Sophos SG 230 User Manual Rev. 3
Sophos SG Series Appliances
Unleash the full potential of your network
With bandwidth requirements constantly increasing, network security
appliances need to do more than ever before. The Sophos SG Series appliances
are built to provide optimal performance, versatility, and efficiency to meet all
your security needs.
Sophos SG Series Appliances
Unleash the full potential of your network
The Sophos SG Series appliances are designed to provide the optimal balance
between performance and protection – for diverse IT environments. Whether
you need a solution for a small remote office, want to protect your school
campus, or are a global organization requiring high-availability and enterprisegrade features, our SG Series appliances are an ideal fit.
Versatile
Appliances to suit every environment
Our broad product line-up makes it easy for you to choose
the right appliance. A higher model number indicates
higher throughput and an increased number of ports or
connectivity options.
And as every software subscription is available on every
appliance, you can flexibly size the solution to fit your
budget and your individual security needs. Next-generation
firewall features or all-in-one security on a single box, it’s
your choice.
Rapid
Proven performance on all models
Our appliances are built upon the most advanced Intel
technology. Optimized use of multi-core processors
allows consolidation of your security solutions without a
performance trade-off.
With faster than ever firewall, IPS and VPN throughput
speeds, our SG Series appliances effortlessly handle
multiple tasks simultaneously. Plus, you can easily scale up
by dynamically clustering up to 10 units* without external
load balancers.
Reliable
Built for business – today and tomorrow
Using the latest Intel technology, our products provide the
utmost in flexibility. Add to your protection as you need
it - without changing or upgrading your hardware. That
means you benefit from future software and performance
enhancements which guarantees the best possible value
for money.
Redundancy features such as a second power supply
are available for all 1U, 2U and even our Desktop models.
Additionally, the 1U SG 450 and all 2Us come with a second
hard-drive.
Modular
Flexible configuration options
Configure your hardware to suit your infrastructure and
change it as and when you need to. Our optional FleXi
Port LAN modules give you the freedom to select the
connectivity you need – copper, fiber, 10 GbE or 40 GbE–
you decide.
FleXi Port modules are interchangeable within a range, e.g.
1U, saving you money if you upgrade to a different model at
a later date.
Responsive
Technology built to process data
in real-time
Your network is constantly changing so your protection
needs to be adaptive. All our appliances have integrated
solid state disks (SSDs) for local storage of spam quarantine
data and faster access to comprehensive reports and realtime logs.
Accelerated in-memory content scanning in secure proxy
mode makes your defenses more effective and efficient.
* For HA support, appliances must be of the same model AND revision number
1
Some of our Desktop models now include an expansion bay
to add an optional module, e.g. for 3G/4G connectivity. We
also offer an optional SFP DSL modem for Desktop models.
Connected
Full wireless coverage – for every office
Our SG 100 Series desktop models with integrated wireless
are a very tidy solution for even the most compact office
space. As the access point is built in, you do not require any
extra hardware. Should you need additional coverage or
have a larger space, you can add Sophos access points.
Every one of our Desktop appliances is available with a
built-in wireless controller for you to connect and manage
Sophos access points. You can also add a 2nd Wi-Fi radio to
the SG 135w for even better performance and coverage.
Sophos SG Series Appliances
Adapt Connectivity with Optional Modules
Connectivity Modules for Desktop Models
Add additional connectivity options to your Desktop appliances to enhance the range and performance of your network.
Modules for Desktops
(For XG/SG 125(w) and 135(w) Rev. 3 only)
2 external antennas, SIM card slot (2FF)
Supports LTE (Cat-6)/DC-HSPA+/HSPA+/HSPA/
UMTS (WCDMA, APAC version also TD-SCDMA)
3G/4G Module:
SFP format supports all VDSL2 standards
defined in ITU –T G.993.2, G.994.1, G.997.1, and
the VDSL2 profiles 8a, 8b, 8c, 8d, 12a, 12b, 17a
FleXi Port Modules for 1U and 2U
Configure your hardware to suit your infrastructure and change it as and when you need to. Our optional FleXi Port LAN
modules give you the freedom to select the connectivity you need – copper, fiber, 10GbE, 40 GbE – you decide.
