Sophos Central

Sophos Central is the ultimate cloud-management platform for all of your Sophos products – now including XG Firewall.

Whether you are managing a single firewall or several hundred firewalls, it makes day-to-day setup, monitoring, and management of your network protection easy.

Sophos Central Management

  • Manage all your Sophos products and firewalls from a single cloud console
  • See all your firewalls and their status in one place
  • Use group policy to keep firewall settings and policies synchronized
  • Access all your firewalls remotely and securely
  • Take advantage of central backup management and firmware update options
  • Deploy firewalls from Sophos Central without touching them
  • See your network activity and build custom reports in Sophos Central
  • Sophos Central management for XG Firewall is Free

Sophos Firewall Manager

Sophos Firewall Manager (SFM) enables full-featured, centralized management of multiple Sophos XG Firewall devices. It provides enterprises and MSP partners confidence to efficiently monitor and manage a large estate from the convenience of a single screen.

Powerful enterprise and multi-customer management

  • Manage all firewall policies and configuration from a single console
  • Ensure uniform policy implementation across all your firewalls and locations
  • Re-use configuration templates to streamline deployment of new firewalls
  • View statuses and get alerts on a variety of device and network health indicators
  • Utilize role-based admin, change control, and audit logging to track changes
  • Deploys easily as software or as a virtual appliance

Sophos Central Firewall Reporting

Sophos Central Firewall Reporting (CFR) provides deeper insight into network activity through analytics. With CFR, you have the power to create custom reports that offer actionable intelligence on user behavior, application usage, security events and more at your fingertips. Log data from your XG Firewall is sent to your Sophos Central account in the cloud where it is stored and available for access from any location.

Better Intelligence Through Analytics

  • Gather intelligence on network activity for your XG Firewall
  • Choose one of the pre-defined templates and customize based on your specific needs
  • Identify security gaps, suspicious user behavior or other events requiring policy changes
  • Keep up with regulatory and internal compliance requirements
  • Quickly retrieve stored log data for audits and forensics
  • Create historical reports up to seven days for free or extend reporting to 365 days with CFR Advanced

Secure High-Performance Wireless

We’ve made extending your network with wireless secure, fast, and easy to manage. Auto discovery enables quick setup and management right from the XG Firewall Control Center.

Top Performance, Security, and Management

  • Choose from a full range of models, including our new APX Wave 2 line (below) or our full line of Wave 1 access points
  • Ceiling, wall, and exterior options
  • 802.11a/b/g/n/ac standards compliant with multiple radio and channel width options
  • Multiple SSID and hotspot configuration options
  • WPA-2 Enterprise encryption support
  • 802.1X (RADIUS authentication) and 802.11r Fast Transfer support
 
Deployment Indoor; desktop, wall, or ceiling mount.
Mounting Kits Included: Bracket for wall- and/or 15/16” T-bar or flat ceiling mount. Included: Bracket for wall- and/or 15/16", 9/16", 3/8" T-bar ceiling-mount.
Optional: Kits for flat ceiling, plenum and suspend mount.
WLAN Standards 802.11 a/b/g/n/ac Wave 2
Radios 1x 2.4 GHz single band
1x 5 GHz single band
1x 2.4 GHz/5 GHz dual-band
1x 5 GHz single band
1x Bluetooth low energy (BLE)
1x 2.4 GHz single band
1x 5 GHz single band
1x Bluetooth low energy (BLE)
Antennas 2x internal dual-band antenna for Radio-1 and 2 2x internal dual-band antenna for Radio-1
2x internal 5 GHz antenna for Radio-2
1x internal 2.4 GHz antenna for BLE (for future use)
3x internal 2.4 GHz antenna for Radio-1
3x internal 5 GHz antenna for Radio-2
1x internal 2.4 GHz antenna for BLE (for future use)
4x internal 2.4 GHz antenna for Radio-1
4x internal 5 GHz antenna for Radio-2
1x internal 2.4 GHz antenna for BLE (for future use)
DFS
Performance 2x2:2 MU-MIMO 2x2:2 MU-MIMO 3x3:3 MU-MIMO 4x4:4 MU-MIMO
Max. Throughput 867 Mbps (5 GHz) + 300 Mbps (2.4 GHz) 867 Mbps (5 GHz) + 867 Mbps (5 GHz) 1300 Mbps (5 GHz) + 450 Mbps (2.4 GHz) 1733 Mbps (5 GHz) + 600 Mbps (2.4 GHz)
Interfaces 1x 12V DC-in
1x RJ45 10/100/1000 Ethernet w/PoE
1x RJ45 connector console serial port
1x RJ45 10/100/1000 Ethernet w/PoE
1x RJ45 connector console serial port
1x RJ45 10/100/1000 Ethernet port
1x RJ45 10/100/1000 Ethernet w/PoE
Power (Max.) 11.8 W 11.5 W 16.7 W 22.4 W
Power-over-Ethernet
(Min.)
PoE 802.3af PoE+ 802.3at
Dimensions 144x144x33.5 mm 155x155x38 mm 183x183x39 mm 195x195x43 mm
Weight 0.256 kg 0.474 kg 0.922 kg 1.012 kg
Certifications & Compliance** CB, UL, CE, FCC, ISED (IC), RCM, MIC, Anatel,
EN 60601-1-2 (Medical Equipment Directive)
CB, UL, CE, FCC, ISED (IC), RCM, MIC, NCC, Anatel (planned),
EN 60601-1-2 (Medical Equipment Directive)
Plenum-rated (UL2043)
CB, UL, CE, FCC, ISED (IC), RCM, Anatel (planned),
EN 60601-1-2 (Medical Equipment Directive)
Plenum-rated (UL2043)
CB, UL, CE, FCC, ISED (IC), RCM, Anatel (planned),
EN 60601-1-2 (Medical Equipment Directive)
Plenum-rated (UL2043)
Warranty All APX models have a standard 5-year warranty included in the purchase price

