Sophos SG 230 User Manual Rev. 3

0 (0)
Sophos SG 230 User Manual Rev. 3

Sophos SG Series Appliances

Unleash the full potential of your network

With bandwidth requirements constantly increasing, network security appliances need to do more than ever before. The Sophos SG Series appliances are built to provide optimal performance, versatility, and efficiency to meet all your security needs.

Sophos SG Series Appliances

Unleash the full potential of your network

The Sophos SG Series appliances are designed to provide the optimal balance between performance and protection – for diverse IT environments. Whether you need a solution for a small remote office, want to protect your school campus, or are a global organization requiring high-availability and enterprisegrade features, our SG Series appliances are an ideal fit.

Versatile

Appliances to suit every environment

Our broad product line-up makes it easy for you to choose the right appliance. A higher model number indicates higher throughput and an increased number of ports or connectivity options.

And as every software subscription is available on every appliance, you can flexibly size the solution to fit your budget and your individual security needs. Next-generation firewall features or all-in-one security on a single box, it’s your choice.

Rapid

Proven performance on all models

Our appliances are built upon the most advanced Intel technology. Optimized use of multi-core processors allows consolidation of your security solutions without a performance trade-off.

With faster than ever firewall, IPS and VPN throughput speeds, our SG Series appliances effortlessly handle multiple tasks simultaneously. Plus, you can easily scale up by dynamically clustering up to 10 units* without external load balancers.

Responsive

Technology built to process data in real-time

Your network is constantly changing so your protection needs to be adaptive. All our appliances have integrated solid state disks (SSDs) for local storage of spam quarantine data and faster access to comprehensive reports and realtime logs.

Accelerated in-memory content scanning in secure proxy mode makes your defenses more effective and efficient.

Reliable

Built for business – today and tomorrow

Using the latest Intel technology, our products provide the utmost in flexibility. Add to your protection as you need

it - without changing or upgrading your hardware. That means you benefit from future software and performance enhancements which guarantees the best possible value for money.

Redundancy features such as a second power supply are available for all 1U, 2U and even our Desktop models.

Additionally, the 1U SG 450 and all 2Us come with a second hard-drive.

Modular

Flexible configuration options

Configure your hardware to suit your infrastructure and change it as and when you need to. Our optional FleXi Port LAN modules give you the freedom to select the connectivity you need – copper, fiber, 10 GbE or 40 GbE– you decide.

FleXi Port modules are interchangeable within a range, e.g. 1U, saving you money if you upgrade to a different model at a later date.

Some of our Desktop models now include an expansion bay to add an optional module, e.g. for 3G/4G connectivity. We also offer an optional SFP DSL modem for Desktop models.

Connected

Full wireless coverage – for every office

Our SG 100 Series desktop models with integrated wireless are a very tidy solution for even the most compact office space. As the access point is built in, you do not require any extra hardware. Should you need additional coverage or have a larger space, you can add Sophos access points.

Every one of our Desktop appliances is available with a built-in wireless controller for you to connect and manage Sophos access points. You can also add a 2nd Wi-Fi radio to the SG 135w for even better performance and coverage.

* For HA support, appliances must be of the same model AND revision number

1

Sophos SG Series Appliances

Adapt Connectivity with Optional Modules

Connectivity Modules for Desktop Models

Add additional connectivity options to your Desktop appliances to enhance the range and performance of your network.

Modules for Desktops

3G/4G Module:

DSL Modem – SFP:

2nd Wi-Fi Radio Module:

(For XG/SG 125(w) and 135(w) Rev. 3 only)

(for XG/SG 1xx(w) Rev.3 only)

(For XG/SG 135w Rev.3 only)

2 external antennas, SIM card slot (2FF)

SFP format supports all VDSL2 standards

802.11a/b/g/n/ac, 2 x 2 MIMO,

Supports LTE (Cat-6)/DC-HSPA+/HSPA+/HSPA/

defined in ITU –T G.993.2, G.994.1, G.997.1, and

2.4 or 5 GHz, 2 external antennas

UMTS (WCDMA, APAC version also TD-SCDMA)

the VDSL2 profiles 8a, 8b, 8c, 8d, 12a, 12b, 17a

 

 

 

 

FleXi Port Modules for 1U and 2U

Configure your hardware to suit your infrastructure and change it as and when you need to. Our optional FleXi Port LAN modules give you the freedom to select the connectivity you need – copper, fiber, 10GbE, 40 GbE – you decide.

FleXi Port Modules for 1U

 

FleXi Port Modules for 2U

8 port GbE copper FleXi Port module

 

8 port GbE copper FleXi Port module

 

(for SG/XG 2xx/3xx/4xx only)

 

(for XG 750 and SG/XG 550/650 Rev.2 only)

 

 

 

8 port GbE SFP FleXi Port module

 

8 port GbE SFP FleXi Port module

(for SG/XG 2xx/3xx/4xx only)

 

(for XG 750 and SG/XG 550/650 Rev.2 only)

 

 

 

2 port 10 GbE SFP+ FleXi Port module

 

2 port 10 GbE SFP+ FleXi Port module

(for SG/XG 2xx/3xx/4xx only)

 

(for XG 750 and SG/XG 550/650 Rev.2 only)

 

 

 

4 port 10 GbE SFP+ FleXi Port module

 

