We are pleased to welcome you as a new Sophos APX Series customer.
Sophos APX Series access points are high performance wireless products using
the latest 802.11ac Wave 2 technology for a best-in-class user experience. The
APX Series models can be easily managed in Sophos Central, our cloud-based
security management platform. All you need to do is set up a Sophos Central
account and plug in the device anywhere in your network. The access point
will find the cloud-based controller automatically and become operable within
seconds. Management of these APX Series models in Sophos XG Firewall will be
available in a maintenance release of version 17.5.
These operating instructions will help you setup your Sophos Central account,
install and configure your Sophos APX Series access point and also provide
detailed technical specifications. In addition, please also see the following
documents that contain useful information on safety, regulatory compliance, and
configuration options:
Ì Sophos APX Series Safety Instructions and Regulatory Information
Ì Sophos APX Series Quick Start Guide
The instructions must be read carefully prior to using the device and should
be kept in a safe place. You can download all user manuals and additional
documentation from the Sophos Knowledgebase under
www.sophos.com/en-us/support/knowledgebase.aspx or from
www.sophos.com/get-started-ap.
Security Symbols
The following symbol and its meaning appears in the Quick Start Guide, Safety
Instructions and in these Operating Instructions.
Caution and Important Note. If these notes are not correctly observed:
Ì This is dangerous to life and the environment
Ì The access point may be damaged
Ì The functions of the access point will be no longer guaranteed
Ì Sophos shall not be liable for damages arising from a
failure to comply with the Safety Instructions
Designed Use
The access point must be installed pursuant to the current installation notes.
Otherwise failure-free and safe operation cannot be guaranteed. The EU
declaration of conformity is available upon request from the following address:
* The displayed images show the APX 740. Other APX models may vary slightly.
Component Descriptions
Component Description
Status LEDThe Status LED indicates the operational state of your access point such as boot
Eth0 (PoE)
and ETH1
ports
Console portFor debugging purposes, support staff can access the CLI by
Reset button The reset button allows you to reboot the device and reset its configuration
Kensington
Lock
status, firmware updates and error states. For details, see table “LED Status” below.
Eth0 is the primary Ethernet port to connect your access point to your network. This
port needs to be connected to a PoE capable source (PoE Injector or PoE switch)
to power your access point. There is no dedicated DC power source available.
Sophos offers suitable PoE injectors for purchase as an optional accessory.
Eth1 (on APX 530/740 only) can be used as an alternative
Ethernet port but does not receive power.
Both Ethernet ports are 10/100/1000 Mbps compatible and auto-negotiate
to the speed and half- and full-duplex of the connecting device.
making a serial connection to the RJ-45 console port.
For details, see “Serial Console Connection” below.
to the factory default. For details, please see section “Reboot & Reset”
You can physically secure the AP by attaching a lock and cable (such
as a Kensington® notebook lock) to the device lock slot.
2APX 320/530/740
Page 4
Operating Instructions
LED Status
LED on Front
OffOffAP is off or reboot started
GreenSolidNormal operation
FlashingAP is booting & connecting to wireless controller
RedSolidError, no wireless controller found. AP will reboot (if not yet claimed
Flashing
slowly
Flashing
fast
* Your AP should recover from this state after a maximum of 5 minutes.
by a controller). Check network connection if error persists.
If reset button pressed: AP preparing configuration reset
Configuration reset in progress
Firmware update in progress
Note: Do not disconnect from power
*
*
*
Connection and Configuration
Your access point can either be managed by a wireless controller either located
in Sophos Central or within your XG Firewall. The initial connection of your access
point to your network and the wireless controller is described in the APX Quick
Start Guide which was been shipped with your device or is available under www.
sophos.com/get-started-ap.
For the access point to communicate with Sophos Central servers the following
ports will need to be open on your firewall:
Ì 443 (HTTPS)
Ì 80 (HTTP)
Ì 123 (NTP)
After successful connection you can start your initial configuration.
Setting up your access point in Sophos Central
You will need a Sophos Central account to manage your access points from
Sophos Central. Please go to https://central.sophos.com to sign in under your
account or create a new account.
After signing in select Wireless from the popup screen or click on Wireless in the
left navigation to get started.
Follow the Onboarding Wizard to register your access point.
For more information, please see the Sophos Central Admin Help.
Setting up your access point in XG Firewall
Please note: support for the APX 320/530/740 will be added in a maintenance
release of v17.5.
Instructions on how to set up a wireless network and add access points in XG are
provided in this video https://vimeo.com/271657858
3APX 320/530/740
Page 5
Operating Instructions
Reboot & Reset
Your access point can be rebooted with the installed configuration or reset to the
factory default configuration depending on how long you press and hold the reset
button.
Reboot with current image and configuration
1. Press reset button
2. Release reset button
3. AP reboots (LED will go off, then will turn to solid green)
Reboot with current image and clear configuration
1. Press and hold reset button
2. AP reboots (LED will go off and then switch to green briefly)
3. LED will turn solid red for 5 sec. You can still cancel
the configuration clearance process by releasing the
reset button before the LED starts blinking
4. LED will blink red (configuration will be cleared)
5. Release reset button
6. AP reboots with factory default settings
Reset
Button
Status LED
Released
Pressed
Off
RebootReboot clear config
SolidSolidBlinking
5 Sec
4APX 320/530/740
Page 6
Operating Instructions
Technical specifications
APX 320
Environment
Power consumption11.5 W (max.)
