Operating Instructions
Sophos RED Appliances
Sophos RED
Appliance
December 2012
Introduction
These operating instructions will help you install and configure the Sophos
RED appliances and provide technical specifications of all RED devices.
In addition, please also see the following documents that contain useful information on safety regulations, regulatory compliance, and configuration options:
Ì Sophos RED Appliances Security Notes & Regulatory Compliance (part of the scope of supply)
Ì Sophos RED 10/50 Quick Start Guide (part of the scope of supply depending on RED model)
Ì Sophos UTM Administration Guide
The instructions must be read carefully prior to using the device and should be kept in a safe place. You may download all user manuals and additional documentation from the Sophos Knowledgebase at sophos.com.
RED 10
Scope of supply
Quick Start Guide
RED 10
Security Notes and
Regulatory Compliance
Sophos Access Points
Quick Start Guide and Security Notes
Power supply RJ45 Ethernet cable
Installation
Preliminary steps
Make sure that the RED appliance has been shipped to the branch office.
Ask the person who is going to put the RED appliance into operation at the branch office to provide the unique RED-ID, which is printed at the bottom of the device. Note that the RED appliance requires a working Internet connection at your branch office.
Configuring the RED appliance
Configure the RED appliance in the central UTM appliance as described in the Sophos UTM Administration Guide.
Sophos RED Appliances Operating Instructions
Connecting branch office PCs to the RED appliance
At the branch office, use standard Ethernet cables to connect the PCs to the LAN ports (LAN1-LAN4) of the RED appliance, either directly or via a network switch.
Use the orange Ethernet cable (from the scope of supply) to connect the
WAN port of the RED appliance to the interface of your router or cable modem that connects to the Internet.
Connecting the RED appliance to the power supply
Connect the RED appliance to the power supply from the scope of supply.
Plug the power supply into the electrical outlet. The Power LED will light.
After the system has booted, it will connect to the Internet. The status LEDs
System, Router, and Internet will light:
System booted
Router reachable
Internet connectivity up
If all four status LEDs are flashing (from left to right and vice versa), the device is installing a new firmware version.
Important note: Do not unplug the power while the firmware is updating.
Otherwise the RED appliance will be rendered inoperable and must be returned to the reseller.
Establishing a tunnel between the branch office and the central
UTM Gateway
The RED appliance will now automatically retrieve its configuration file from the Internet and establish an encrypted tunnel to the central office. The
Tunnel LED will now light:
Tunnel up
If any of the four status LEDs is not lit or if the System LED is red and blinking, please refer to "Controls and LED codes" section below to identify the error.
Controls and LED Codes
Status signal
Power 10/100 Base-TX ports
4 x 10/100
Base-TX ports
1 x 10/100
Base-TX port
Power
1 x USB port
Sophos RED Appliances Operating Instructions
Sophos RED Appliances Operating Instructions
Controls
LEDs
Power
On continuously
Flashing
LAN Connection
On continuously
Flashing
Power off
Power on
Network connection, no activity
Network activity
LED codes
LED booting codes
System Router Internet Tunnel Description
The RED device is booting
The RED device has finished booting
The RED device is connecting to the default gateway/ router
The default gateway/router is reachable
The RED device is connecting to the Internet
The connection to the Internet has been established
The RED device is connecting to the UTM appliance
The connection to the UTM appliance has been established
The RED device is installing a new firmware
LED GSM/UMTS failover codes
System Router Internet Tunnel Description
GSM/UMTS failover is active
The default gateway/router is reachable
The connection to the Internet has been established
The connection to the UTM appliance has been established
LED error codes
System Router Internet Tunnel Description
DHCP or static address settings failed, default gateway not reachable
Internet not reachable
off flashing
No connection to UTM appliance
No configuration or firmware update failed
On continuously
Technical specifications
Sophos RED 10
Chassis
Mounting
Metal housing (painted white)
