Sophos XG 210 operation manual

Quick Start Guide

XG 210 Rev. 3, XG 230 Rev. 2

Before you begin please confirm that you have a
working Internet connection and make sure you
have the account information available that was
provided by your ISP.

1. Before Deploying

Congratulations on the purchase of your Sophos XG device. This Quick Start Guide
describes in short steps how to connect your device and explains how to open the
web-based Admin Console from your administration PC. The Admin Console allows
you to configure every aspect of the device.

a) What does the box include

XG 210/230

(1U rack mount chassis)

XG 210 Rev. 3, XG 230 Rev. 2

Multi-function

1

LCD display

Navigation

for LCD

1 x COM
(RJ45)

2 x

USB 3.0

6 x GbE copper – fixed. Incl. 2
bypass pairs (ports 1/2 and 3/4)

Micro USB

2 x SFP

ports

This Quick Start Guide and

Security Notes

b) Device Images*: Front and Back

1 further expansion

bays (shown here

with optional FleXi

Port module)

* The displayed images are of XG 230 device. The XG 210 device may vary slightly.

2 rack mount brackets

Connector for redundant

external power supply

1 x HDMI

Quick Start Guide XG 210 Rev. 3, XG 230 Rev. 2

1 x

USB 3.0

Micro USB cable

RJ45 Ethernet cable

1 power cable

Power
supply

Power switch

Internet

2. Mount and connect the device

Please follow the rack mounting instructions as described in the XG Operating
Instructions guide* or the separate instructions provided with your rack mount rails.

Connect the ports to the internal and external networks

1. Connect the Port 1/LAN port via a hub or switch to the internal network. For this
purpose, use the RJ45 Ethernet cable provided. Note that your Administration PC
must also be connected to this network.

2. Connect Port 2/WAN to the external network. The connection to the WAN depends
on the type of Internet access.

Port 2/WAN

e.g.,
DSL modem

Internal network

admin client PC

XG Appliance

Port 1/

LAN

Switch

Quick Start Guide XG 210 Rev. 3, XG 230 Rev. 2

The XG devices are shipped with the following default settings:

Ethernet Port IP Address Zone

1 172.16.16.16/255.255.255.0 LAN
2 DHCP WAN

Admin Console Username Admin Console Password CLI Console Password

admin admin admin

Default Gateway DNS proxy DHCP service

DHCP Enabled Enabled

* Available at sophos.com/get-started-xg

2

3. Power Up the Device

Connect the power cable and turn on the device

Connect the device to the power supply using the power cable(s). Turn the device
on. The power switch is on the back of the device and is placed next to the power
connection. Once the device has booted completely, you’ll hear an acoustic signal:
five beeps in a row.

4. Connect your Administration PC

Administration PC connection properties:

Use the settings below to configure your (PC/Laptop) network interface:

Ì IP address: 172.16.16.2
Ì Netmask: Enter 255.255.255.0
Ì Default Gateway: Enter the IP address of the device’s

internal network card (Port 1/LAN): 172.16.16.16

Ì DNS Server: Enable this option and enter the IP address of

the internal network card (Port 1/LAN): 172.16.16.16

Connect your PC/Laptop to Port 1/LAN port of the device:

Start the browser and enter the management IP address of the device’s LAN port that
your PC is connected to: https://172.16.16.16:4444 (Port 1)

Login with the default details below:

Ì Username: admin
Ì Password: admin

3

Quick Start Guide XG 210 Rev. 3, XG 230 Rev. 2

Device Management

Welcome

To your Sophos Device

To get started register your device below. Until you register you may only access

and edit settings in “Basic Setup” and your device will remain unactivated.

Serial Number

Secure your enterprise with
Sophos integrated internet security

XXXXXXXXXXXXXXX

Basic Setup

Register Device

Network Configuration Wizard

5. Setup the device

a) Register the Device

If you have not previously registered your device with your Sophos ID, you will see a
registration screen. The device requires Internet connectivity for it to be registered
with your Sophos ID. You can adjust the network settings of the device’s interfaces by
clicking “Basic Setup” so that the device can connect to the Internet.