Power over Ethernet
(PoE) requirements
Operating temperature0°-40° C
Storage temperature-40°-70° C
Humidity10-95% non-condensing
Hazardous substancesRoHS-2 and REACH compliant
Physical specification
I/O ports 1x RJ45 connector console serial port
Memory512 MByte DDR3L
MountingDesktop
Dimensions
(Width x Depth x Height)
Weight0,474 kg
Wireless specification
Radios1x 2.4 GHz/5 GHz dual-band
Antennas2x internal dual band antenna for Radio-1 (omni-directional)
Antenna Peak Gain3.7 dBi at 2.4 GHz, 6.7 dBi at 5 GHz
4x internal 5 GHz antenna for Radio-2 (omni-directional)
1x internal 2.4 GHz antenna for BLE
APX 740
Band/ModeData RateTX Power
2.412-2.472 GHz
(11b)
2.412-2.472 GHz
(11g)
1 Mbps24-99
2 Mbps24-96
5.5 Mbps24-94
11 Mbps24-91
6 Mbps23-94
9 Mbps23-93
12 Mbps22-92
18 Mbps22-90
24 Mbps21-86
36 Mbps21-83
48 Mbps20-79
54 Mbps20-77
Maximum
EIRP (dBm)
RX Sensitivity
(dBm)
11APX 320/530/740
Page 13
Operating Instructions
APX 740
2.412-2.472 GHz
(11n HT20)
5.180-5.825 GHz
(11a)
5.180-5.825 GHz
(11ac VHT20)
5.180-5.825 GHz
(11ac VHT40)
5.180-5.825 GHz
(11ac VHT80)
MCS 023-94
MCS 1 23-90
MCS 222-88
MCS 3 22-84
MCS 421-81
MCS 5 21-77
MCS 619-7 5
MCS 7 19-7 4
MCS 818-7 0
6 Mbps22-92
9 Mbps22-91
12 Mbps21-89
18 Mbps21-87
24 Mbps20-84
36 Mbps20-81
48 Mbps19-76
54 Mbps19-74
MCS022-92
MCS1 22-88
MCS222-86
MCS3 22-82
MCS420-79
MCS5 20-74
MCS618-7 3
MCS7 18-72
MCS817-67
MCS022-89
MCS1 22-85
MCS222-83
MCS3 22-79
MCS420-76
MCS5 20-72
MCS618-7 1
MCS7 18-69
MCS817-65
MCS917-63
MCS022-86
MCS1 22-82
MCS222-80
MCS3 22-76
MCS420-73
MCS5 20-69
MCS618-67
MCS7 18-66
MCS815-62
MCS915-60
12APX 320/530/740
Page 14
Operating Instructions
Radiation patterns
2.4 G Band
0
6
355
349
343
338
332
326
321
315
310
304
298
293
287
281
276
270
265
259
253
248
242
236
231
225
219
214
208
203
197
191
11
17
23
0
-10
-20
-30
-40
-50
186
180
28
34
39
141
146
152
158
163
169
174
146
45
51
56
62
68
73
79
84
90
96
101
107
113
118
124
129
135
141
135
129
124
118
113
107
101
96
90
84
79
73
68
62
56
51
45
39
174
169
163
158
152
34
28
0
-10
-20
-30
-40
-50
23
17
11
6
2.45 GHz Horizontal (XY) 2.45 GHz Elevation (YZ)
5G Band
0
6
355
349
343
338
332
326
321
315
310
304
298
293
287
281
276
270
265
259
253
248
242
236
231
225
219
214
208
203
197
191
11
17
23
0
-10
-20
-30
-40
-50
186
180
28
34
39
141
146
152
158
163
169
174
146
45
51
56
62
68
73
79
84
90
96
101
107
113
118
124
129
135
141
135
129
124
118
113
107
101
96
90
84
79
73
68
62
56
51
45
39
174
169
163
158
152
34
28
0
-10
-20
-30
-40
-50
23
17
11
6
-180
-174
-169
-163
-158
-152
-146
-141
-135
-129
-124
-118
-113
-107
-101
-96
-90
-84
-79
-73
-68
-62
-56
-51
-45
-39
-34
-28
-23
-17
-11
-6
0
-180
-174
-169
-163
-158
-152
-146
-141
-135
-129
-124
-118
-113
-107
-101
-96
-90
-84
-79
-73
-68
-62
-56
-51
-45
-39
-34
-28
-23
-17
-11
-6
0
5.55 GHz Horizontal (XY) 5.55 GHz Elevation (YZ)
13APX 320/530/740
Page 15
Operating Instructions
Mounting instructions
There are various mounting options available allowing you to hang your access
point on the wall or mount it to various ceiling types. The following sections
provide detailed instructions for the various options which are available today.