Desktop
Dimensions (W x H x D) 155 x 117 x 30 mm
Weight 510 g
Power supply
Power consumption
Input: 100-240 V, 50/60 Hz, 0.5 A
7 W (max.)
Operating temperature 0-40°C (operating), -20-65°C (storage)
Humidity 10-85% (operating), 5-95% (storage), non-condensing
Regulatory compliance Safety
CE
CB
EN 60950-1:2006+A11:2009+A1:2010+A12:2011
IEC 60950-1:2005+A1:2009
EMC
CE
FCC
EN 55022:2006+A1:2007
EN 55024:1998+A2:2003
EN 61000-3-2:2006+A2:2009
EN 61000-3-3:2008
CFR 47, Part 15 (Class B), ANSI C63.4
C-Tick
VCCI
AS/NZS CISPR 22
VCCI V-3/2011.4 (CISPR 22:2008)
Output: 12 V 1 A
RED 50
Scope of supply
Quick Start Guide
RED 50
Security Notes and
Regulatory Compliance
Sophos RED Appliances
Sophos RED 50
Appliance
WAN1 MAC Address:
WAN2 MAC Address:
A0000014EE22E39
Quick Start Guide and Security Notes
RED 50 Rev 1
LISTED
E215284
I.T.E.
Power supply and cable
Shielded RJ45
Ethernet cable
Installation
Preliminary steps
Make sure that the RED appliance has been shipped to the branch office.
Ask the person who is going to put the RED appliance into operation at the branch office to provide the unique RED-ID, which is printed at the bottom of the device. Note that the RED appliance requires a working Internet connection at your branch office.
3330mA
This device complies with Part 15 of the FCC Rules.
Operation is subject to the following two conditions:
(1) this device may not cause harmful interference, and
(2) this device must accept any interference received, including interference that may cause undesired operation.
Sophos RED Appliances Operating Instructions
Starting RED
> A0000014EE22E39
Tunnel is up (wan1)
> UTM 10.8.16.32
8mm
Configuring the RED appliance
Configure the RED appliance in the central UTM appliance as described in the Sophos UTM Administration Guide.
Connecting branch office PCs to the RED appliance
At the branch office, use standard Ethernet cables to connect the PCs to the LAN ports (LAN1-LAN4) of the RED appliance, either directly or via a network switch.
Use the orange shielded Ethernet cable of the scope of supply to connect the
WAN1 interface of the RED 50 appliance to the interface of your router or cable modem that connects to the Internet.
(Optional) If your office is equipped with a standby Internet connection, also connect the WAN2 interface of the RED 50 appliance to the interface of your router or cable modem that connects to the second Internet line.
Connecting the RED appliance to the power supply
Connect the RED appliance to the power supply from the scope of supply.
Plug the power supply into the electrical outlet. The Power LED will light and the system will boot. The LCD will show the message "Starting RED" and the
RED-ID.
Establishing a tunnel between the branch office and the central UTM
Gateway
The RED 50 will now automatically retrieve its configuration from the
Internet and establish a tunnel to your central office. After successfully establishing the tunnel, the LCD will show the message "Tunnel is up
(wan1)" and either the IP address or the hostname of the UTM appliance to which the RED 50 is connected.
3mm
Wall mounting instructions
The Sophos RED 50 can be mounted on the wall. Screws are not included in the scope of supply. Only use screws whose dimensions correspond with the mounting holes on the back.
Secure the screws to the wall, and mount by inserting the screws into the mounting holes on the back. Do not connect the power cable until mounting to the wall is complete.
