Manual do usuario do firewall de próxima xeración Sophos XGS 136

1. Introdución

This manual provides essential information for the installation, operation, and maintenance of your Sophos XGS 136 Next-Gen Firewall. The Sophos XGS 136 is designed to deliver advanced network security with high performance, utilizing a dual-processor architecture and a dedicated Xstream Flow Processor for accelerated threat processing.

Image 1.1: Sophos XGS Series with Xstream Protection overview. This image illustrates the core components and the protective capabilities of the Sophos XGS firewall.

2. Produto rematadoview

The Sophos XGS 136 is a desktop-form factor next-generation firewall suitable for small to medium businesses and branch offices. It integrates multiple security functions into a single appliance, providing comprehensive protection against various cyber threats. The device features multiple network ports for flexible deployment and connectivity.

Image 2.1: Sophos XGS Series Appliances. This image displays a stack of various Sophos XGS series firewall models, highlighting their compact design.

2.1 Panel frontal

The front panel of the Sophos XGS 136 features status indicators and a USB port for management or external storage.

Imaxe 2.2: Fronte view of the Sophos XGS 136 firewall. This image shows the status LEDs, USB 2.0 port, and the Sophos branding on the front panel.

2.2 Panel posterior

The rear panel provides all necessary connectivity options, including power inputs, network interfaces, and a console port for initial configuration.

Imaxe 2.3: Traseira view of the Sophos XGS 136 firewall. This image displays the dual DC power inputs, console port, USB 3.0 ports, 10 GE copper ports, and SFP ports.

3. Configuración e instalación

Follow these general steps for initial setup of your Sophos XGS 136 firewall:

Desempaquetar o dispositivo: Carefully remove the firewall from its packaging. Ensure all components, including the US power cord, are present.
Colocación física: Place the device on a stable, flat surface in a well-ventilated area. Ensure adequate space around the unit for airflow.
Conectar enerxía: Connect the provided US power cord to the device's power input and then to a suitable power outlet. The device supports dual DC power inputs for redundancy.
Conexións de rede: Connect your network cables to the appropriate LAN and WAN ports on the rear panel. Refer to the rear panel diagram for port identification.
Configuración inicial: Connect a computer to the console port using a serial cable (if required) or use a network port for web-based management. Follow the Sophos documentation for initial configuration steps, including setting up network interfaces and basic security policies.

4. Operating Principles and Protection Features

The Sophos XGS 136 leverages Sophos Firewall's Xstream Protection architecture to provide comprehensive security. This includes advanced threat protection, deep packet inspection, and intelligent traffic management.

Image 4.1: Xstream Protection - A Single Bundle For Ultimate Protection. This image outlines the key features of the Xstream Protection bundle, including Base Firewall, Network Protection, Web Protección e protección de día cero.

4.1 Protection Modules

The XGS 136 offers a variety of protection modules that can be customized to meet specific security requirements:

Cortafuegos básico: Includes networking, wireless, SD-WAN, application awareness, traffic shaping, and VPN capabilities.
Protección de rede: Provides intrusion prevention, advanced threat protection, synchronized security heartbeat, and clientless VPN.
Web Protección: Ofertas web control, application control, synchronized app control, and extensive reporting.
Protección de día cero: Utilizes deep packet inspection, machine learning, cloud sandboxing, and advanced threat intelligence to block unknown threats.

Image 4.2: Blocks Unknown Threats. This image highlights the firewall's capability to block new and emerging threats.

Image 4.3: Exposes Hidden Risks. This image emphasizes the firewall's ability to identify and mitigate hidden network vulnerabilities.

Image 4.4: Automatically Responds to Incidents. This image illustrates the firewall's automated response capabilities to security incidents.

5. Opcións de licenza

Sophos offers various licensing bundles to customize the protection level for your firewall. These bundles provide different levels of security features and support.

Image 5.1: All Licensing Options for Sophos XGS Series. This image details the various protection bundles available, including Xstream Protection, Standard Protection, and additional modules.

For detailed information on each protection bundle and its included features, refer to the Sophos Firewall Feature List documentation.

6. Especificacións

The following tables provide detailed technical specifications and performance metrics for the Sophos XGS 136 firewall.

Image 6.1: Sophos XGS Series Desktop Technical Specifications. This image presents a table with performance data, physical interfaces, dimensions, weight, power consumption, and certifications for XGS 126, XGS 126w, XGS 136, and XGS 136w models.

6.1 Product Matrix

The product matrix below outlines the key differences and capabilities across various Sophos XGS Series Appliances.

Image 6.2: Sophos XGS Series Appliances Product Matrix. This image provides a comparative table of different XGS models, detailing their form factor, ports/slots, tech specs, and throughput performance metrics.

6.2 Metodoloxía da proba de rendemento

Performance figures are based on maximum throughput measured under ideal test conditions using industry-standard Keysight-Ixia BreakingPoint test tools. Actual performance may vary depending on network conditions and activated services.

