Sophos Switch Software Features

Download Datasheet

Sophos Switch Series: Software Features

All Sophos switches offer a broad feature set and extensive configuration options from the very first release.

Management and Configuration  Feature Availability by Model

Switch Auto-Discovery 

Yes - all models

Dynamic VLAN Configuration 

Yes (GVRP) - all models

IEEE 802.1D MAC Bridging/STP (RSTP compatible)

Yes - all models

LAG group size [up to 8]

8 - all models

Total Link Aggregation Groups [Up to # of ports ]

8 - all models

IGMP Snooping 

Yes - all models

Static Routing 

Yes - all models
(IPv4: 59 entries for static route, 4 entries for interface route and 1 entry for default route.)
(IPv6: 5 entries for static route, 16 entries for interface route and 1 entry for default route.)

802.1x Authentication 

Yes - all models

IEEE 802.1x Authentication MAC Access Bypass (MAB) - Host, port, and fallback

Yes - all models

Syslog Collection 

Yes - all models

IP/MAC ACL 

Yes - all models

Jumbo Frames

Yes
(CS101-8/8FP: size 9K, per system setting)
(other models: size 10K, per port setting)

Auto negotiation for Port Speed and Duplex 

Yes - all models

MDI/MDIX Auto-crossover 

Yes - all models

IEEE 802.1D MAC Bridging/STP 

Yes - all models

IEEE 802.1w Rapid Spanning Tree Protocol (RSTP) 

Yes - all models

IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) 

Yes - all models

Edge Port / Port Fast 

Yes - all models

IEEE 802.1Q VLAN Tagging 

Yes - all models

Guest VLAN and Voice VLAN 

Yes - all models

IEEE 802.3ad Link Aggregation with LACP 

Yes - all models

Unicast/Multicast traffic balance over trunk port 

Yes - all models

IEEE 802.1AX Link Aggregation 

Yes - all models

Spanning Tree Instances (MSTP/CST) 

Yes - all models

IEEE 802.3x Flow Control and Back-pressure 

Yes - all models

IEEE 802.3 10Base-T 

Yes - for 100 series  only (not supported on 200 series)

IEEE 802.3u 100Base-TX 

Yes - all models

IEEE 802.3z 1000Base-SX/LX 

Yes - all models

IEEE 802.3ab  1000Base-T 

Yes - all models

IEEE 802.3bz Gigabit Ethernet support 

Yes - all models

IEEE 802.3 CSMA/CD Access Method and Physical Layer Specifications 

Yes - all models

Storm Control 

Yes - all models

Port Mirroring 

Yes - all models

DHCP Relay 

Yes - all models
Security and Visibility  Feature Availability by Model

Max. ACL Groups 

128 for all models

Max. ACL entries per group 

2 for CS101-8/8FP, 8 for all other models

IP Source Guard* 

Yes - all models
(uses 1 ACL group if enabled)

IEEE 802.1x authentication Port-based 

Yes - all models

IEEE 802.1x Guest VLAN 

Yes - all models

IEEE 802.1ab Link Layer Discovery Protocol (LLDP) 

Yes - all models

IEEE 802.1ab LLDP-MED 

Yes - LLDP MED PoE models only

DHCP-Snooping 

Yes - all models

Cisco-compliant Discovery Protocol

Yes - all models

MAC Address Filtering

Yes - all models

Priority Tag - Packet Ingress Filtering

Yes - all models

Quality of Service  Feature Availability by Model

IEEE 802.1p Based Priority Queuing 

Yes - all models

IP TOS/DSCP Based Priority Queuing

Yes - all models

 

Management Feature Availability by Model
IPv4 and IPv6 Management 
IP assignment supports DHCP or Static address.

Yes - all models

SSH

Yes - all models

HTTPS

Yes - all models

SNMP v1/v2c/v3 

Yes - all models

SSH, Web Interface, and REST API 

Yes - all models

Sophos Central

Yes - all models

 

RFC and MIB Support  Feature Availability by Model

DHCP Client  

Yes - all models

RFC 854 Telnet Server 

Yes - all models

RFC 2865 RADIUS (for 802.1x authentication)

Yes - all models

RFC 1643 Ethernet-like Interface MIB 

Yes - all models

RFC 1213 MIB-II 

Yes - all models

RFC 1157 SNMPv1/v2c 

Yes - all models

RFC 2618 RADIUS Authentication Client MIB 

Yes - all models

RFC 1493 Bridge MIB 

Yes - all models