** Not all models may be available in all regions, please check with your local supplier for details. APX models are currently not sold in China.

SD-WAN Remote Ethernet Devices (SD-RED)

Sophos SD-RED makes extending your secure network to other locations easy and affordable. It requires no technical skills at the remote site. Simply enter the SD-RED device ID into your XG Firewall and ship it. As soon as it’s plugged in and connected to the internet, our provisioning service automatically connects it to your firewall and establishes a secure, dedicated VPN tunnel.

An Innovative Solution to a Complex Problem

  • Auto provisioning enables deployment by non-technical staff
  • Secure VPN tunnel connectivity with your XG Firewall from anywhere
  • Selective routing options for any mix of VPN and local WAN access
  • Enterprise encryption
  • Our SD-RED models fit a variety of remote location and bandwidth needs, and can be enhanced with Wi-Fi or 3G/4G connectivity using optional modules or by adding APX Series access points

Learn more about SD-WAN and branch office connectivity under sophos.com/sd-wan

Technical Specifications for SD-RED

Model Name
Capacity
Maximum Throughput 250 Mbps 850 Mbps
Physical Interfaces (Built-in)
LAN Interfaces 4 x 10/100/1000 Base-TX (1 GbE Copper) 4 x 10/100/1000 Base-TX (1 GbE Copper)
WAN Interfaces 1 x 10/100/1000 Base-TX (shared with SFP) 2 x 10/100/1000 Base-TX (WAN1 shared port with SFP)
SFP Interfaces 1x SFP Fiber (shared port with WAN) 1x SFP Fiber (shared port with WAN1)
Power-over Ethernet Ports None 2 PoE Ports (total power 30W)
USB Ports 2 x USB 3.0 (front and rear) 2 x USB 3.0 (front and rear)
COM Ports 1 x Micro-USB 1 x Micro-USB
Optional Connectivity
Modular Bay 1 (for use with optional Wi-Fi OR 4G/LTE Card) 1 (for use with optional Wi-Fi OR 4G/LTE Card)
Optional Wi-Fi Module 802.11 a/b/g/n/ac Wave 1 (Wi-Fi 5) dual-band capable
2x2 MIMO 2 antennas
802.11 a/b/g/n/ac Wave 1 (Wi-Fi 5) dual-band capable
2x2 MIMO 2 antennas
Optional 3G/4G LTE Module  MC7430/MC7455 Sierra Wireless Card MC7430/MC7455 Sierra Wireless Card
Optional VDSL Modem Optional SFP Modem (not yet supported) Optional SFP Modem (not yet supported)
Physical Specifications
Dimensions 225 x 44 x 150 (w*h*d) mm
8.86 x 1.73 x 5.91 (w*h*d) inches
225 x 44 x 150 (w*h*d) mm
8.86 x 1.73 x 5.91 (w*h*d) inches
Weight 0.9 kg/1.8 kg (1.98 lbs/3.97 lbs) Unpacked/Packed 1.0 kg/2.2 kg (2.2 lbs/4.85 lbs) Unpacked/Packed
Power Supply Adapter AC Input: 110-240VAC @50-60 Hz
DC Output:  12V +/- 10%, 3.7A, 40W"
AC Input: 110-240VAC @50-60 Hz
DC Output:  12V +/- 10%, 6.95A, 75W
Power Redundancy Support Yes, optional 2nd power supply Yes, optional 2nd power supply
Power Consumption Idle: 6.1Watt/20.814 BTU
Full Load: 22.6Watt/77.114 BTU
Idle: 11.88 Watt/40.536 BTU
Full Load without PoE: 25.33 Watt/86.429 BTU
Full Load with PoE: 62.48 Watt/213.190 BTU
Noise level (average) Fanless Fanless
Temperature (operational) 0°C to 40°C (32°F to 104°F) 0°C to 40°C
Temperature (storage) -20°C to 70°C (-4°F to 158°F) -20°C to 70°C (-4°F to 158°F)
Humidity 10-90% RH, non-condensing 10-90% RH, non-condensing
Safety Regulations
Certifications (Safety, EMC, Radio) CE/FCC/IC/RCM/VCCI/CB/UL/CCC/KC/ANATEL CE/FCC/IC/RCM/VCCI/CB/UL/CCC/KC/ANATEL