Central
account and plug in the device anywhere in your network. The access point
will find the cloud-based controller automatically and become operable within
seconds. Management of these APX Series models in Sophos XG Firewall will be
available in a maintenance release of version 17.5.

These operating instructions will help you setup your Sophos Central account,
install and configure your Sophos APX Series access point and also provide
detailed technical specifications. In addition, please also see the following
documents that contain useful information on safety, regulatory compliance, and
configuration options:

Ì Sophos APX Series Safety Instructions and Regulatory Information

Ì Sophos APX Series Quick Start Guide

The instructions must be read carefully prior to using the device and should
be kept in a safe place. You can download all user manuals and additional
documentation from the Sophos Knowledgebase under

www.sophos.com/en-us/support/knowledgebase.aspx or from
www.sophos.com/get-started-ap.

Security Symbols

The following symbol and its meaning appears in the Quick Start Guide, Safety
Instructions and in these Operating Instructions.

Caution and Important Note. If these notes are not correctly observed:

Ì This is dangerous to life and the environment

Ì The access point may be damaged

Ì The functions of the access point will be no longer guaranteed

Ì Sophos shall not be liable for damages arising from a

failure to comply with the Safety Instructions

Designed Use

The access point must be installed pursuant to the current installation notes.
Otherwise failure-free and safe operation cannot be guaranteed. The EU
declaration of conformity is available upon request from the following address:

Sophos Technology GmbH
Amalienbadstr. 41/Bau 52
76227 Karlsruhe
Germany

1APX 320/530/740

Operating Instructions

Operating Elements and Connections

APX 320/530/740

Kensington Lock

LED

ETH0 (PoE) Port

ETH1 Port

(APX 530/740 only)

*

Console (RJ45) Port

Reset buttonMounting Bracket holes

* The displayed images show the APX 740. Other APX models may vary slightly.

Component Descriptions

Component Description

Status LED The Status LED indicates the operational state of your access point such as boot

Eth0 (PoE)
and ETH1
ports

Console port For debugging purposes, support staff can access the CLI by

Reset button The reset button allows you to reboot the device and reset its configuration

Kensington
Lock

status, firmware updates and error states. For details, see table “LED Status” below.

Eth0 is the primary Ethernet port to connect your access point to your network. This
port needs to be connected to a PoE capable source (PoE Injector or PoE switch)
to power your access point. There is no dedicated DC power source available.
Sophos offers suitable PoE injectors for purchase as an optional accessory.

Eth1 (on APX 530/740 only) can be used as an alternative
Ethernet port but does not receive power.

Both Ethernet ports are 10/100/1000 Mbps compatible and auto-negotiate
to the speed and half- and full-duplex of the connecting device.

making a serial connection to the RJ-45 console port.

For details, see “Serial Console Connection” below.

to the factory default. For details, please see section “Reboot & Reset”

You can physically secure the AP by attaching a lock and cable (such
as a Kensington® notebook lock) to the device lock slot.

2APX 320/530/740

Operating Instructions

LED Status

LED on Front

Off Off AP is off or reboot started

Green Solid Normal operation

Flashing AP is booting & connecting to wireless controller

Red Solid Error, no wireless controller found. AP will reboot (if not yet claimed

Flashing
slowly

Flashing
fast

* Your AP should recover from this state after a maximum of 5 minutes.

by a controller). Check network connection if error persists.

If reset button pressed: AP preparing configuration reset

Configuration reset in progress

Firmware update in progress

Note: Do not disconnect from power

*

*

*

Connection and Configuration

Your access point can either be managed by a wireless controller either located
in Sophos Central or within your XG Firewall. The initial connection of your access
point to your network and the wireless controller is described in the APX Quick
Start Guide which was been shipped with your device or is available under www.
sophos.com/get-started-ap.

For the access point to communicate with Sophos Central servers the following
ports will need to be open on your firewall:

Ì 443 (HTTPS)

Ì 80 (HTTP)

Ì 123 (NTP)

After successful connection you can start your initial configuration.

Setting up your access point in Sophos Central

You will need a Sophos Central account to manage your access points from
Sophos Central. Please go to https://central.sophos.com to sign in under your
account or create a new account.

After signing in select Wireless from the popup screen or click on Wireless in the
left navigation to get started.

Follow the Onboarding Wizard to register your access point.

For more information, please see the Sophos Central Admin Help.

Setting up your access point in XG Firewall

Please note: support for the APX 320/530/740 will be added in a maintenance
release of v17.5.

