Sophos SD-RED 20 Rev. 1 Brugermanual til fjern-Ethernet-enhed

1. Introduktion

This manual provides comprehensive instructions for the installation, configuration, and operation of your Sophos SD-RED 20 Rev. 1 Remote Ethernet Device. The SD-RED 20 is designed to securely extend your network to remote locations, ensuring encrypted and centrally managed connectivity.

Please read this manual thoroughly before using the device to ensure proper setup and optimal performance.

2. Produktet er slutview

The Sophos SD-RED 20 is a Remote Ethernet Device that facilitates secure network extension. It simplifies the process of connecting remote offices or branches to your central Sophos firewall, creating a secure, dedicated VPN tunnel.

2.1 Frontpanel

Figur 1: Front Panel of Sophos SD-RED 20. This image displays the front of the device, featuring the Sophos logo, model name (SD-RED 20), a COM port, a USB 3.0 port, and various LED indicators for LAN (LAN1, LAN2, LAN3, LAN4), WAN, Internet, and System status (Tunnel, Router).

The front panel includes status LEDs and essential ports:

• COM-port: For console access and initial configuration.
• USB 3.0-port: For connecting external devices or 3G/4G modules.
• LAN LEDs (LAN1-LAN4): Angiv linkstatus og aktivitet for hver LAN-port.
• WAN LED: Indikerer WAN-forbindelsesstatus.
• Internet LED: Angiver status for internetforbindelse.
• System LEDs (Tunnel, Router): Provide status information about the VPN tunnel and router functionality.

2.2 Bagpanel

Figur 2: Rear Panel of Sophos SD-RED 20. This image displays the back of the device, featuring two 12V DC power inputs (DC IN 1, DC IN 2), four LAN ports (LAN1, LAN2, LAN3, LAN4), a shared WAN port, a USB 3.0 port, and a reset button.

The rear panel provides connectivity options:

• DC IN 1 & 2 (12V): Power input ports.
• LAN Ports (LAN1-LAN4): Ethernet-porte til lokale netværksforbindelser.
• WAN (Shared) Port: Ethernet port for Wide Area Network connection.
• USB 3.0-port: Additional USB port for peripherals.
• Genstarts knap: Bruges til at nulstille enheden til fabriksindstillingerne.

3. Opsætning og installation

The Sophos SD-RED 20 is designed for "Plug-and-Protect" deployment, requiring minimal technical expertise at the remote site.

3.1 Første tilslutning

1. Strømtilslutning: Connect the provided power adapter to one of the 12V DC IN ports on the rear panel and plug it into a power outlet.
2. WAN-forbindelse: Connect the WAN port of the SD-RED 20 to your internet service provider's modem or router using an Ethernet cable.
3. Local Network Connection: Connect your local network devices (e.g., computers, switches) to the LAN ports (LAN1-LAN4) on the rear panel.
4. Optional Wi-Fi/3G/4G Module: If using, insert the optional Wi-Fi-5 or 3G/4G module into the designated slot or USB port.

3.2 Firewall Integration

The SD-RED 20 must be registered and configured with your central Sophos firewall (XG or SG series) for operation.

1. Obtain Device ID: Locate the unique device ID on the SD-RED 20 unit.
2. Sophos Firewall Configuration: Access your Sophos firewall's administrative interface.
3. Add SD-RED Device: Navigate to the SD-RED configuration section and enter the device ID.
4. Policy Definition: Define the network policies and routing rules for the remote site. You can choose to:
   • Tunnel all traffic from the remote location through the central firewall.
   • Route only inter-office network traffic through the SD-RED, allowing direct internet access from the remote location.
5. Automatic Tunnel Establishment: Once the SD-RED 20 is online and connected to the internet, it will automatically contact your Sophos firewall and establish a secure, dedicated VPN tunnel.

4. Betjening

4.1 Secure Connectivity

The SD-RED 20 establishes a secure VPN tunnel between the remote site and your central Sophos firewall. All data transmitted through this tunnel is encrypted using AES256, ensuring a secure, tamper-proof, and hacking-proof connection.

4.2 Centralized Management

Management of the SD-RED 20 is performed centrally through your Sophos XG or SG series firewall. This provides transparent protection across your entire distributed network, allowing for customized or replicated security policies.

4.3 Synchronized SD-WAN (with XG Firewall)

When managed by an XG Firewall, the Synchronized SD-WAN feature leverages Sophos Intercept X for 100% reliability, integrating synchronized security for enhanced network performance and security.

4.4 Flexible WAN Options

The device supports flexible WAN connectivity. You can utilize the standard Ethernet WAN port or optionally add a Wi-Fi-5 or 3G/4G module for wireless client connectivity or alternative internet connections.

5. Vedligeholdelse

• Firmwareopdateringer: Ensure your Sophos firewall and SD-RED devices are running the latest firmware versions for optimal security and performance. Updates are managed centrally via the Sophos firewall.
• Fysisk inspektion: Periodically inspect the device for any physical damage or loose cable connections.
• Miljøforhold: Ensure the device is operated within recommended temperature and humidity ranges to prevent overheating or damage.
• Rensning: Use a soft, dry cloth to clean the exterior of the device. Do not use liquid cleaners.

6. Fejlfinding

6.1 Almindelige problemer og løsninger

• Ingen strøm:

  Ensure the power adapter is securely connected to both the device and a working power outlet. Check the power LED on the front panel.
• No Internet Connectivity:

  Verify the WAN cable connection. Check the WAN and Internet LEDs on the front panel. Confirm that your upstream modem/router is functioning correctly. Ensure the device ID is correctly entered in your Sophos firewall and the configuration is active.

• VPN Tunnel Not Established:

  Check the Tunnel LED. Ensure the SD-RED 20 has internet access. Verify the device ID and configuration on your Sophos firewall. Ensure there are no firewall rules blocking the connection between the SD-RED and the central firewall.

• Local Network Access Issues:

  Check LAN cable connections and LAN LEDs. Verify DHCP settings if the SD-RED is configured to manage DHCP for the remote network. Ensure client devices are configured to obtain IP addresses automatically or have correct static IP settings.

6.2 Fabriksindstilling

To reset the device to factory defaults, press and hold the RESET button on the rear panel for approximately 10 seconds while the device is powered on. Release the button when the system LEDs change state or the device reboots.

7. Specifikationer

8. Garanti og support

For warranty information and technical support, please refer to the official Sophos website or contact your authorized Sophos reseller. Product registration may be required to activate your warranty.

Online ressourcer: Sophos Support Portal