Page 1
Operating Instructions
XG 310/330 Rev. 2
Page 2
Operating Instructions
Foreword
We are pleased to welcome you as a new customer of our Sophos XG appliances.
To install and configure the hardware appliance you can use the following
documents:
Ì Hardware Quick Start Guide: Connection to the
system peripherals in a few steps
Ì Operating Instructions: Notes on the security and
commissioning of the hardware appliance
Ì Administration Guide: Installing and configuring the software appliance
The Hardware Quick Start Guide and the Safety Instructions are also delivered
in printed form together with the hardware appliance. The instructions must be
read carefully prior to using the hardware and should be kept in a safe place.
You may download all user manuals and additional documentation from the
support webpage at: sophos.com/support
Security Symbols
The following symbol and its meaning appears in the Hardware Quick Start
Guide, Safety Instructions and in these Operating Instructions.
Caution and Important Note. If these notes are not correctly observed:
Ì This is dangerous to life and the environment
Ì The appliance may be damaged
Ì The functions of the appliance will be no longer guaranteed
Ì Sophos shall not be liable for damages arising from a
failure to comply with the Safety Instructions
Designed Use
The hardware appliances are developed for use in networks. The XG 310/330
models may be operated as a standalone appliance. The hardware appliance can
be used in commercial, industrial and residential environments.
The XG 310/330 models belongs to the appliance group A.
The hardware appliance must be installed pursuant to the current installation
notes. Otherwise failure-free and safe operation cannot be guaranteed. The EU
declaration of conformity is available at the following address:
Sophos Technology GmbH
Amalienbadstr. 41/Bau 52
76227 Karlsruhe
Germany
1XG 310/330 Rev. 2
Page 3
Operating Instructions
CE Labeling, FCC and Approvals
The XG 310/330 appliances comply with FCC Class A, CE, C-Tick, VCCI and UL.
Important Note: For computer systems to remain CE and FCC compliant, only CE
and FCC compliant parts may be used. Maintaining CE and FCC compliance also
requires proper cable and cabling techniques.
Operating Elements and Connections
XG 310/330 Rev. 2
Multi-function
LCD display
for LCD
1 x COM
(RJ45)
USB 3.0
XG 310/330 Rev. 2
Connector for optional
PoE Power Module
*
8 x GbE copper – fixed.
Incl. 2 bypass pairs
(ports 1/2 and 3/4)
2 x
Micro USBNavigation
2 x 10 GbE
SFP+ – fixed
2 x GbE SFP –
fixed
Connector for optional 2nd
external power supply
1 x
USB 3.0
HDMI
1 x expansion bay
(shown here with optional
FleXi Port module)
Power supply
Power switch1 x
* The displayed front image is of XG 330 device. The XG 310 device may vary slightly.
2XG 310/330 Rev. 2
Page 4
Operating Instructions
LED Status
Power (LED Display)
Power Supply Acitve Green
Power Supply Failure Red
SSD Active Blue
LEDs on each RJ45 Ethernet connector
ACT/LNK
(Left LED)
Green Constantly 1. The Ethernet port is receiving power.
Flashing The adapter is sending or receiving network data. The
Off 1. The adapter and switch are not receiving power.
2. Good connection between the Ethernet port and hub.
frequency of the flashes varies with the amount of traffic.
2. No connection between both ends of network.
3. Network drivers have not been loaded
or do not function correctly.
Speed
(Right LED)
LEDs on each SFP connector
ACT/LNK Green Constantly 1. The SFP connector is receiving power.
LEDs on each SFP+ connector
ACT/LINK
(Left LED)
ACT/LINK
(Right LED)
Amber On The Ethernet port is operating at 1,000 Mbps.
Green On The Ethernet port is operating at 100 Mbps.
Off The Ethernet port is operating at 10 Mbps.
2. Good linkage between the SFP connector and hub.
Flashing The adapter is sending or receiving network data. The
frequency of the flashes varies with the amount of traffic.
Off 1. The adapter and switch are not receiving power.
2. No connection between both ends of network.
3. Network drivers have not been loaded
or do not function correctly.
Green Constantly 1. The SFP+ connector is receiving power.
2. Good linkage between the SFP+ connector and hub.
Flashing The adapter is sending or receiving network data. The
frequency of the flashes varies with the amount of traffic.
Off 1. The adapter and switch are not receiving power.
2. No connection between both ends of network.
3. Network drivers have not been loaded
or do not function correctly.
Blue On The SFP+ connector is operating at 10,000 Mbps.
Amber On The SFP+ connector is operating at 1,000 Mbps.
Off Either the LED is not working or the SFP+ connector
is operating at a speed below 1,000 Mbps.
