Sophos XGS 87 Next-Gen Firewall Instruction Manual

1.製品オーバーview

The Sophos XGS 87 is a next-generation firewall designed to provide robust network security for small to medium-sized businesses. It integrates advanced threat protection capabilities, including Xstream Architecture, TLS 1.3 Decryption, Deep Packet Inspection, Next-Gen IPS, Web Protection, and Application Control. This device ensures comprehensive defense against various network threats, offering a secure and reliable network environment.

Image: Sophos XGS Next-Gen Firewall with Xstream Protection. This image displays the Sophos XGS series appliances, highlighting their advanced Xstream Flow Processors for high-performance threat protection.

2. セットアップ手順

2.1 開梱と検査

• Carefully remove the Sophos XGS 87 firewall from its packaging.
• デバイスに物理的な損傷の兆候がないか点検してください。損傷が見つかった場合は、直ちに販売店にご連絡ください。
• 梱包明細書に記載されているすべてのコンポーネントが揃っていることを確認します。

2.2デバイスの接続

The Sophos XGS 87 features multiple ports for network connectivity and management. Refer to the diagrams below for port identification.

Image: Rear panel of the Sophos XGS 87 firewall. This view shows the DC IN 12V power input, COM port, USB port, and the LAN/WAN Ethernet ports (L/LAN, S/PoE, 2/WAN, 4).

Image: Front panel of the Sophos XGS 87 firewall. This view displays the XGS 87 model label, a COM port, a USB port, status LEDs for LAN/WAN activity and speed, and system status indicators.

1. 電源接続: Connect the provided power adapter to the DC IN 12V port on the rear panel and plug it into a power outlet.
2. ネットワーク接続：
   • インターネットサービスプロバイダのモデムまたはルーターを 2 / WAN ポート。
   • 内部ネットワークデバイス（スイッチ、コンピュータ）を L/LAN or other available LAN ports.
3. コンソール接続（オプション）: For initial configuration or troubleshooting, connect a console cable from your computer to the コム ポート。
4. USBデバイス（オプション）: USB ports can be used for external storage or other compatible peripherals.

2.3初期構成

Upon first power-on, the device will boot up running Sophos Firewall OS. Initial configuration is typically performed via a web-based interface accessible from a connected computer on the LAN side. Refer to the Sophos documentation for detailed steps on accessing the web interface and completing the initial setup wizard.

3. ファイアウォールの操作

The Sophos XGS 87 operates by inspecting and controlling network traffic based on configured security policies. Its core functionality revolves around the Sophos Firewall OS, which provides a comprehensive suite of security features.

3.1 Key Protection Features

The XGS 87 includes a 1-year Standard Protection license, offering:

• Xstream Architecture: High-performance deep packet inspection and TLS 1.3 decryption.
• ネットワーク保護: Intrusion Prevention System (IPS), Advanced Threat Protection (ATP), and SD-RED support.
• Web 保護： Web filtering, application control, and secure web gateway features.
• アプリケーション制御: Granular control over thousands of applications.
• 報告： Extensive logging and reporting capabilities for network visibility.

Image: Sophos XGS Protection Modules. This diagram details the various protection modules available, including Base Firewall, Network Protection, Web Protection, Zero-Day Protection, and Central Orchestration, allowing for customized security deployments.

3.2 管理と監視

The firewall can be managed through its web interface or via the Sophos Central platform. The web interface provides detailed control over all settings, policies, and monitoring tools. Sophos Central offers cloud-based management, allowing for centralized control of multiple Sophos devices and enhanced reporting.

• ダッシュボード: オーバーを提供するview ネットワークの状態、脅威、システム パフォーマンス。
• Policy Configuration: Define firewall rules, NAT policies, VPN settings, and application control policies.
• Logging and Reporting: Access detailed logs and generate reports on network activity, security events, and user behavior.

4. メンテナンス

定期的なメンテナンスにより、Sophos XGS 87 ファイアウォールの最適なパフォーマンスとセキュリティが確保されます。

• ファームウェアの更新： Regularly check for and apply the latest firmware updates to ensure your device has the most current security patches and features. The device has security updates available.
• 構成のバックアップ: Periodically back up your firewall configuration. This allows for quick restoration in case of an issue or misconfiguration.
• ログReview: 定期的に再view system logs and security reports to identify potential threats or anomalies.
• 物理検査: Ensure the device is in a well-ventilated area and free from dust accumulation. Check all cable connections for security.

5。 トラブルシューティング

このセクションでは、一般的な問題に対する基本的なトラブルシューティング手順について説明します。

5.1 電源なし

• 電源アダプタがデバイスと機能している電源コンセントにしっかりと接続されていることを確認します。
• フロントパネルの電源LEDを確認してください。消灯している場合は、別の電源コンセントまたはアダプターを試してください。

5.2 ネットワーク接続なし

• Ensure all Ethernet cables are properly connected to the correct ports (WAN, LAN).
• Check the link/activity LEDs on the Ethernet ports. They should be lit or blinking.
• Verify your computer's network settings (IP address, gateway) are correctly configured or set to obtain automatically.
• Restart the firewall and connected network devices.

5.3 Device Unresponsive / Factory Reset

• If the device becomes unresponsive, you may need to perform a factory reset. Locate the リセット button on the rear panel (refer to the rear panel image).
• Use a paperclip or similar pointed object to press and hold the reset button for approximately 10 seconds while the device is powered on. This will restore the device to its factory default settings.

6. 仕様

The following table outlines the key technical specifications for the Sophos XGS 87 Next-Gen Firewall.

Image: Technical Specifications for Sophos XGS 87 and XGS 87w. This document provides detailed performance metrics, physical specifications, environmental requirements, and product certifications for the XGS 87 model.

7. 保証とサポート

The Sophos XGS 87 Next-Gen Firewall includes a 1-Year Standard Protection plan, which typically covers essential security features and basic support during the subscription period. For detailed information regarding your specific warranty coverage and support options, please refer to the documentation provided with your purchase or visit the official Sophos webサイト。

Image: Sophos XGS All Licensing Options. This document outlines various licensing bundles, including Base License, Network Protection, Web Protection, Zero-Day Protection, Central Orchestration, and Enhanced Support options, allowing users to customize their protection.

Sophos offers various support options, including online resources, knowledge bases, and direct technical support. For advanced issues or to inquire about extended support plans, please contact Sophos customer service or your authorized Sophos partner.

• オンラインリソース: Visit the Sophos support portal for documentation, FAQs, and community forums.
• テクニカルサポート： Contact Sophos technical support for assistance with product issues.
• 強化されたサポート: Upgrade options are available for extended hardware warranty and advanced support services.