Sophos XGS 4300 User manual

Operating Instructions
XGS 4300/4500

2XGS 4300/4500
Operating Instructions
Foreword
We are pleased to welcome you as a new customer of our Sophos XGS appliances.
To install and configure the hardware appliance you can use the following documents:
Hardware Quick Start Guide: Connection to the system peripherals in a few steps
Operating Instructions: Notes on the security and commissioning of the hardware
appliance
Sophos Firewall How-To Library: Installing and configuring the software appliance
The Hardware Quick Start Guide and the Safety Instructions are also delivered in printed
form together with the hardware appliance. The instructions must be read carefully prior to
using the hardware and should be kept in a safe place.
You may download all user manuals and additional documentation from the support
webpage at: sophos.com/support
Security Symbols
The following symbol and its meaning appears in the Hardware Quick Start Guide, Safety
Instructions and in these Operating Instructions.
Caution and Important Note. If these notes are not correctly observed:
ÌThis is dangerous to life and the environment
ÌThe appliance may be damaged
ÌThe functions of the appliance will be no longer guaranteed
ÌSophos shall not be liable for damages arising from a
failure to comply with the Safety Instructions
Designed Use
The hardware appliances are developed for use in networks. XGS 4300/4500 models
may be operated as a standalone appliance. The hardware appliance can be used in
commercial, industrial and residential environments.
The XGS 4300/4500 models belong to the appliance group A.
The hardware appliance must be installed pursuant to the current installation notes.
Otherwise failure-free and safe operation cannot be guaranteed. The EU declaration of
conformity is available at the following address:
Sophos Technology GmbH
Amalienbadstr. 41/Bau 52
76227 Karlsruhe
Germany

3XGS 4300/4500
Operating Instructions
CE Labeling, FCC and Approvals
The XGS 4300/4500 appliances comply with CB, CE, UL, FCC, ISED, VCCI, CCC, KC, BSMI,
RCM, NOM, Anatel.
Important Note: For computer systems to remain CE and FCC compliant, only CE and FCC
compliant parts may be used. Maintaining CE and FCC compliance also requires proper
cable and cabling techniques.
Operating Elements and Connections
XGS 4300/4500*
Multi-function
LCD display
and navigation
2 x expansion
bay (shown with
optional modules)
LAN 1–4: 4 x GbE copper
– 2 bypass pairs (ports
1/2 and 3/4)
F1–F4 4 x SFP+
fiber ports
LAN 5–8: 4 x 2.5
GbE copper
COM: Micro USB, RJ45,
2 x USB 3.0, MGMT port
XGS 4300
Power supply
Mounting pins for external
power supply
Connector for external
redundant power supply
(available as an option)
Power switch
XGS 4500
Hot swappable
power supply
Slot for internal
redundant power supply
(available as an option)
Power switch
* The displayed front image is of XGS 4500 device. The XG 4300 device may vary slightly.

4XGS 4300/4500
Operating Instructions
Interfaces (front)
LAN Ports Type Speed Comment
1–4 RJ45 10/100/1000 Mbps Ports 1/2 and 3/4 can be configured
as independent bypass pairs.
5–8 RJ45 100/1000/2500
Mbps
F1–F4 SFP+ 1/10 Gbps
Other Ports Type Comment
COM RJ45/Micro USB You can connect a serial console to either the RJ45 or
micro USB COM port to access the CLI. Only one port
can be used at any time. If both ports are connected
then the micro USB port will take precedence.
The required connection settings are:
ÌBits per second: 38,400
ÌData bits: 8
ÌParity: N (none)
ÌStop bits: 1
USB USB 3.0 (Type A) You can connect a USB 2.0 or 3.0 compatible device to
this port (e.g. USB thumb drive, UPS, 3G/4G dongles).
MGMT RJ45 (10/100/1000 Mbps) We recommend using this dedicated
port to connect your Admin PC.
Module Slots Type Comment
A/B Flexi Port Can be used for any Flexi Port module
listed in the table below
Compatible Modules*Comment
8 port GbE copper Flexi Port
8 port GbE SFP Flexi Port
4 port GbE copper – 2 Bypass groups Flexi Port
4 port 10 GbE SFP+ Flexi Port
4 port 2.5 GbE copper PoE Flexi Port
4 port GbE copper PoE + 4 port GbE copper Flexi Port
* SFP/SFP+/QSFP transceivers are sold separately.