SOPHOS
Protection
Firmware Version
SFOS 16.xx.xx
LAN Bypass (LED Display)
LAN Bypass Active Green
LAN Bypass Off Off
Back side
Power Supply Green Constantly Power
Off No power
LCD and Control Keys
The Sophos XG 310/330 units have an LCD and an operating unit with four
membrane keys. In the LCD, 16 characters per line can be displayed.
While the security appliance is booting this message is displayed
Firmware Version Number
3XG 310/330 Rev. 2
Page 5
Operating Instructions
LCD Menu Details
Firmware Version SFOS 16.xx.xx
Main Menu
1. System Menu
Main Menu
2. Network Menu
Main Menu
3. Firmware Menu
Main Menu
4. HA Info
System Menu
1. Show Date
System Menu
2. Show Uptime
System Menu
3. Show CPU
System Menu
4. Show Memory
System Menu
5. Show LoadAvg
System Menu
6. Show Disk
System Menu
7. Live Users
Network Menu
1. Show Port1
Network Menu
2. Show Port2
Network Menu
3. Show Port3
Network Menu
4. Show All
Network Menu
5. Show Gateway
Firmware Menu
1. Show Firmware
Firmware Menu
2. Factory Reset
Firmware Menu
3. Shutdown
Firmware Menu
4. Reboot
Not Configured
Wed 28 March 2017
12:54:32 GMT
System uptime
0 days 0:26
CPU Usage
0.00%
Memory Usage
Used: 7.60%
Load Average
0.89 0.89 0.78
Show Disk
1. Total Usage
Show Disk
1. Detail Usage
Live Users
0
Port1(LAN)
172.16.16.16
Port2(WAN)
DHCP
Port3(NA)
IP NOT ASSIGN
Port1(LAN)
172.16.16.16
Port2(WAN)
DHCP
Port3(NA)
IP NOT ASSIGN
Port4(NA)
IP NOT ASSIGN
Port5(NA)
IP NOT ASSIGN
Port6(NA)
IP NOT ASSIGN
Port7(NA)
IP NOT ASSIGN
Port8(NA)
IP NOT ASSIGN
Port9(NA)
IP NOT ASSIGN
Port10(NA)
IP NOT ASSIGN
Port11(NA)
IP NOT ASSIGN
Port12(NA)
IP NOT ASSIGN
GW1: Port2
10.0.0.254
FW1=SFOS
16.05.1 MR-1
Factory Reset
1. v to Cont.
Factory Reset
2. Confirm
Shutdown
1. v to Cont.
Shutdown
1. Confirm
Reboot
1. v to Cont.
Reboot
1. Confirm
Total Disk Usage
0.02
Root 1%
Temp 0%
Config 9%
Signature 1%
4XG 310/330 Rev. 2
Page 6
Operating Instructions
Executable Actions
Ì Factory reset: All settings are reset to the factory settings. The factory
reset function sets all of the configuration settings and options to their
original state. All data entered after the initial installation will be deleted,
including the HTTP proxy cache, the entire email queue, accounting
and reporting data, passwords, and uninstalled Up2Date packages.
The version of the software will not change. That is, all firmware
and pattern updates that have been installed will be retained.
Ì Shut down: The security appliance is shut down. The shut down action allows
you to turn off the system, and allows you to cleanly stop all running services.
Ì Reboot machine: The security appliance is rebooted. The reboot
action will shut down the system completely and reboot.
Control Key Functions
The current menu is left. When the key is pressed a couple of times, the
modifications are discarded and the initial state will be displayed.
These keys are used to switch between the different menus and/or characters.
Pressing executes the configured action.
Factory Reset
S.NO. Action Item/press What you see on the LCD What it means
1.
2.
3.
4.
x2
5.
6.
7.
8.
9.
SOPHOS
Protection
Firmware Version
SFOS 16.05.1 MR-1
Main Menu
1. System Menu
Main Menu
3. Firmware Menu
Firmware Menu
1. Show Firmware
Firmware Menu
2. Factory Reset
Factory Reset
1. v to Cont.
Factory Reset
2. Confirm?
Appliance is booting
Appliance has finished Booting
Shows Main Menu first item
Shows Main Menu third item
Enters Into Firmware Menu
Shows Firmware Menu second item
Press down key to continue
Asks for Confirmation
Factory Reset under progress
10.
Firmware Version
SFOS 16.05.1 MR-1
Factory Reset complete
5XG 310/330 Rev. 2
Page 7
Operating Instructions
Shut Down
S.NO. Action Item/press What you see on the LCD What it means
1.
SOPHOS
Protection
Appliance is booting
2.
3.
4.
x2
5.
6.
x2
7.
8.