4 port 10 GbE SFP+ FleXi Port module

(for SG/XG 2xx/3xx/4xx only)

 

(for XG 750 and SG/XG 550/650 Rev.2 only)

 

 

 

2 port 40 GbE QSFP+ FleXi Port module (for SG/XG 210 Rev.3 and SG/XG

230, 3xx and 4xx Rev.2 only)

2 port 40 GbE QSFP+ FleXi Port module (for XG 750 and SG/XG 550/650 Rev.2 only)

4 port GbE copper PoE FleXi Port module (for SG/XG 210 Rev.3 and SG/XG

230, 3xx and 4xx Rev.2 only)

8 port GbE copper PoE FleXi Port module (for SG/XG 210 Rev.3 and SG/XG

230, 3xx and 4xx Rev.2 only)

Please note: Transceivers (mini GBICs) are sold separately.

2

Sophos SG Series Appliances

Sophos SG Series Appliances – at a glance

Product Matrix

Model

 

 

 

 

 

 

Tech. Specs

 

 

 

 

 

Throughput

 

 

 

Revision #

 

Form

 

Ports/Slots

 

w-model 802.11

 

Swappable

 

Firewall

 

VPN

 

IPS

 

AV-proxy

 

 

 

 

 

 

 

 

 

 

 

Factor

 

(Max Ports)

 

wireless

 

Components

 

(Mbps)

 

(Mbps)

 

(Mbps)

 

(Mbps)

 

 

 

 

 

 

 

 

 

 

SG 105(w)

3

 

desktop

 

4

 

a/b/g/n/ac

 

opt. ext. Power

 

2,500

 

325

 

350

 

380

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

SG 115(w)

3

 

desktop

 

4

 

a/b/g/n/ac

 

opt. ext. Power

 

2,700

 

425

 

500

 

500

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

SG 125(w)

3

 

desktop

 

9/1 (9)

 

a/b/g/n/ac

 

opt. ext. Power,

 

3,100

 

500

 

750

 

650

 

 

 

 

3G/4G

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

SG 135(w)

3

 

desktop

 

9/1 (9)

 

a/b/g/n/ac

 

opt. ext. Power,

 

6,000

 

1,000

 

1,500

 

1,400

 

 

 

 

3G/4G, Wi-Fi*

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

SG 210

3

 

1U

 

8/1 (16)

 

n/a

 

opt. ext. Power

 

12,000

 

1,000

 

2,000

 

500

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

SG 230

2

 

1U

 

8/1 (16)

 

n/a

 

opt. ext. Power

 

14,500

 

2,000

 

3,000

 

800

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

SG 310

2

 

1U

 

12/1 (20)

 

n/a

 

opt. ext. Power

 

19,000

 

3,000

 

5,000

 

1,200

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

SG 330

2

 

1U

 

12/1 (20)

 

n/a

 

opt. ext. Power

 

22,000

 

4,000

 

6,000

 

1,500

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

SG 430

2

 

1U

 

10/2 (26)

 

n/a

 

opt. ext. Power

 

28,000

 

4,000

 

7,000

 

2,000

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

SG 450

2

 

1U

 

10/2 (26)

 

n/a

 

opt. int. Power

 

30,000

 

5,000

 

8,000

 

2,500

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

SG 550

2

 

2U

 

8/4 (32)

 

n/a

 

Power, SSD, Fan

 

45,000

 

8,000

 

12,000

 

3,500

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

SG 650

2

 

2U

 

8/6 (48)

 

n/a

 

Power, SSD, Fan

 

65,000

 

10,000

 

16,000

 

5,000

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

* 2nd Wi-Fi module option on 135w only (requires UTM 9.508)

This is what you get with every Sophos SG Series firewall:

ÌÌ The latest Intel multi-core technology for optimal performance and efficiency

ÌÌ The same security features available on every size of appliance

ÌÌ Built-in SSD as storage for local quarantine data, logs and reporting

ÌÌ FleXi Port modules available for all 1U and 2U appliances (interchangeable within a range, e.g. 1U)

ÌÌ Add-on connectivity options for all Desktop models

ÌÌ Optional redundant power supply for every model, incl. Desktops

ÌÌ Free Sophos UTM Manager (SUM) to manage multiple appliances

ÌÌ Possibility to dynamically cluster up to 10 appliances of the same model and revision – without external load balancers

3

Sophos SG Series Appliances

Sophos SG Series Appliances - Small

These desktop firewalls offer exceptional performance for models in this class and are available with the same broad set of security features as all our other appliances. The following diagrams show typical deployments in this range using both integrated wireless LAN and external access points.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Protected

SG 135w LTE

Sophos

 

 

 

 

 

 

Network

 

AP for expanded

 

 

 

 

 

 

 

 

 

 

 

 

wireless coverage

 

 

 

 

 

 

 

 

 

 

 

 

Large Branch Office

 

 

 

 

 

 

 

 

 

 

 

Internet

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Protected

Sophos RED

 

SG 105w

Protected

Network

 

 

 

 

 

 

 

 

 

Network

 

 

Branch Office

 

Standalone Office

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Sophos Wireless

Protected

SG 330

Mail

Domain

UTM

Protection

Network

 

Server

Server

Manager

Central Office

A typical deployment scenario using the SG 135w and SG 105w as part of a distributed organization.

4

Loading...
+ 10 hidden pages