5XGS 4300/4500
Operating Instructions
Technical Specifications
XGS 4300 XGS 4500
Physical Specification
#Fixed Ethernet Ports 12 12
#Fixed ByPass Port Pairs 2 2
max. #Flexi Ports 16 16
#Cores Main CPU 6/12 8/16
Main Memory 32 GB DDR4 EDD 2666 32 GB DDR4 EDD 2666
#Cores NPU 18 18
NPU Memory 8 GB DDR4 ECC 8 GB DDR4 ECC
Stoarge 1 x 240 GB 2 x 240 GB WS-RAID-1
Power Supply Internal auto-ranging AC-DC
100-240VAC, 3.7–7.4A@50-60 Hz
External Redundant PSU Option
Internal Hot Swappable auto-
ranging AC-DC
100-240VAC, 3.7–7.4A@50-60 Hz
Internal Redundant PSU Option
Power Consumption (idle) 131 W/447.43 BTU/hr 151 W/515.74 BTU/hr
Power Consumption (full load) 268.35 W/916.56 BTU/hr 268.35 W/916.56 BTU/hr
PoE addition enabled 152 W/519 BTU/hr 152 W/519 BTU/hr
Mounting Rackmount (1U sliding rails option)
min. rack depth: 603 mm (23.74”)
max. rack depth: 930 mm (36.61”)
Rackmount (1U sliding rails option)
min. rack depth: 603 mm (23.74”)
max. rack depth: 930 mm (36.61”)
Dimensions
Width x Depth x Height
438 x 510 x 44 mm
17.24 x 20.08 x 1.73 inches
438 x 510 x 44 mm
17.24 x 20.08 x 1.73 inches
Weight (kg) unpacked/packed 8.7 kg/19.18 lbs (unpacked)
14.9 kg/32.85 lbs (packed)
9.7 kg/21.38 lbs (unpacked)
15.9 kg/35.05 lbs (packed)
Environmental
Noise level (avg.)
(Typical/Max Operation)
54/65 dBA 54/65 dBA
Operating Temperature 0°C to 40°C 0°C to 40°C
Storage Temperature -20°C to 70°C -20°C to 70°C
Opertional/Storage Humidity 10% to 90% non-condensing 10% to 90% non-condensing
Altitude 2000m 2000m
MTBF (hours)
(Telcordia SR-332 Issue 3)
126,297 130,415
Certifications (Safety, EMC) CB, CE, UL, FCC, ISED, VCCI, CCC,
KC, BSMI, RCM, NOM, Anatel
CB, CE, UL, FCC, ISED, VCCI, CCC,
KC, BSMI, RCM, NOM, Anatel