Sophos RED Appliances Operating Instructions
RED50 Mounting template
Do not shrink to fit when printing
Sophos RED Appliances Operating Instructions
Controls and LCD messages
10/100/1000 Base-TX ports
USB 2.0 ports
Serial console
Power
LCD
Navigation keys
Error
Power/Error LED
10/100/1000 Base-TX ports LEDs
Controls
LEDs
Power
Off
On
Error
Off
On
LAN/WAN connection
Link (on continuously)
Activity (flashing)
LCD and keys
LCD
Navigation keys
Interfaces
WAN1-WAN2, LAN1-LAN4
USB 2.0
COM
DC IN 12 V
Power off
Power on
No error
Error
Link established
Network activity
Display of 2 rows x 20 characters
4 x keys to cycle through the LCD menu
6 x 10/100/1000 Base-TX interface
2 x USB 2.0 interface
Serial console interface
Power
LCD messages
Booting up
Shutting down
Starting RED
ID $RED_ID
Starting RED
Network Setup
Starting RED
Try $uplink
Starting RED
UTM $hostname
Got new config
Tunnel is up ( $uplink )
UTM $hostname
ERROR
Invalid device ID
The RED device is booting
The RED device is shutting down
The RED device is starting (the displays shows the RED ID as printed on the product label)
The RED device is configuring DHCP or a static setup
The RED device is connecting to the displayed uplink (wan1, wan2, or umts)
The RED device is connecting to the UTM appliance
The RED device has received a new configuration
The RED tunnel has been established; $uplink can be wan1, wan2, or umts; $hostname can be hostname or IP address of UTM appliance
The RED device has not been provisioned correctly
Sophos RED Appliances Operating Instructions
Technical specifications
Sophos RED 50
Chassis
Mounting
Dimensions
(W x H x D)
Weight
Power supply
Power consumption
Temperature
Humidity
Regulatory compliance
Heavy-duty steel (painted white)
Desktop/wall/rack (optional)
216 x 44 x 189 mm
1,1 kg
Input: 100-240 V, 50-60Hz, 1.3 A
38.2 W (max.)
Output: 12V 3.33A
CE
CB
UL
EMC
CE
0-40° C (operating), -20-70° C (storage)
5-90% (operating), 5-95% (storage), non-condensing
Safety
EN 60950-1:2006+A11:2009+ A1:2010+A12:2011
IEC 60950-1 (ed.2), IEC 60950-1 (ed.2); am1
UL 60950-1, CSA C22.2 No. 60950-1-07
FCC
C-Tick
VCCI
EN 55022:2010 Class A
EN 61000-3-2:2006+A1:2009+A2:2009
EN 61000-3-3:2008
EN 55024:2010
CFR 47, Part 15 Subpart B, Class A
AS/NZS CISPR 22:2009 Class A
V-3/2012.04, Class A ITE
Rack-Mount Instructions
To mount the appliance to a rack (1U), you need the special RED 50 rackmount ears, which is a separate item to be ordered. Make sure you only use the screws supplied with the rack-mount ears. Using the wrong screws could damage the hardware appliance and would invalidate your warranty.
1. Attach the rack-mount ears to the appliance
Place the appliance on a hard, flat surface with the front panel facing you.
Attach the rack–mount ears to the left and right side of the appliance with the supplied screws. Make sure the ears are properly attached to the appliance.
2. Choose the rack location
For general warnings on rack-mount installations, see below.
3. Attach the brackets to the rack with appropriate screws (not included).
Sophos RED Appliances Operating Instructions
Sophos RED Appliances Operating Instructions
General Warnings for Rack-Mount
Installations
i) Elevated Operating Ambient – If installed in a closed or multi-unit rack assembly, the operating ambient temperature of the rack environment may be greater than room ambient. Therefore, consideration should be given to installing the equipment in an environment compatible with the maximum ambient temperature (Tma) specified by the manufacturer. ii) Reduced Air Flow – Installation of the equipment in a rack should be such that the amount of air flow required for safe operation of the equipment is not compromised.
iii) Mechanical Loading – Mounting of the equipment in the rack should be such that a hazardous condition is not achieved due to uneven mechanical loading. iv) Circuit Overloading – Consideration should be given to the connection of the equipment to the supply circuit and the effect that overloading of the circuits might have on overcurrent protection and supply wiring.
Appropriate consideration of equipment nameplate ratings should be used when addressing this concern. v) Reliable Earthing – Reliable earthing of rack-mounted equipment should be maintained. Particular attention should be given to supply connections other than direct connections to the branch circuit, (e.g. use of power strips).
United Kingdom Sales:
Tel: +44 (0)8447 671131
Email: [email protected]
North American Sales:
Toll Free: 1-866-866-2802
Email: [email protected]
Boston, USA | Oxford, UK
© Copyright 2012. Sophos Ltd. All rights reserved.
All trademarks are the property of their respective owners.
Sophos Operating Instructions 02.12v1.dNA
Australia & New Zealand Sales
Tel: +61 2 9409 9100
Email: [email protected]