Instructions on how to set up a wireless network and add access points in XG are
provided in this video https://vimeo.com/271657858

3APX 320/530/740

Operating Instructions

Reboot & Reset

Your access point can be rebooted with the installed configuration or reset to the
factory default configuration depending on how long you press and hold the reset
button.

Reboot with current image and configuration

1. Press reset button

2. Release reset button

3. AP reboots (LED will go off, then will turn to solid green)

Reboot with current image and clear configuration

1. Press and hold reset button

2. AP reboots (LED will go off and then switch to green briefly)

3. LED will turn solid red for 5 sec. You can still cancel
the configuration clearance process by releasing the
reset button before the LED starts blinking

4. LED will blink red (configuration will be cleared)

5. Release reset button

6. AP reboots with factory default settings

Reset
Button

Status LED

Released

Pressed

Off

Reboot Reboot clear config

Solid Solid Blinking

5 Sec

4APX 320/530/740

Operating Instructions

Technical specifications

APX 320

Environment

Power consumption 11.5 W (max.)

Power over Ethernet
(PoE) requirements

Operating temperature 0°-40° C

Storage temperature -40°-70° C

Humidity 10-95% non-condensing

Hazardous substances RoHS-2 and REACH compliant

Physical specification

I/O ports 1x RJ45 connector console serial port

Memory 512 MByte DDR3L

Mounting Desktop

Dimensions
(Width x Depth x Height)

Weight 0,474 kg

Wireless specification

Radios 1x 2.4 GHz/5 GHz dual-band

Antennas 2x internal dual band antenna for Radio-1 (omni-directional)

Antenna Peak Gain 3.7 dBi at 2.4 GHz, 6.7 dBi at 5 GHz

MIMO capabilities 2x2:2

Supported WLAN standards IEEE 802.11 a/b/g/n/ac Wave 2

SSIDs 8 per radio, 16 in total

Max. Throughput 867 Mbps (5G) + 867 Mbps (5G)

802.3af

1x RJ45 10/100/1000 Ethernet w/PoE (802.3af)

1x Reset button

1x Kensington security slot

512 Mbyte NAND Flash

4 Mbyte SPI NOR Flash

Wall-mount hang

Ceiling (15/16, 9/16, 3/8 inch ceiling tracks)

155x155x38 mm

1x 5 GHz single band

1x Bluetooth low energy (BLE)

2x internal 5 GHz antenna for Radio-2 (omni-directional)

1x internal 2.4 GHz antenna for BLE

APX 320

Band/Mode Data Rate TX Power

2.412-2.472 GHz
(11b)

2.412-2.472 GHz
(11g)

1 Mbps 23 -99

2 Mbps 23 -96

5.5 Mbps 23 -94

11 Mbps 23 -91

6 Mbps 23 -94

9 Mbps 23 -92

12 Mbps 22 -91

18 Mbps 22 -89

24 Mbps 21 -86

36 Mbps 21 -82

48 Mbps 19 -78

54 Mbps 19 -76

Maximum
EIRP (dBm)

RX Sensitivity
(dBm)

5APX 320/530/740

Operating Instructions

APX 320

2.412-2.472 GHz
(11n HT20)

5.180-5.825 GHz
(11a)

5.180-5.825 GHz
(11ac VHT20)

5.180-5.825 GHz
(11ac VHT40)

5.180-5.825 GHz
(11ac VHT80)

MCS 0 23 -93

MCS 1 23 -90

MCS 2 22 -88

MCS 3 22 -85

MCS 4 21 -82

MCS 5 21 -78

MCS 6 19 -7 6

MCS 7 19 -7 5

MCS 8 18 -7 1

6 Mbps 22 -91

9 Mbps 22 -90

12 Mbps 21 -90

18 Mbps 21 -88

24 Mbps 20 -85

36 Mbps 20 -82

48 Mbps 18 -77

54 Mbps 18 -76

MCS0 22 -91

MCS1 22 -89

MCS2 21 -87

MCS3 21 -85

MCS4 20 -82

MCS5 20 -78

MCS6 18 -7 6

MCS7 18 -74

MCS8 17 -70

MCS0 22 -89

MCS1 22 -86

MCS2 21 -85

MCS3 21 -82

MCS4 20 -79

MCS5 20 -75

MCS6 18 -7 3

MCS7 18 -72

MCS8 17 -68

MCS9 17 -66

MCS0 22 -87

MCS1 22 -84

MCS2 21 -82

MCS3 21 -7 9

MCS4 20 -76

MCS5 20 -72

MCS6 18 -7 0

MCS7 18 -69

MCS8 15 -65

MCS9 14 -63

6APX 320/530/740