Sophos SD-RED 20 Rev. 1 Remote Ethernet Device User Manual

1. پیژندنه

This manual provides comprehensive instructions for the installation, configuration, and operation of your Sophos SD-RED 20 Rev. 1 Remote Ethernet Device. The SD-RED 20 is designed to securely extend your network to remote locations, ensuring encrypted and centrally managed connectivity.

مهرباني وکړئ د وسیلې کارولو دمخه دا لارښود په بشپړ ډول ولولئ ترڅو د مناسب تنظیم او غوره فعالیت ډاډمن شي.

2. محصول ختم شوview

The Sophos SD-RED 20 is a Remote Ethernet Device that facilitates secure network extension. It simplifies the process of connecting remote offices or branches to your central Sophos firewall, creating a secure, dedicated VPN tunnel.

2.1 مخکښ پینل

شکل 1: Front Panel of Sophos SD-RED 20. This image displays the front of the device, featuring the Sophos logo, model name (SD-RED 20), a COM port, a USB 3.0 port, and various LED indicators for LAN (LAN1, LAN2, LAN3, LAN4), WAN, Internet, and System status (Tunnel, Router).

The front panel includes status LEDs and essential ports:

• COM پورټ: For console access and initial configuration.
• د USB 3.0 پورټ: For connecting external devices or 3G/4G modules.
• LAN LEDs (LAN1-LAN4): Indicate link status and activity for each LAN port.
• WAN LED: د WAN پیوستون حالت په ګوته کوي.
• د انټرنیټ LED: د انټرنیټ اتصال حالت په ګوته کوي.
• System LEDs (Tunnel, Router): Provide status information about the VPN tunnel and router functionality.

2.2 شاته پینل

شکل 2: Rear Panel of Sophos SD-RED 20. This image displays the back of the device, featuring two 12V DC power inputs (DC IN 1, DC IN 2), four LAN ports (LAN1, LAN2, LAN3, LAN4), a shared WAN port, a USB 3.0 port, and a reset button.

The rear panel provides connectivity options:

• DC IN 1 & 2 (12V): Power input ports.
• د LAN پورټونه (LAN1-LAN4): د محلي شبکې اتصالاتو لپاره ایترنیټ بندرونه.
• WAN (Shared) Port: Ethernet port for Wide Area Network connection.
• د USB 3.0 پورټ: د پردیو لپاره اضافي USB پورټ.
• د ری سیٹ تڼۍ: د فابریکې ډیفالټ ته د وسیلې بیا تنظیمولو لپاره کارول کیږي.

3. ترتیب او نصب کول

The Sophos SD-RED 20 is designed for "Plug-and-Protect" deployment, requiring minimal technical expertise at the remote site.

۳.۱ لومړنۍ اړیکه

1. د بریښنا پیوستون: Connect the provided power adapter to one of the 12V DC IN ports on the rear panel and plug it into a power outlet.
2. د WAN اتصال: Connect the WAN port of the SD-RED 20 to your internet service provider's modem or router using an Ethernet cable.
3. Local Network Connection: Connect your local network devices (e.g., computers, switches) to the LAN ports (LAN1-LAN4) on the rear panel.
4. Optional Wi-Fi/3G/4G Module: If using, insert the optional Wi-Fi-5 or 3G/4G module into the designated slot or USB port.

3.2 Firewall Integration

The SD-RED 20 must be registered and configured with your central Sophos firewall (XG or SG series) for operation.

1. Obtain Device ID: Locate the unique device ID on the SD-RED 20 unit.
2. Sophos Firewall Configuration: Access your Sophos firewall's administrative interface.
3. Add SD-RED Device: Navigate to the SD-RED configuration section and enter the device ID.
4. د پالیسۍ تعریف: Define the network policies and routing rules for the remote site. You can choose to:
   • Tunnel all traffic from the remote location through the central firewall.
   • Route only inter-office network traffic through the SD-RED, allowing direct internet access from the remote location.
5. Automatic Tunnel Establishment: Once the SD-RED 20 is online and connected to the internet, it will automatically contact your Sophos firewall and establish a secure, dedicated VPN tunnel.

4. عملیات

4.1 Secure Connectivity

The SD-RED 20 establishes a secure VPN tunnel between the remote site and your central Sophos firewall. All data transmitted through this tunnel is encrypted using AES256, ensuring a secure, tamper-proof, and hacking-proof connection.

4.2 Centralized Management

Management of the SD-RED 20 is performed centrally through your Sophos XG or SG series firewall. This provides transparent protection across your entire distributed network, allowing for customized or replicated security policies.

4.3 Synchronized SD-WAN (with XG Firewall)

When managed by an XG Firewall, the Synchronized SD-WAN feature leverages Sophos Intercept X for 100% reliability, integrating synchronized security for enhanced network performance and security.

4.4 Flexible WAN Options

The device supports flexible WAN connectivity. You can utilize the standard Ethernet WAN port or optionally add a Wi-Fi-5 or 3G/4G module for wireless client connectivity or alternative internet connections.

5. ساتنه

• د فرم ویئر تازه معلومات: Ensure your Sophos firewall and SD-RED devices are running the latest firmware versions for optimal security and performance. Updates are managed centrally via the Sophos firewall.
• فزیکي معاینه: Periodically inspect the device for any physical damage or loose cable connections.
• د چاپیریال شرایط: Ensure the device is operated within recommended temperature and humidity ranges to prevent overheating or damage.
• پاکول: Use a soft, dry cloth to clean the exterior of the device. Do not use liquid cleaners.

6. ستونزه حل کول

6.1 عام مسایل او حلونه

• ځواک نشته:

  Ensure the power adapter is securely connected to both the device and a working power outlet. Check the power LED on the front panel.
• د انټرنیټ اتصال نشته:

  Verify the WAN cable connection. Check the WAN and Internet LEDs on the front panel. Confirm that your upstream modem/router is functioning correctly. Ensure the device ID is correctly entered in your Sophos firewall and the configuration is active.

• VPN Tunnel Not Established:

  Check the Tunnel LED. Ensure the SD-RED 20 has internet access. Verify the device ID and configuration on your Sophos firewall. Ensure there are no firewall rules blocking the connection between the SD-RED and the central firewall.

• Local Network Access Issues:

  Check LAN cable connections and LAN LEDs. Verify DHCP settings if the SD-RED is configured to manage DHCP for the remote network. Ensure client devices are configured to obtain IP addresses automatically or have correct static IP settings.

6.2 د فابریکې ری سیٹ

To reset the device to factory defaults, press and hold the RESET button on the rear panel for approximately 10 seconds while the device is powered on. Release the button when the system LEDs change state or the device reboots.

7. مشخصات

8. تضمین او ملاتړ

For warranty information and technical support, please refer to the official Sophos website or contact your authorized Sophos reseller. Product registration may be required to activate your warranty.

آنلاین سرچینې: Sophos Support Portal