After clicking “Register Device”, you are redirected to the Sophos.com. If you already
have a Sophos ID, enter your login credentials under “Sign in with your Sophos ID”.
If you are a new user, sign up for a Sophos ID by entering the details under “Create
Sophos ID”.

Click “Continue” to complete the registration process. Please wait while the process
completes – it will take a few seconds. After successful registration, you will see
a screen with the message, “Your device is now registered”. Please note that you
should proceed with the next step i.e. “Synchronize License” only after the device is
successfully registered.

b) Synchronize License

Click “Initiate License Synchronization” to fetch license information from Sophos
onto the device. After synchronization, you will see a screen with the message,
“Synchronization with server was successful”.

c) Start Network Configuration

Start

Skip

After successful synchronization, choose “Click Here” on the “Welcome” screen to
start your initial device configuration. Use the Network Configuration Wizard to select
the deployment mode (Bridge/Gateway) for your device, change the interface(s) IP
addresses, default gateway, DNS settings and Date/Time Zone to match your local
network settings.

Quick Start Guide XG 210 Rev. 3, XG 230 Rev. 2

4

d) Device LED Status

Power (LED Display)

Power Supply Acitve Green
Power Supply Failure Red
SSD Active Blue

LEDs on each RJ45 Ethernet connector

ACT/LNK
(Left LED)

Green Constantly 1. The Ethernet port is receiving power.

Flashing The adapter is sending or receiving network data. The

Off 1. The adapter and switch are not receiving power.

2. Good connection between the Ethernet port and hub.

frequency of the flashes varies with the amount of traffic.

2. No connection between both ends of network.

3. Network drivers have not been loaded
or do not function correctly.

Speed
(Right LED)

LEDs on each SFP connector

ACT/LNK Green Constantly 1. The SFP connector is receiving power.

5

Amber On The Ethernet port is operating at 1,000 Mbps.
Green On The Ethernet port is operating at 100 Mbps.

Off The Ethernet port is operating at 10 Mbps.

2. Good linkage between the SFP connector and hub.

Flashing The adapter is sending or receiving network data. The

frequency of the flashes varies with the amount of traffic.

Off 1. The adapter and switch are not receiving power.

2. No connection between both ends of network.

3. Network drivers have not been loaded
or do not function correctly.

Quick Start Guide XG 210 Rev. 3, XG 230 Rev. 2

LAN Bypass (LED Display)

LAN Bypass Active Green
LAN Bypass Off Off

Back side

Power Supply Green Constantly Power

Off No power

6. Support and Documentation

For more information and technical support, please visit

www.sophos.com/en-us/support or contact your local Sophos reseller.

Quick Start Guide XG 210 Rev. 3, XG 230 Rev. 2

6

Bevor Sie beginnen, vergewissern Sie sich, dass
Sie mit dem Internet verbunden sind und die
Kontodaten vorliegen, die Sie von Ihrem ISP
erhalten haben.

1. Vorbereitung

Herzlichen Glückwunsch zum Kauf dieser Sophos XG Appliance. Diese Kurzanleitung
beschreibt schrittweise, wie Sie die Appliance verbinden, und erläutert, wie Sie über
Ihren Administrations-PC die webbasierte Admin Console öffnen. Über die Admin
Console können Sie jeden Aspekt der Appliance konfigurieren.

a) Verpackungsinhalt

XG 210/230

(1U Rackmontage-Gehäuse)

XG 210 Rev. 3, XG 230 Rev. 2

Multifunktions-

LCD-Anzeige

7

Navigation

für LCD

1 x COM
(RJ45)

2 x

USB 3.0

Diese Kurzanleitung und

Sicherheitshinweise

6 GbE Kupfer - fest. Einschl. 2
Bypass-Paaren (Ports 1/2 und 3/4)

Micro USB

2 x SFP-

Ports

* Die Abbildungen beziehen sich auf die XG 230 Appliance. Die Abbildung für die XG 210 Appliance kann geringfügig abweichen.

