Sophos SD-RED 60 User manual

Quick Start Guide
SD-RED 60

1
1. Before Deploying
Congratulations on your purchase of the Sophos SD-RED security appliance. This device will help to protect
your data and computers in branch offices and other remote locations. This Quick Start Guide describes in
short steps how to get up and running with your device and how to connect to your central office.
a) What is included in the box
After checking that you have received all of the items above, identify the unique SD-RED ID printed on the
bottom of your unit and note it within the area below:
SD-RED ID___________________________________________________
Before you begin, please confirm that you have a working Internet connection and make sure you have the
account information available that was provided by your ISP.
Quick Start Guide SD-RED 60
This Quick Start Guide
and Security Notes
RJ45 Ethernet cable
SD-RED 60 Power adapter
(region specific)
For more information about your device, scan the QR code or visit
www.sophos.com/get-started-sd-red

2
b) Device Images: Front and Back
Interfaces
LAN Ports Type Speed Comment
LAN1–LAN4 RJ45 10/100/1000 Mbps LAN1/LAN3 ports can be used to power a connected
device (e.g. access point, IP camera, or IP Phone)
via PoE with up to 30W (PoE 802.3at)
WAN1/WAN2 RJ45 10/100/1000 Mbps WAN1/SFP are shared ports, i.e. you can only use either
WAN1 OR SFP at any given time. If cables are connected
to both ports, then SFP will take precedence
SFP SFP 1 Gbps
Other Ports Type Comment
COM Micro USB You can connect a serial console to the Micro USB COM port to access the CLI.
The required connection settings are:
ÌBits per second: 115,200
ÌData bits: 8
ÌParity: N (none)
ÌStop bits: 1
USB USB-A You can connect a USB 2.0 or 3.0 compatible device to
this port (e.g. USB thumb drive, 3G/4G dongles)
Module Slots Comment
Expansion Slot Can be used for Sophos 3G/4G or Wi-Fi Modules which are
optionally available from your Sophos partner
Quick Start Guide SD-RED 60
Status LEDs
Power LEDs
USB 3.0 Port LEDs
Micro-USB
COM port
4 x GbE
LAN
2 x Power
supply
Optional Wi-Fi or
3G/4G module
SFP
GbE
WAN
USB
3.0

3
2. Mount and Connect the Device
If you want to mount the device within a rack or onto a DIN rail please use the
optionally available mounting kit for this device.
Connect the ports to the internal and external networks
1.Connect your PCs directly or via a switch to any of the LAN ports (1-4).
2.Use the supplied Ethernet cable to connect the WAN port to your router or cable
modem that connects to the Internet.
3. Power Up the Device
Connect the device to the power supply
Connect the appliance to the power supply. Plug the power supply into the electrical
outlet. The power LED should turn on.
After the system has booted it will connect to the Internet and establish a tunnel to
your central firewall.
The status LEDs “System”, “Router”, “Internet”, “Tunnel” should then turn on one after the other.
Quick Start Guide SD-RED 60
If you don’t see all four status LEDs turned on or the “System” LED is blinking red please refer to the LED
table below or the Operating Instructions to identify possible error states and contact your administrator.
Important note: If all four status LEDs are blinking in a rotatory sequence the device is installing a new
firmware version.
DO NOT POWER IT OFF. The device will reboot automatically.
Otherwise the device will be rendered inoperable and must be returned to the reseller.
Internet
Internal network
e.g., DSL modem or cable modem
Switch
WAN
SD-RED Device
Tunnel Router
Internet System
Tunnel Router
Internet System
Tunnel Router
Internet System