6XGS 4300/4500
Operating Instructions
LED Status
Status LEDs
Power 1 Green Solid Power Supply 1 Active.
Red Solid Power Supply 1 Failure.
Power 2 Green Solid Power Supply 2 Active.
Red Solid Power Supply 2 Failure.
SSD Blue Flashing SSD reading/writing data.
BP 1/2 Green Solid Bypass mode on Ports 1/2 enabled.
Off Bypass mode on Ports 1/2 disabled and inactive.
BP 3/4 Green Solid Bypass mode on Ports 3/4 enabled.
Off Bypass mode on Ports 3/4 disabled and inactive.
LEDs on each RJ45 Ethernet connector
ACT/LNK
(Left LED)
Green Solid 1. The Ethernet port has established link.
2. Good connection between the Ethernet port and hub.
Flashing The adapter is sending or receiving network data.
Off 1. The adapter and switch are not receiving power.
2. No connection between both ends of network.
3. Network drivers have not been loaded
or do not function correctly.
Speed
(Right LED)
1 GbE ports
Amber On If Ethernet port is operating at 1000 Mbps.
Green On If Ethernet port is operating at 100 Mbps.
Off If Ethernet port is operating at 10 Mbps.
Speed
(Right LED)
2.5 GbE ports
Amber On If Ethernet port is operating at 2500 Mbps.
Green On If Ethernet port is operating at 1000 Mbps.
Off If Ethernet port is operating at 100 Mbps.
LEDs on each SFP connector
ACT/LNK Green Solid 1. The SFP connector is receiving power.
2. Good connection between the SFP port and hub.
Flashing The adapter is sending or receiving network data.
Off 1. The adapter and switch are not receiving power.
2. No connection between both ends of network.
3. Network drivers have not been loaded
or do not function correctly.
LEDs on each SFP+ connector
ACT/LNK Green Solid 1. The SFP+ connector is receiving power.
2. Good connection between the SFP+ port and hub.
Flashing The adapter is sending or receiving network data.
Off 1. The adapter and switch are not receiving power.
2. No connection between both ends of network.
3. Network drivers have not been loaded
or do not function correctly.
Speed Blue On If SFP+ connector is operating at 10,000 Mbps.
Amber On If SFP+ connector is operating at 1,000 Mbps.
Off Either the LED is not working or the SFP+ connector
is operating at a speed below 1,000 Mbps.
Back side
Power Supply
[XGS 4500 only]
Green Solid Power
Off No power
LCD and Control Keys
The XGS 4300/4500 have an LCD and an operating unit with four membrane keys. In the
LCD, 16 characters per line can be displayed.
While the security appliance is booting this message is displayed
Firmware Version
SOPHOS
Protection
Firmware Version
SFOS xx.xx.xx

7XGS 4300/4500
Operating Instructions
LCD Menu Details
Firmware Version SFOS xx.xx.xx
Main Menu
1. System Menu
System Menu
1. Show Date
Fri 16 Apr 2021
12:54:32 GMT
Port A1[LAN] System Menu
2. Show Uptime
System uptime
0 days 0:26
System Menu
3. Show CPU
CPU Usage
0.00%
System Menu
4. Show Memory
Memory Usage
Used: 7.60%
System Menu
5. Show LoadAvg
Load Average
0.89 0.89 0.78
System Menu
6. Show Disk
Show Disk
1. Total Usage
Total Disk Usage
0.02
Show Disk
1. Detail Usage
Root 1%
Temp 0%
Config 9%
Signature 1%
System Menu
7. Live Users
Live Users
0
Main Menu
2. Network Menu
Network Menu
1. Show Port A1[LAN]
Port A1[LAN]
172.16.16.16
Network Menu
2. Show Port A2[WAN]
Port A2[WAN]
IP NOT ASSIGN
Network Menu
3. Show Port A3[NA]
Port A3[NA]
IP NOT ASSIGN
Network Menu
4. Show All
Port A4[LAN]
172.16.16.16
PortA5[WAN]
IP NOT ASSIGN
Port A6[NA]
IP NOT ASSIGN
Port A7[NA]
IP NOT ASSIGN
Port A8[NA]
IP NOT ASSIGN
Port A9[NA]
IP NOT ASSIGN
Network Menu
5. Show Gateway
GW1: PortA2
10.0.0.254
Main Menu
3. Firmware Menu
Network Menu
1. Show Firmware
FW1=SFOS
15.01.0 Beta
Network Menu
2. Factory Reset
Factory Reset
1. v to Cont.
Factory Reset
2. Confirm
Network Menu
3. Shutdown
Shutdown
1. v to Cont.
Shutdown
1. Confirm
Network Menu
4. Reboot
Reboot
1. v to Cont.
Reboot
1. Confirm
Main Menu
4. HA Info
Not Configured