2 Rackmontage-Halterungen

b) Abbildungen der Appliance*: Vorder- und Rückseite

Anschluss für redundante

1 weiterer

Erweiterungsschacht

(hier mit optionalem FleXi

Port-Modul abgebildet)

externe Stromversorgung

1 x HDMI

Kurzanleitung XG 210 Rev. 3, XG 230 Rev. 2

1 x

USB 3.0

Netzteil

Netzschalter

Micro USB-Kabel

RJ45 Ethernet-Kabel

1 Netzkabel

Internet

2. Appliance montieren und verbinden

Befolgen Sie die Anweisungen für die Rackmontage gemäß der XG
Bedienungsanleitung* oder den separaten Anweisungen, die Ihren Rackmontage­Schienen beiliegen.

Ports mit den internen und externen Netzwerken verbinden

1. Verbinden Sie Port 1/LAN-Port über einen Hub oder Switch mit dem internen
Netzwerk. Verwenden Sie hierzu das beiliegende RJ45 Ethernet-Kabel. Beachten
Sie, dass Ihr Administrations-PC ebenfalls mit diesem Netzwerk verbunden sein
muss.

2. Verbinden Sie Port 2/WAN mit dem externen Netzwerk. Die Verbindung zum WAN
hängt von der Art des Internetzugangs ab.

Port 2/WAN

z.B.
DSL-Modem

Internes Netzwerk

Administrations-Client-PC

XG Appliance

Port 1/

LAN

Switch

Kurzanleitung XG 210 Rev. 3, XG 230 Rev. 2

Für die XG Appliances sind werkseitig folgende
Standardeinstellungen festgelegt:

Ethernet-Port IP-Adresse Vertrauenswürdige Sites

1 172.16.16.16/255.255.255.0 LAN
2 DHCP WAN

Benutzername Admin Console Kennwort Admin Console Kennwort CLI Console

admin Administrator Administrator

Standard-Gateway DNS-Proxy DHCP-Dienst

DHCP Aktiviert Aktiviert

* Abrufbar unter sophos.com/get-started-xg

8

3. Appliance einschalten

Schließen Sie das Netzkabel an und schalten Sie die Appliance ein.

Schließen Sie die Appliance mit dem beiliegenden Netzkabel an eine Netzsteckdose
an. Schalten Sie die Appliance ein. Der Netzschalter befindet sich auf der Rückseite der
Appliance neben dem Netzanschluss. Sobald die Appliance vollständig hochgefahren
ist, hören Sie ein akustisches Signal in Form von fünf aufeinanderfolgenden
Piepstönen.

4. Administrations-PC verbinden

Verbindungseigenschaften des Administrations-PC:

Verwenden Sie die nachfolgenden Einstellungen für die Konfiguration Ihrer (PC-/
Notebook-)Netzwerkschnittstelle:

Ì IP-Adresse: 172.16.16.2
Ì Netzmaske: 255.255.255.0
Ì Standardgateway: Geben Sie die IP-Adresse der internen

Netzwerkkarte des Geräts ein (Port 1/LAN): 172.16.16.16

Ì DNS-Server: Aktivieren Sie diese Option und geben Sie die IP-Adresse

der internen Netzwerkkarte ein (Port 1/LAN): 172.16.16.16

Verbinden Sie Ihren PC/Ihr Notebook mit dem
Port 1/LAN-Port der Appliance:

Öffnen Sie den Browser und geben Sie die Verwaltungs-IP-Adresse des LAN-Ports der
Appliance ein, mit dem Ihr PC verbunden ist: https://172.16.16.16:4444 (Port 1)

Melden Sie sich mit den nachfolgenden Standarddaten an:

Ì Username: admin
Ì Passwort: admin

9

Kurzanleitung XG 210 Rev. 3, XG 230 Rev. 2