FleXi Port Modules for 1U FleXi Port Modules for 2U
DSL Modem – SFP:
(for XG/SG 1xx(w) Rev.3 only)
2nd Wi-Fi Radio Module:
(For XG/SG 135w Rev.3 only)
802.11a/b/g/n/ac, 2 x 2 MIMO,
2.4 or 5 GHz, 2 external antennas
8 port GbE copper FleXi Port module
(for SG/XG 2xx/3xx/4xx only)
8 port GbE SFP FleXi Port module
(for SG/XG 2xx/3xx/4xx only)
2 port 10 GbE SFP+ FleXi Port module
(for SG/XG 2xx/3xx/4xx only)
4 port 10 GbE SFP+ FleXi Port module
(for SG/XG 2xx/3xx/4xx only)
2 port 40 GbE QSFP+ FleXi Port module
(for SG/XG 210 Rev.3 and SG/XG
230, 3xx and 4xx Rev.2 only)
4 port GbE copper PoE FleXi Port module
(for SG/XG 210 Rev.3 and SG/XG
230, 3xx and 4xx Rev.2 only)
8 port GbE copper FleXi Port module
(for XG 750 and SG/XG 550/650 Rev.2 only)
8 port GbE SFP FleXi Port module
(for XG 750 and SG/XG 550/650 Rev.2 only)
2 port 10 GbE SFP+ FleXi Port module
(for XG 750 and SG/XG 550/650 Rev.2 only)
4 port 10 GbE SFP+ FleXi Port module
(for XG 750 and SG/XG 550/650 Rev.2 only)
2 port 40 GbE QSFP+ FleXi Port module
(for XG 750 and SG/XG 550/650 Rev.2 only)
8 port GbE copper PoE FleXi Port module
(for SG/XG 210 Rev.3 and SG/XG
230, 3xx and 4xx Rev.2 only)
Please note: Transceivers (mini GBICs) are sold separately.
2
Sophos SG Series Appliances
Sophos SG Series Appliances – at a glance
Product Matrix
Model Tech. Specs Throughput
Revision #
SG 105(w) 3 desktop 4 a/b/g/n/ac opt. ext. Power 2,500 325 350 380
SG 115(w) 3 desktop 4 a/b/g/n/ac opt. ext. Power 2,700 425 500 500
SG 125(w) 3 desktop 9/1 (9) a/b/g/n/ac
SG 135(w) 3 desktop 9/1 (9) a/b/g/n/ac
SG 210 3 1U 8/1 (16) n/a opt. ext. Power 12,000 1,000 2,000 500
SG 230 2 1U 8/1 (16) n/a opt. ext. Power 14,500 2,000 3,000 800
SG 310 2 1U 12/1 (20) n/a opt. ext. Power 19,000 3,000 5,000 1,200
SG 330 2 1U 12/1 (20) n /a opt. ext. Power 22,000 4,000 6,000 1,500
SG 430 2 1U 10/2 (26) n/a opt. ext. Power 28,000 4,000 7,000 2,000
SG 450 2 1U 10/2 (26) n/a opt. int. Power 30,000 5,000 8,000 2,500
Form
Factor
Ports/Slots
(Max Ports)
w-model 802.11
wireless
Swappable
Components
opt. ext. Power,
3G/4G
opt. ext. Power,
3G/4G, Wi-Fi
Firewall
(Mbps)
3,100 500 750 650
6,000 1,000 1,500 1,400
*
VPN
(Mbps)
IPS
(Mbps)
AV-proxy
(Mbps)
SG 550 2 2U 8/4 (32) n/a Power, SSD, Fan 45,000 8,000 12,000 3,500
SG 650 2 2U 8/6 (48) n/a Power, SSD, Fan 65,000 10,000 16,000 5,000
* 2nd Wi-Fi module option on 135w only (requires UTM 9.508)
This is what you get with every Sophos SG Series firewall:
Ì The latest Intel multi-core technology for optimal performance and efficiency
Ì The same security features available on every size of appliance
Ì Built-in SSD as storage for local quarantine data, logs and reporting
Ì FleXi Port modules available for all 1U and 2U appliances (interchangeable within a range, e.g. 1U)
Ì Add-on connectivity options for all Desktop models
Ì Optional redundant power supply for every model, incl. Desktops
Ì Free Sophos UTM Manager (SUM) to manage multiple appliances
Ì Possibility to dynamically cluster up to 10 appliances of the same model and revision – without external load balancers
3
Sophos SG Series Appliances
Sophos SG Series Appliances - Small
These desktop firewalls offer exceptional performance for models in this class
and are available with the same broad set of security features as all our other
appliances. The following diagrams show typical deployments in this range
using both integrated wireless LAN and external access points.
Protected
Network
SG 135w
LT E
Sophos
AP for expanded
wireless coverage
Large Branch Office
Internet
Protected
Network
Sophos RED SG 105w Protected
Branch Office
Sophos Wireless
Protection
Protected
Network
SG 330 Mail
Server
Central Office
A typical deployment scenario using the SG 135w and SG 105w as part of a distributed organization.
Network
Standalone Office
Domain
Server
UTM
Manager
4
Loading...