8XGS 4300/4500
Operating Instructions
Executable Actions
ÌFactory reset: All settings are reset to the factory settings. The factory reset
function sets all of the configuration settings and options to their original state. All
data entered after the initial installation will be deleted, including the HTTP proxy
cache, the entire email queue, accounting and reporting data, passwords, and
uninstalled Up2Date packages. The version of the software will not change. That
is, all firmware and pattern updates that have been installed will be retained.
ÌShut down: The security appliance is shut down. The shut down action allows
you to turn off the system, and allows you to cleanly stop all running services.
ÌReboot machine: The security appliance is rebooted. The reboot
action will shut down the system completely and reboot.
Control Key Functions
The current menu is left. When the key is pressed a couple of times, the modifications are
discarded and the initial state will be displayed.
These keys are used to switch between the different menus and/or characters.
Pressing executes the configured action.
Factory Reset
S.NO. Action Item/press What you see on the LCD What it means
1. SOPHOS
Protection Appliance is booting
2.
Firmware Version
SFOS xx.xx.xx Appliance has finished Booting
3.
ENTER Main Menu
1. System Menu Shows Main Menu first item
4.
x2
Main Menu
3. Firmware Menu Shows Main Menu Third item
5.
ENTER Firmware Menu
1. Show Firmware Enters Into Firmware Menu
6. Firmware Menu
2. Factory Reset Shows Firmware Menu Second item
7.
ENTER Factory Reset
1. v to Cont. Press down key to continue
8. Factory Reset
2. Confirm? Asks for Confirmation
9.
ENTER Factory Reset under progress
10. Firmware Version
SFOS xx.xx.xx Factory Reset Complete
Esc
ENTER

9XGS 4300/4500
Operating Instructions
Shut Down
S.NO. Action Item/press What you see on the LCD What it means
1. SOPHOS
Protection Appliance is booting
2.
Firmware Version
SFOS xx.xx.xx Appliance has finished Booting
3.
ENTER Main Menu
1. System Menu Shows Main Menu first item
4.
x2
Main Menu
3. Firmware Menu Shows Main Menu Third item
5.
ENTER Firmware Menu
1. Show Firmware Enters Into Firmware Menu
6.
x2
Firmware Menu
3. Shutdown Shows Firmware Menu Third item
7.
ENTER Factory Reset
1. v to Cont. Press down key to continue
8. Factory Reset
1. Confirm? Asks for Confirmation
9.
ENTER Shutdown Complete
Reboot Machine
S.NO. Action Item/press What you see on the LCD What it means
1. SOPHOS
Protection Appliance is booting
2.
Firmware Version
SFOS 18.xx.xx Appliance has finished Booting
3.
ENTER Main Menu
1. System Menu Shows Main Menu first item
4.
x2
Main Menu
3. Firmware Menu Shows Main Menu Third item
5.
ENTER Firmware Menu
1. Show Firmware Enters Into Firmware Menu
6.
x3
Firmware Menu
4. Reboot Shows Firmware Menu Fourth item
7.
ENTER Factory Reset
1. v to Cont. Press down key to continue
8. Factory Reset
1. Confirm? Asks for Confirmation
9.
ENTER Reboot under progress
10. Firmware Version
SFOS xx.xx.xx Reboot Complete

10XGS 4300/4500
Operating Instructions
Putting into Operation
Caution: Risk of explosion if battery is replaced by an incorrect type. Dispose of used
batteries according to the instructions.
Scope of Supply
The supplied parts are indicated in the Hardware Quick Start Guide.
Mounting Instructions
The XGS 4300/4500 appliances are designed for use in racks. Please consider the
following security tips:
Important note: Functional reliability outside of a rack cannot be guaranteed.
Warnings and Precautions
The appliance can be operated safely if you observe the following notes and the notes on
the appliance itself.
Rack Precautions
ÌEnsure that the leveling jacks on the bottom of the rack are fully extended
to the floor with the full weight of the rack resting on them.
ÌIn single rack installation, stabilizers should be attached to the rack.
ÌIn multiple rack installations, the racks should be coupled together.
ÌAlways make sure the rack is stable before extending a component from the rack.
ÌYou should extend only one component at a time—extending two or
more simultaneously may cause the rack to become unstable.
General Server Precautions
ÌInstallation must be performed by qualified personnel
ÌReview the electrical and general safety precautions that came
with the components you are adding to your appliance.
ÌDetermine the placement of each component in the rack before you install the rails.
ÌInstall the heaviest server components on the bottom of the rack first, and then work up.
ÌAllow the hot plug power supply modules to cool before touching them.
ÌAlways keep the rack‘s front door, all panels and server components
closed when not servicing to maintain proper cooling.