Firmware Version
SFOS 16.05.1 MR-1
Main Menu
1. System Menu
Main Menu
3. Firmware Menu
Firmware Menu
1. Show Firmware
Firmware Menu
3. Shutdown
Factory Reset
1. v to Cont.
Factory Reset
2. Confirm?
Appliance has finished booting
Shows Main Menu first item
Shows Main Menu third item
Enters Into Firmware Menu
Shows Firmware Menu third item
Press down key to Continue
Asks for Confirmation
9.
Shutdown complete
Reboot Machine
S.NO. Action Item/press What you see on the LCD What it means
1.
SOPHOS
Protection
Appliance is booting
2.
3.
4.
5.
6.
7.
8.
9.
10.
x2
x3
Firmware Version
SFOS 16.05.1 MR-1
Main Menu
1. System Menu
Main Menu
3. Firmware Menu
Firmware Menu
1. Show Firmware
Firmware Menu
4. Reboot
Factory Reset
1. v to Cont.
Factory Reset
1. Confirm?
Firmware Version
SFOS 16.05.1 MR-1
Appliance has finished Booting
Shows Main Menu first item
Shows Main Menu third item
Enters into Firmware Menu
Shows Firmware Menu fourth item
Press down key to continue
Asks for Confirmation
Reboot under progress
Reboot complete
6XG 310/330 Rev. 2
Page 8
Operating Instructions
Putting into Operation
Caution: Risk of explosion if battery is replaced by an incorrect type. Dispose of
used batteries according to the instructions.
Scope of Supply
The supplied parts are indicated in the Hardware Quick Start Guide.
Mounting Instructions
The XG 310/330 appliances are designed for use in racks. Please consider the
following security tips:
Important Note: Functional reliability outside of a rack cannot be guaranteed.
Warnings and Precautions
The appliance can be operated safely if you observe the following notes and the
notes on the appliance itself.
Rack Precautions
Ì Ensure that the leveling jacks on the bottom of the rack are fully
extended to the floor with the full weight of the rack resting on them.
Ì In single rack installation, stabilizers should be attached to the rack.
Ì In multiple rack installations, the racks should be coupled together.
Ì Always make sure the rack is stable before
extending a component from the rack.
Ì You should extend only one component at a time—extending two or
more simultaneously may cause the rack to become unstable.
General Server Precautions
Ì Review the electrical and general safety precautions that came
with the components you are adding to your appliance.
Ì Determine the placement of each component in
the rack before you install the rails.
Ì Install the heaviest server components on the
bottom of the rack first, and then work up.
Ì Allow the hot plug hard drives and power supply
modules to cool before touching them.
Ì Always keep the rack‘s front door, all panels and server components
closed when not servicing to maintain proper cooling.
7XG 310/330 Rev. 2
Page 9
Operating Instructions
Rack Mounting Considerations
Ì Ambient operating temperature: If installed in a closed or multi-unit rack
assembly, the ambient operating temperature of the rack environment
may be greater than the ambient temperature of the room. Therefore,
you should install the equipment in an environment compatible
with the manufacturer’s maximum rated ambient temperature.
Ì Reduced airflow: Equipment should be mounted into
a rack with sufficient airflow to allow cooling.
Ì Mechanical loading: Equipment should be mounted into a rack so that a
hazardous condition does not arise due to uneven mechanical loading.
Ì Circuit overloading: Consideration should be given to the connection
of the equipment to the power supply circuitry and the effect that any
possible overloading of circuits might have on overcurrent protection
and power supply wiring. Appropriate consideration of equipment
nameplate ratings should be used when addressing this concern.
Ì Reliable ground: Reliable grounding must be maintained at all times.
To ensure this, the rack itself should be grounded. Particular attention
should be given to power supply connections other than the direct
connections to the branch circuit (i.e., the use of power strips, etc.).
Rack Mounting Instructions
To mount the appliance to the rack you need the delivered rack-mount brackets.
There are a variety of rack units on the market, which may mean the assembly
procedure will differ slightly. You should also refer to the installation instructions
that came with the rack unit you are using.
Important Note: Make sure you use the screws supplied with the rack-mount
brackets. Using the wrong screws could damage the hardware appliance and
would invalidate your warranty. Please observe the mounting instructions for
your rack.
1. Attach the rack-mount brackets to the appliance.
Place the appliance on a hard, flat surface with the front panel facing you.
Attach the rack–mount brackets to the left and right side of the appliance
with the supplied screws.
Make sure the brackets are properly attached to the appliance.
2. Choose the rack location.
Leave enough clearance in front of the rack so that you can open the front
door completely (~60 cm/25 inches).
