Руководство пользователя межсетевого экрана нового поколения Sophos XGS 126

1. Введение

This manual provides essential information for the installation, operation, maintenance, and troubleshooting of your Sophos XGS 126 Next-Gen Firewall. Please read this manual thoroughly before using the device to ensure proper setup and optimal performance. The Sophos XGS 126 is designed to provide advanced network security for small to medium businesses and branch offices.

2. Содержимое упаковки

Проверьте наличие всех предметов в посылке:

• Sophos XGS 126 Appliance
• Шнур питания США
• Ethernet-кабель
• Краткое руководство пользователя
• Информация о безопасности и нормативных требованиях

3 Физическое оверview

3.1 Передняя панель

The front panel of the Sophos XGS 126 features status indicators and a USB port.

Изображение: Спереди view of the Sophos XGS 126 appliance, showing LED indicators for status, power, and network activity, along with a USB port.

3.2 Задняя панель

The rear panel provides all necessary ports for power, network connectivity, and console access.

Изображение: сзади view of the Sophos XGS 126 appliance, detailing the various ports including power inputs (DC IN 1, DC IN 2), console port (COM), USB ports, and multiple Ethernet ports (LAN, WAN, SFP).

• Power Inputs (DC IN 1, DC IN 2): Connect the power adapter here. The device supports redundant power supplies.
• COM-порт: Консольный порт RJ45 для прямого доступа к управлению.
• USB-порты: For connecting external devices or for initial setup via USB.
• Порты локальной сети (1–8): Gigabit Ethernet ports for connecting internal network devices.
• WAN Ports (9, 10): Gigabit Ethernet ports for connecting to external networks (e.g., internet).
• SFP Ports (11, 12): Small Form-Factor Pluggable ports for fiber optic or additional copper connectivity.
• Кнопка сброса: Used to reset the device to factory defaults (refer to Troubleshooting section).

4. Инструкции по настройке

4.1 Первоначальное размещение

Place the Sophos XGS 126 on a stable, flat surface in a well-ventilated area. Ensure adequate space around the device for airflow. Avoid placing it near heat sources or in direct sunlight.

4.2 Подключение питания

1. Connect the provided power cord to the DC IN 1 port on the rear panel.
2. Вставьте другой конец шнура питания в заземленную электрическую розетку.
3. The device will power on automatically. Observe the front panel LEDs for boot-up status.
4. For redundant power, connect a second power cord to the DC IN 2 port and another outlet.

4.3 Сетевые подключения

1. Connect your internet service provider's modem or router to one of the WAN ports (e.g., Port 9) using an Ethernet cable.
2. Connect your internal network switch or a computer directly to one of the LAN ports (e.g., Port 1) using an Ethernet cable.
3. If using SFP modules, insert them into the SFP ports (11, 12) and connect the appropriate fiber or copper cables.

4.4 Доступ к начальной конфигурации

Чтобы получить доступ к webинтерфейс управления на основе:

1. Ensure your computer is connected to a LAN port of the Sophos XGS 126.
2. Откройте web browser and navigate to the default IP address (typically https://172.16.16.16).
3. Follow the on-screen instructions of the setup wizard to configure basic network settings, administrator credentials, and initial security policies. Refer to the Quick Start Guide for default login credentials.

5. Инструкция по эксплуатации

5.1 Интерфейс управления

The Sophos XGS 126 is managed primarily through its web-based interface. After initial setup, you can access it using the configured IP address and administrator credentials.

• Панель инструментов: Обеспечивает болееview of system status, network activity, and security alerts.
• Правила брандмауэра: Configure rules to control network traffic flow and access.
• VPN-соединение: Set up Virtual Private Networks for secure remote access or site-to-site connections.
• Защита от угроз: Manage features like Intrusion Prevention System (IPS), Advanced Threat Protection (ATP), and web фильтрации.
• Logging & Reporting: Monitor logs and generate reports on network usage and security events.

5.2 светодиодных индикатора

The front panel LEDs provide visual status of the device:

• Светодиод питания: Indicates power status (e.g., solid green for normal operation).
• Светодиод состояния: Indicates overall system health (e.g., green for healthy, amber for warnings, red for critical errors).
• Network Activity LEDs: Located next to each port, indicate link status and data activity.

6. Техническое обслуживание

6.1 обновлений прошивки

Regularly update the device firmware to ensure optimal performance, security, and access to new features. Firmware updates can be managed through the web интерфейс.

1. Navigate to the firmware update section in the management interface.
2. Check for available updates or manually upload a firmware file downloaded from the official Sophos webсайт.
3. Follow the on-screen prompts to complete the update process. The device will reboot during this process.

6.2 Резервное копирование и восстановление конфигурации

It is recommended to regularly back up your device configuration. This allows for quick recovery in case of unexpected issues or when migrating settings to a new device.

• Access the backup/restore section in the web интерфейс.
• Сохранить конфигурацию file в безопасное место.
• To restore, upload the saved configuration file through the same interface.

6.3 Физическая очистка

Keep the device clean and free from dust to ensure proper ventilation and prevent overheating. Use a soft, dry cloth for cleaning. Do not use liquid cleaners or aerosols.

7. Поиск Неисправностей

7.1 Нет питания

• Убедитесь, что шнур питания надежно подключен как к устройству, так и к исправной электрической розетке.
• Проверьте работоспособность розетки, подключив к ней другое устройство.
• If using a power strip or UPS, ensure it is turned on.

7.2 Невозможно получить доступ Web Интерфейс

• Ensure your computer is connected to a LAN port of the firewall.
• Verify your computer's IP address is in the same subnet as the firewall's management IP (e.g., if firewall is 172.16.16.16, your computer should be 172.16.16.x with a subnet mask of 255.255.255.0).
• Попробуйте очистить кэш браузера или использовать другой браузер.
• Confirm the firewall's IP address has not been changed from the default.

7.3 Проблемы с сетевым подключением

• Check all Ethernet cable connections for looseness or damage.
• Verify the link/activity LEDs on the ports are lit.
• Review firewall rules in the management interface to ensure they are not blocking legitimate traffic.
• Test connectivity to the internet from a device connected to the firewall.

7.4 Сброс к заводским настройкам

A factory reset will erase all configurations and restore the device to its original factory settings. This should be used as a last resort.

1. With the device powered on, locate the Reset button on the rear panel.
2. Using a paperclip or similar pointed object, press and hold the Reset button for approximately 10 seconds.
3. Release the button when the Status LED changes color or flashes.
4. The device will reboot with factory default settings.

8. Технические характеристики

The following table details the technical specifications of the Sophos XGS 126 Next-Gen Firewall:

Image: Detailed specification sheet for Sophos XGS Series Desktop models, including the XGS 126, showing performance metrics, physical interfaces, power supply, and environmental conditions.

9. Гарантия и поддержка

9.1 Гарантия на продукт

Sophos products typically come with a limited hardware warranty. For detailed information regarding the warranty period and terms for your Sophos XGS 126, please refer to the warranty documentation included with your product or visit the official Sophos webсайт.

9.2 Техническая поддержка

For technical assistance, product documentation, and software downloads, please visit the official Sophos Support Portal:

• Sophos Support Portal: https://support.sophos.com
• Sophos Community: https://community.sophos.com

Before contacting support, please have your product model (XGS 126) and serial number ready. The serial number is typically located on a label on the bottom or rear of the appliance.