Sophos XGS 126 Next-Gen Firewall User Manual

1. Pengenalan

This manual provides essential information for the installation, operation, maintenance, and troubleshooting of your Sophos XGS 126 Next-Gen Firewall. Please read this manual thoroughly before using the device to ensure proper setup and optimal performance. The Sophos XGS 126 is designed to provide advanced network security for small to medium businesses and branch offices.

2. Kandungan Pakej

Sahkan bahawa semua item terdapat dalam pakej anda:

• Sophos XGS 126 Appliance
• Kord Kuasa AS
• Kabel Ethernet
• Panduan Mula Pantas
• Maklumat Keselamatan dan Kawal Selia

3. Fizikal Overview

3.1 Panel Depan

The front panel of the Sophos XGS 126 features status indicators and a USB port.

Imej: Depan view of the Sophos XGS 126 appliance, showing LED indicators for status, power, and network activity, along with a USB port.

3.2 Panel Belakang

The rear panel provides all necessary ports for power, network connectivity, and console access.

Imej: Belakang view of the Sophos XGS 126 appliance, detailing the various ports including power inputs (DC IN 1, DC IN 2), console port (COM), USB ports, and multiple Ethernet ports (LAN, WAN, SFP).

• Power Inputs (DC IN 1, DC IN 2): Connect the power adapter here. The device supports redundant power supplies.
• Pelabuhan COM: RJ45 console port for direct management access.
• Port USB: For connecting external devices or for initial setup via USB.
• Port LAN (1-8): Gigabit Ethernet ports for connecting internal network devices.
• WAN Ports (9, 10): Gigabit Ethernet ports for connecting to external networks (e.g., internet).
• SFP Ports (11, 12): Small Form-Factor Pluggable ports for fiber optic or additional copper connectivity.
• Butang Tetapkan Semula: Used to reset the device to factory defaults (refer to Troubleshooting section).

4. Arahan Persediaan

4.1 Penempatan Awal

Place the Sophos XGS 126 on a stable, flat surface in a well-ventilated area. Ensure adequate space around the device for airflow. Avoid placing it near heat sources or in direct sunlight.

4.2 Kuasa Penyambung

1. Connect the provided power cord to the DC IN 1 port on the rear panel.
2. Palamkan hujung kord kuasa yang lain ke dalam salur keluar elektrik yang dibumikan.
3. The device will power on automatically. Observe the front panel LEDs for boot-up status.
4. For redundant power, connect a second power cord to the DC IN 2 port and another outlet.

4.3 Sambungan Rangkaian

1. Connect your internet service provider's modem or router to one of the WAN ports (e.g., Port 9) using an Ethernet cable.
2. Connect your internal network switch or a computer directly to one of the LAN ports (e.g., Port 1) using an Ethernet cable.
3. If using SFP modules, insert them into the SFP ports (11, 12) and connect the appropriate fiber or copper cables.

4.4 Akses Konfigurasi Awal

Untuk mengakses webantara muka pengurusan berasaskan:

1. Ensure your computer is connected to a LAN port of the Sophos XGS 126.
2. Buka a web browser and navigate to the default IP address (typically https://172.16.16.16).
3. Follow the on-screen instructions of the setup wizard to configure basic network settings, administrator credentials, and initial security policies. Refer to the Quick Start Guide for default login credentials.

5. Arahan Operasi

5.1 Antara Muka Pengurusan

The Sophos XGS 126 is managed primarily through its web-based interface. After initial setup, you can access it using the configured IP address and administrator credentials.

• Papan pemuka: Menyediakan overview of system status, network activity, and security alerts.
• Peraturan Firewall: Configure rules to control network traffic flow and access.
• VPN: Set up Virtual Private Networks for secure remote access or site-to-site connections.
• Perlindungan Ancaman: Manage features like Intrusion Prevention System (IPS), Advanced Threat Protection (ATP), and web penapisan.
• Logging & Reporting: Monitor logs and generate reports on network usage and security events.

5.2 Penunjuk LED

The front panel LEDs provide visual status of the device:

• LED kuasa: Indicates power status (e.g., solid green for normal operation).
• LED Status: Indicates overall system health (e.g., green for healthy, amber for warnings, red for critical errors).
• Network Activity LEDs: Located next to each port, indicate link status and data activity.

6. Penyelenggaraan

6.1 Kemas Kini Perisian Tegar

Regularly update the device firmware to ensure optimal performance, security, and access to new features. Firmware updates can be managed through the web antara muka.

1. Navigate to the firmware update section in the management interface.
2. Check for available updates or manually upload a firmware file downloaded from the official Sophos webtapak.
3. Follow the on-screen prompts to complete the update process. The device will reboot during this process.

6.2 Sandaran dan Pemulihan Konfigurasi

It is recommended to regularly back up your device configuration. This allows for quick recovery in case of unexpected issues or when migrating settings to a new device.

• Access the backup/restore section in the web antara muka.
• Simpan konfigurasi file ke lokasi yang selamat.
• To restore, upload the saved configuration file through the same interface.

6.3 Pembersihan Fizikal

Keep the device clean and free from dust to ensure proper ventilation and prevent overheating. Use a soft, dry cloth for cleaning. Do not use liquid cleaners or aerosols.

7. Penyelesaian masalah

7.1 Tiada Kuasa

• Sahkan kord kuasa disambungkan dengan selamat ke kedua-dua peranti dan soket elektrik yang berfungsi.
• Periksa sama ada alur keluar kuasa berfungsi dengan memasang peranti lain.
• If using a power strip or UPS, ensure it is turned on.

7.2 Tidak Boleh Akses Web Antara muka

• Ensure your computer is connected to a LAN port of the firewall.
• Verify your computer's IP address is in the same subnet as the firewall's management IP (e.g., if firewall is 172.16.16.16, your computer should be 172.16.16.x with a subnet mask of 255.255.255.0).
• Cuba kosongkan cache penyemak imbas anda atau gunakan penyemak imbas lain.
• Confirm the firewall's IP address has not been changed from the default.

7.3 Isu Ketersambungan Rangkaian

• Check all Ethernet cable connections for looseness or damage.
• Verify the link/activity LEDs on the ports are lit.
• Review firewall rules in the management interface to ensure they are not blocking legitimate traffic.
• Test connectivity to the internet from a device connected to the firewall.

7.4 Tetapan Semula Kilang

A factory reset will erase all configurations and restore the device to its original factory settings. This should be used as a last resort.

1. With the device powered on, locate the Reset button on the rear panel.
2. Using a paperclip or similar pointed object, press and hold the Reset button for approximately 10 seconds.
3. Release the button when the Status LED changes color or flashes.
4. The device will reboot with factory default settings.

8. Spesifikasi

The following table details the technical specifications of the Sophos XGS 126 Next-Gen Firewall:

Image: Detailed specification sheet for Sophos XGS Series Desktop models, including the XGS 126, showing performance metrics, physical interfaces, power supply, and environmental conditions.

9. Waranti dan Sokongan

9.1 Waranti Produk

Sophos products typically come with a limited hardware warranty. For detailed information regarding the warranty period and terms for your Sophos XGS 126, please refer to the warranty documentation included with your product or visit the official Sophos webtapak.

9.2 Sokongan Teknikal

For technical assistance, product documentation, and software downloads, please visit the official Sophos Support Portal:

• Sophos Support Portal: https://support.sophos.com
• Sophos Community: https://community.sophos.com

Before contacting support, please have your product model (XGS 126) and serial number ready. The serial number is typically located on a label on the bottom or rear of the appliance.