4Quick Start Guide SD-RED 60
4. Connecting PoE Powered Devices
Ports LAN1 and LAN3 are able to provide power over Ethernet (PoE) to a connected PoE device which
conforms to the standards 802.3af (max. 15.4W) or 802.3at (max. 30W). Each port can provide up to
30 watts max. However, if PoE power is provided to both ports concurrently then the total power drawn
should not exceed 30 watts. So, you can connect either one 802.3at or two 802.3af devices at the same
time as shown below:
Powered Ports LAN1 LAN3
Option 1 max. 15.4 watts max. 15.4 watts
Option 2 Max. 30 watts None
Option 3 None Max. 30 watts
Please consult the documentation of your powered device to identify its correct power class.
Important note: If you accidentally connect one 802.3at and one other 802.3at, or 802.3af device at the
same time, power for the device on LAN3 (lower priority) will be disabled and the connected device will
lose power. The PoE LED of this port will start blinking, indicating a PoE power error, until you remove one
of the devices from the LAN1 or LAN3 port (please also see PoE LED table below).
5. Device LED Codes
Power and Port LEDs
Power LEDs
Power 1 Green Power Supply 1 Active
Red Power Supply 1 Failure
Power 2 Green Power Supply 2 Active
Red Power Supply 2 Failure

5
LEDs on each RJ45 Ethernet connector
ACT/LNK Green Constantly 1. The Ethernet port is receiving power.
2. Good connection between the Ethernet port and hub.
Flashing The adapter is sending or receiving
network data. The frequency of the flashes
varies with the amount of traffic.
Off 1. The adapter and switch are not receiving power.
2. No connection between both ends of network.
3. Network drivers have not been loaded
or do not function correctly.
Speed Amber On If Ethernet port is operating at 1000 Mbps.
Green On If Ethernet port is operating at 100 Mbps.
Off If Ethernet port is operating at 10 Mbps.
Status LEDs
LED Booting codes
System Router Internet Tunnel Description
Device is booting
Device has finished booting
Device is connecting to default gateway/router
The default gateway/router is reachable
Device is connecting to the internet
The connection to the Internet has been established
The device is connecting to the firewall
The connection to the firewall has been established
The device is installing a new firmware
Quick Start Guide SD-RED 60

6
LED error codes
System Router Internet Tunnel Description
DHCP or static address settings failed, default gateway not reachable
Internet not reachable
No connection to firewall
No configuration or firmware update failed
PoE LEDs
PoE1 Green Constantly LAN1 providing power to connected device
Blinking fast*LAN1 has an internal hardware failure
Blinking slowly** LAN1 is denied power (e.g. connected device
requesting power above max. power capacity)
or is detecting a fault on connected device
Off LAN1 not providing power to connected device
PoE2 Green Constantly LAN3 providing power to connected device
Blinking fast*LAN3 has an internal hardware failure
Blinking slowly** LAN3 is denied power (e.g. connected device
requesting power above max. power capacity)
or is detecting a fault on connected device
Off LAN3 not providing power to connected device
6. Support and Documentation
For more information and technical support, please visit www.sophos.com/en-us/support or contact
your local Sophos reseller.
Check our Getting Started resources to find out how you can get the most out of your purchase www.
sophos.com/get-started-sd-red
Quick Start Guide SD-RED 60
* The blinking behavior is an on/off cycle approx. once every 1.3 seconds.
** The blinking behavior is an on/off cycle approx. once every 2.5 seconds.

7
1. Vor der Bereitstellung
Herzlichen Glückwunsch zum Kauf der Sophos SD-RED Security Appliance. Die Appliance unterstützt
Sie beim Schutz Ihrer Daten und Computer in Zweigstellen und an anderen entfernten Standorten. In
dieser Kurzanleitung ist beschrieben, wie Sie die Appliance einrichten, in Betrieb nehmen und mit Ihrer
Hauptgeschäftsstelle verbinden.
a) Lieferumfang
Nachdem Sie überprüft haben, dass Sie alle oben genannten Teile erhalten haben, notieren Sie hier die
eindeutige SD-RED ID, die Sie auf der Unterseite der Appliance finden:
SD-RED ID___________________________________________________
Bevor Sie beginnen, vergewissern Sie sich, dass Sie mit dem Internet verbunden sind und die Kontodaten
vorliegen, die Sie von Ihrem ISP erhalten haben.
Diese Kurzanleitung und
Sicherheitshinweise
RJ45 Ethernet-Kabel
SD-RED 60 Netzadapter
(regionenspezifisch)
Für weitere Informationen zu Ihrer Appliance scannen Sie den
QR-Code oder gehen Sie auf www.sophos.com/get-started-sd-red
Kurzanleitung SD-RED 60