Standard wall and ceiling rails mount
Each Sophos Access Point APX 320, APX 530, and APX 740 ships with a
mounting bracket that supports the following mounting options:
Ì Ceiling mount for 15/16’’, 3/8’’ and 9/16’’ ceiling track, flush ceiling tiles
Ì Wall mount hang
Screw hole for product fixing
3/8‘‘ ceiling rails support
Spring Lock
Wall mount keyholes
15/16‘‘ and 9/16‘‘ ceiling rails support
14APX 320/530/740
Page 16
Operating Instructions
APX 320/530/740 Mounting template
Do not shrink to fit when printing
4.08cm (1.6in)
15APX 320/530/740
Page 17
Operating Instructions
Ceiling mount
1. Fix the bracket to the rear of the Access Point
by using 4 of the supplied screws.
2. To install, put the access point underneath the ceiling rail
and turn it into place. To dismount, push down the spring
locks and turn the access point in the other direction.
Wall mount
6.7mm ±2.0
Wall
WallWall
1. Use the mounting template to mark the screw
mounting positions on the wall
2. Drill the 2 supplied wall anchors into the wall at the marked positions and
screw 2 supplied screws into them. Make sure they stand out ~6.7mm
3. Fix the bracket to the rear of the Access Point
by using 4 of the supplied screws.
4. Hang the access point (with the mounted bracket) on the
wall by aligning the key holes with the mounted screws
16APX 320/530/740
Page 18
Operating Instructions
Flat ceiling mount
To mount your access point to a flat ceiling, please use the “flat ceiling & plenum
mounting kit” which is available as an option from your Sophos partner.
The kit consists of the following components:
Fix-plate (to be fixed to the rear of the access point)
Screw hole for
product fixing
Spring lock
Main bracket (to be fixed to the ceiling)
Mounting instructions
Keyholes
Springs
Screw holes for
ceiling mount
4x M3 strep screws
Plenum mount clip plus 2x M4
screws and nuts
(not needed for ceiling mount)
1. Place the fix-plate on the rear of the Access Point. Make
sure it’s positioned in the right direction as indicated.
2. Install 4 step-screws (M3) from the supply into the bracket holes.
3. Fix the main bracket to a concrete ceiling by using 4 wall anchors and
screws or to a ceiling tile by using 4 screws and nuts (not supplied).
4. Align the Access Point (with fix-plate) via the key holes to the
main bracket and push it to the end in the sliding-slot.
17APX 320/530/740
Page 19
Operating Instructions
Plenum mount
For plenum mounting, please use the “flat ceiling & plenum mounting kit” which
is available as an option from your Sophos partner.
The kit consists of the following components:
Fix-plate (to be fixed to the rear of the access point)
Screw hole for
product fixing
Spring lock
Main bracket (to be fixed to the ceiling)
Mounting instructions
Keyholes
Springs
Feature holes for
plenum mount clip
4x M3 strep screws
Plenum mount clip plus 2x M4
screws and nuts
1. Place the fix-plate on the rear of the Access Point. Make
sure it’s positioned in the right direction as indicated.
2. Install 4 step-screws (M3) from the supply into the bracket holes.
3. Install the plenum clip onto the hanger frame and
fix it with a M4 or M5 screw (not supplied)
4. Connect the main bracket to the clip by using 2 of the supplied screws.
18APX 320/530/740
Page 20
Operating Instructions
5. Align the Access Point (with fix-plate) via the key holes to the
main bracket and push it to the end in the sliding-slot.
Suspend mount
For suspend mounting, please use the “suspend mounting kit” which is available
as an option from your Sophos partner.
The kit consists of the following components:
Anchor feature
Suspend wire
4 ring screws
Wire gripper
Secure clip
4 suspend wires with anchor
features and secure clips
Mounting instructions
Screw the 4 supplied ring-screws (M3) into the bracket holes on the rear of the
access point
19APX 320/530/740
Page 21
Operating Instructions
Find a suitable place on the ceiling to hang the 4 suspend-wires by using the
anchor feature
Pull end of string
downwards
Lift the AP up, open the secure-clips, attach the hooks to the rings, and release
the secure-clips to lock it
Press downwards
to release string
Move string
upwards
In order to adjust the height of the AP upwards, pull the end of the string further
out of the wire gripper. To adjust it downwards, press the top of the wire gripper to
release the wire first.
20APX 320/530/740
Page 22
Operating Instructions
Armstrong interlude and silhouette mount
An optional mounting kit will be made available soon.
Serial Console Connection
You can connect a serial console to the RJ45 COM port of your Access Point.
For example, you can use the HyperTerminal program which is included with
most versions of Microsoft Windows to log onto the appliance console. Use an
appropriate adapter to connect the console to your hardware appliance.
The required connection settings are:
Ì Bits per second: 38,400
Ì Data bits: 8
Ì Parity: N (none)
Ì Stop bits: 1
Access via the serial console is activated by default on ttyS1.
21APX 320/530/740
Page 23
Operating Instructions
United Kingdom and Worldwide Sales
Tel: +44 (0)8447 671131
Email: sales@sophos.com