Firewall: Medido usando tráfico HTTP e un tamaño de resposta de 512 KB.
IMIX do cortafuegos: Rendemento UDP baseado nunha combinación de tamaños de paquete de 66 bytes, 570 bytes e 1518 bytes.
IPS: Medido con IPS con tráfico HTTP usando o conxunto de regras IPS predeterminado e un tamaño de obxecto de 512 KB.
VPN IPsec: Rendemento HTTP usando varios túneles e un tamaño de resposta HTTP de 512 KB.
TLS Inspection: Rendemento medido con IPS con sesións HTTPS e diferentes conxuntos de cifrado.
Protección contra ameazas: Medido con Firewall, IPS, Control de aplicacións e prevención de software malicioso activados usando un tamaño de resposta HTTP de 200 KB.

7. Mantemento

To ensure optimal performance and security of your Sophos XGS 136 firewall, regular maintenance is recommended:

Actualizacións de software: Regularly check for and apply the latest firmware and software updates provided by Sophos. These updates often include security patches and performance enhancements.
Copia de seguranza da configuración: Periodically back up your firewall configuration. This allows for quick restoration in case of unexpected issues or hardware replacement.
Inspección física: Ensure the device is free from dust and that ventilation openings are not obstructed. Maintain a stable operating environment within specified temperature and humidity ranges.
Rexistro de Review: Regularmente review system logs and security reports for any unusual activity or potential threats.

8 Solución de problemas

If you encounter issues with your Sophos XGS 136, consider the following basic troubleshooting steps:

Comproba a alimentación e as conexións: Verify that the power cord is securely connected and the device is receiving power. Ensure all network cables are properly seated in their respective ports.
Indicadores de estado: Observe the front panel LEDs. Refer to the Sophos documentation for the meaning of different LED states to diagnose issues.
Conectividade de rede: Confirm that connected devices have proper IP configurations and can reach the firewall. Test connectivity to external networks.
Reiniciar o dispositivo: As a first step for many issues, try restarting the firewall. Power it off, wait for 30 seconds, and then power it back on.
Consultar documentación: Refer to the official Sophos support documentation and knowledge base for specific error messages or symptoms.
Contacte con Soporte: If problems persist, contact Sophos technical support for assistance.

9. Garantía e soporte

The Sophos XGS 136 typically includes a standard warranty and can be augmented with various protection plans for extended coverage and support.

Standard Protection: The product includes a 1-year standard protection plan, which covers basic support and hardware replacement.
Plans de protección ampliada: Additional protection plans, such as the 4-Year Protection Plan or the monthly Complete Protect plan, are available for purchase to extend coverage and enhance support services. These plans may include advanced threat protection, 24/7 support, feature updates, and expedited hardware replacement.
Soporte técnico: For technical assistance, please refer to the Sophos support portal or contact your Sophos partner. Ensure you have your product serial number and details of your protection plan readily available.

	Firewall de Sophos: Protección e rendemento potentes Explora a arquitectura Xstream de Sophos Firewall, deseñada para proporcionar unha robusta seguridade de rede, alto rendemento e protección avanzada contra ameazas para empresas de todos os tamaños. Descubre funcións como a inspección de TLS 1.3, a inspección profunda de paquetes, a aceleración de aplicacións e as capacidades de SD-WAN.
	Instrucións de funcionamento de Sophos XGS 116(con)/126(con)/136(con) Instrucións de funcionamento completas para os dispositivos de seguridade de rede Sophos XGS 116(w), 126(w) e 136(w), que abarcan a instalación, a configuración, as especificacións técnicas e as precaucións de seguridade.
	Instrucións de funcionamento de Sophos XGS 116(con)/126(con)/136(con) This document provides operating instructions for the Sophos XGS 116(w), 126(w), and 136(w) network appliances. It covers installation, configuration, hardware details, technical specifications, safety precautions, and connection information.
	Guía de inicio rápido de Sophos XGS 116(con)/126(con)/136(con) Comeza rapidamente co teu dispositivo de cortafuegos Sophos XGS 116(w), 126(w) ou 136(w). Esta guía proporciona os pasos esenciais para a configuración, a conexión e a configuración inicial.
	Guía de inicio rápido de Sophos XGS 2100/2300/3100/3300 Esta guía proporciona información esencial para configurar e conectar o seu dispositivo de firewall Sophos XGS, incluíndo a desembalaxe, as conexións iniciais e a configuración básica.
	Dispositivos Sophos da serie XGS: Instrucións de funcionamento para XGS 118(w)/128(w)/138 Instrucións de funcionamento completas para os dispositivos de seguridade de rede da serie Sophos XGS, incluídos os modelos XGS 118(w), XGS 128(w) e XGS 138. Abarca a instalación, o cumprimento normativo, as consideracións ambientais, as especificacións técnicas, as interfaces e os procedementos operativos.

Sophos XGS 136