8
b) Abbildungen der Appliance: Vorder- und Rückseite
Schnittstellen
LAN-Ports Typ Geschwindigkeit Anmerkung
LAN1–LAN4 RJ45 10/100/1000 MBit/s Die Ports LAN1/LAN3 können verwendet werden, um ein
verbundenes Gerät (z. B. Access Point, IP-Kamera oder IP-
Telefon) über PoE mit bis zu 30 W (PoE 802.3at) zu versorgen.
WAN1/WAN2 RJ45 10/100/1000 MBit/s WAN1/SFP sind geteilte Ports, d.h. Sie können immer
nur WAN1 ODER SFP verwenden. Wenn beide Ports
mit Kabel verbunden sind, hat SFP Vorrang.
SFP SFP 1GBit/s
Andere Ports Typ Anmerkung
COM Micro-USB Sie können eine serielle Konsole an den Micro-USB-COM-Port
anschließen, um auf die Befehlszeile (CLI) zuzugreifen.
Die erforderlichen Verbindungseinstellungen lauten wie folgt:
ÌBits je Sekunde: 115.200
ÌDatenbits: 8
ÌParität: N (keine)
ÌStoppbits: 1
USB USB-A Sie können ein USB 2.0- oder 3.0-kompatibles Gerät an diesen
Port anschließen (z. B. USB-Stick, 3G/4G-Dongle).
Modul-Slots Anmerkung
Erweiterungs-Slot Kann für Sophos 3G/4G- oder WLAN-Module verwendet werden,
die optional bei Ihrem Sophos Partner erhältlich sind.
Status-LEDs
Power-LEDs
USB 3.0 Port-LEDs
Micro-USB-
COM-Port
4 x GbE
LAN
2 x Netzteil Optionales WLAN-
oder 3G/4G-Modul
SFP
GbE
WAN
USB
3.0
Kurzanleitung SD-RED 60

9
2. Appliance montieren und verbinden
Wenn Sie die Appliance in einem Rack oder auf einer Schiene montieren möchten,
verwenden Sie das für dieses Gerät optional erhältliche Montage-Kit.
Ports mit den internen und externen Netzwerken verbinden
1.Verbinden Sie Ihre PCs direkt oder über einen Switch mit einem der LAN-Ports (1-4).
2.Verwenden Sie das beiliegende Ethernet-Kabel, um den WAN-Port mit Ihrem Router
oder dem Kabelmodem für den Internetanschluss zu verbinden.
3. Appliance einschalten
Appliance an die Netzsteckdose anschließen
Stecken Sie den Netzstecker in die Steckdose. Die Power-LED leuchtet auf.
Nach dem Hochfahren verbindet sich das System mit dem Internet und baut einen
Tunnel zu Ihrer zentralen Firewall auf.
Die Status-LEDs für „System“, „Router“, „Internet“ und „Tunnel“ sollten nacheinander aufleuchten.
Wenn nicht alle vier Status-LEDs leuchten oder die „System“-LED rot blinkt, schauen Sie in der
nachfolgenden LED-Tabelle oder in der Bedienungsanleitung nach, um mögliche Fehlerursachen zu
finden, und wenden Sie sich an Ihren Administrator.
Wichtiger Hinweis: Wenn alle vier Status-LEDs rotierend blinken, installiert die Appliance eine neue
Firmware-Version.
SCHALTEN SIE DIE APPLIANCE NICHT AUS. Die Appliance startet automatisch neu.
Andernfalls ist die Appliance nicht mehr betriebsfähig und muss an den Händler zurückgeschickt werden.
Tunnel Router
Internet System
Tunnel Router
Internet System
Tunnel Router
Internet System
Kurzanleitung SD-RED 60
Internet
Internes Netzwerk
z.B. DSL- oder Kabelmodem
Switch
WAN
SD-RED Device