Leave approximately 80 cm/30 inches of clearance in the back of the rack
to allow for sufficient airflow and ease in servicing.
This product is for installation only in a restricted access location (no
capitalization) (dedicated equipment rooms, service closets and the like).
3. Slide the appliance into the rack.
4. Attach the front and rear brackets to the rack with
the appropriate screws (not included).
8XG 310/330 Rev. 2
Page 10
Operating Instructions
Connection and Configuration
How to connect the appliance is described in the Hardware Quick Start Guide. For
configuration you can follow the initial setup wizard described in the WebAdmin
Quick Start Guide or cancel it and perform a manual setup (see the Sophos XG
Firewall Administrator Guide).
SFP GBIC Ports
The XG 310/330 models provide the option to add Sophos FleXi Port network
modules with SFP (1 GbE) or SFP+ (1/10GbE) GBIC Ports. The abbreviation SFP
GBIC stands for small form-factore plugable GigaBit interface converter, a flexible
interface which changes electronic signals into optical signals. The converters
used with the appliance are often also called Mini-GBIC or New GBIC.
To use SFP GBIC ports, you will need the appropriate SFP GBIC modules. These
modules are not delivered with the appliance but available through your Sophos
partner. There are different module types. The required type is determined by the
existing network. The following SFP GBIC module types may be used:
SFP:
1000 Base-T
IEEE 802.3 - 1 Gbit/s via Ethernet cable. An Ethernet cable category 5 covers a
maximum distance about 100 meters.
1000 Base-SX
IEEE 802.3 - 1 Gbit/s via fiberglass. Multi-mode fiberglass cables (MMF) cover a
distance of 200 m to 550 m.
1000 Base-LX
IEEE 802.3 - 1 Gbit/s via fiberglass. Here, exclusively singlemode-fiber glass is
used. This transmission option covers approximately 10 km.
SFP+:
10GBase-SR
IEEE 802.3 - 10 Gbit/s via fiberglass. Multi-mode fiberglas cables cover a
distance of up to 400 m.
10GBase-LR
IEEE 802.3 - 10 Gbit/s via fiberglass. Single-mode fiberglas cover a distance of
approximately 10 km
Note: The SFP+ ports of the Sophos FleXi Port modules are dual-rate capable
supporting both 1GbE and 10GbE speeds when using appropriate GBICs also
supporting both rates.
Caution: The SFP GBIC and SFP+ ports use lasers to transmit signals over
fiber optic cable. The lasers are compliant with the requirements of a Class 1
Laser equipment and are inherently eye-safe in normal operation. However, you
should never look directly at a transmit port when it is powered on. Always install
appropriate and UL approved Laser Class I Transceivers, rated 3.3Vdc, max. 1W,
in the fiber ports before using the fiber ports.
9XG 310/330 Rev. 2
Page 11
Operating Instructions
Installing a SFP GBIC module:
Please read the operation manual to the SFP GBIC module. Carefully insert the
SFP GBIC module into the port until it engages. The interface is immediately
ready for use.
Removing a SFP GBIC module:
1. Remove the fiberglass cable from the module which you wish to remove.
2. Remove the module carefully from the port.
Depending on when you purchased your SFP GBIC module, it may have any of
three different release mechanisms: a plastic tab on the bottom of the miniGBIC, a wire bail, or a plastic collar around the mini-GBIC.
Please read the operation manual to the SFP GBIC module.
Serial Console
You can connect a serial console to the COM port of the Sophos XG Firewall
hardware appliances. You can use, for instance, the Hyperterminal terminal
program which is included with most versions of Microsoft Windows to log on to
the appliance console. Use an RJ45 to DB9 adapter cable or the provided USB
cable to connect the console to your hardware appliance.
The required connection settings are:
Ì Bits per second: 38,400
Ì Data bits: 8
Ì Parity: N (none)
Ì Stop bits: 1
Access via the serial console is activated by default on ttyS1. The connections of
the appliances and the respective functionality are listed in chapter “Operating
Elements and Connections.”
10XG 310/330 Rev. 2
Page 12
Operating Instructions
United Kingdom and Worldwide Sales
Tel: +44 (0)8447 671131
Email: sales@sophos.com
© Copyright 2018. Sophos Ltd. All rights reserved.
Registered in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UK
Sophos is the registered trademark of Sophos Ltd. All other product and company names mentioned are
trademarks or registered trademarks of their respective owners.
18-05-22 OINA (DD-3006)
North American Sales
Toll Free: 1-866-866-2802
Email: nasales@sophos.com
Australia and New Zealand Sales
Tel: +61 2 9409 9100
Email: sales@sophos.com.au
Asia Sales
Tel: +65 62244168
Email: salesasia@sophos.com
Loading...