Overview
With the Sophos Switch Series, we’re introducing a new range of network access layer switch models. Our cloud-managed switches can be managed in Sophos Central or as standalone switches, providing extensive features to simplify network configuration and monitoring at prices affordable to small and medium-sized businesses. With advanced management, Sophos switches optimize network performance to allow companies to focus on growing their business.
Sophos Switch models
The initial release includes eight different switch models with various port configurations and models with and without Power over Ethernet (PoE). We offer two series within our model line-up: the 100 Series models have 1GE ports and either SFP or SFP+ and the 200 Series models offer 2.5GE ports plus SFP+ (24- and 48-port models in the 200 Series are expected towards mid-2022). The entry-level CS101-8/8FP desktop models are targeted for home/small businesses while the 24- and 48-port models in the 100 series and the 8-port CS210-8FP are targeted for medium-sized businesses with better performance.
- CS101-8
- CS101-8FP
- CS110-24
- CS110-24FP
- CS110-48
- CS110-48P
- CS110-48FP
- CS210-8FP
Key features
- 10/100/1000Base-T /2500Base-T Gigabit Ethernet ports (differs by model).
- Dedicated SFP or SFP+ interfaces for longer connectivity via fiber uplinks and for uplink redundancy and failover.
- IGMP and MLD snooping provide advanced multicast filtering.
- 3ad Link Aggregation.
- STP/RSTP/MSTP.
- Access Control List/ Port Security.
- 1X and RADIUS Authentication.
- SNMP v 1/v2c/v3.
- Voice VLAN for fast and reliable deployment of VoIP.
- Energy Efficient Ethernet (IEEE802.3az) support better energy-saving when more EEE compliant end devices are available in the market.
- Advanced QoS with IPv4/IPv6 ingress traffic filtering (ACLs) and prioritization.
- PoE-capable switches with IEEE 802.3af/at support and additionally 802.3bt support on CS210-8FP.
- Easy to manage via Web-based Management GUI for switch deployment.
- Standard-based technology, ensuring interoperability with any standard-based devices in the existing network.
- Dual firmware images, improving reliability and uptime for your network.
- Easy to manage in the cloud via Sophos Central
Web-based Switch Management (Switch local GUI):
All supported switch features can be locally managed from the very first release by using the switch web GUI. This gives all the flexibility of the standalone configuration of the switch.
For a detailed switch feature list, please refer to the Switch User Manual
Cloud management in Sophos Central:
Sophos Central provides the option to manage multiple switches and sites. By adding a number of switches to a single site, you can push the configuration to all the switches at that site at the same time. Admins can create multiple sites in Sophos Central and add different switch configurations for a specific site where all switches can be grouped.
In the first release, Sophos Central provides VLAN and port management options for a site or switch. Admins can manage the switch configuration for a Sophos Central registered switch along with firmware management and some basic remote switch management features for a specific switch.
Site management – Create a site, add different VLAN and port configuration settings to it and group the different switches that belong to that site. An admin can also choose to configure all switches at once by pushing the site configuration to them.
Firmware management – Sophos Central allows admins to schedule a firmware upgrade for a switch at a specific time or swap the firmware, which allows the user to select the backup firmware partition by clicking on the switch firmware version.
VLAN management - Configure (create/update/delete) VLANs in Sophos Central and assign them to the necessary switch ports directly from Sophos Central.
Port management – Map VLANs to specific switch ports and enable/disable specific ports or change the port speed of the switch.
Status and Alerts – On the switch inventory page, you can monitor the switch status (registered, disconnected, waiting for synchronization, synchronized, firmware too old and task pending ). Whenever there is config push failure or a switch is disconnected from Sophos Central, an alert will display the respective message.
Diagnostics – Turn on the remote debugging option whenever you need the Sophos support team assistance to troubleshoot switch-related issues. This feature allows the support team to collect switch-related logs.
Limitation: The current GA release offers limited switch feature management from Sophos Central (VLAN, port settings, firmware management and remote device control ). Further, more advanced switch features will be added in later software releases.
Known issues
Issue Key |
Summary |
NSW-1056 |
LOCAL UI: "show current running-config" shows the port as "SHUTDOWN" even when it is up. |
NSW-803 |
LOCAL UI: MAC address learning per port limitation is not working |
NSW-1344 |
LOCAL UI: The device UI only shows the uplink indicator for standalone ports, it does not show it if the ports are part of a LAG |
NSW-810 |
LOCAL UI : User should specify the encryption mode for SSH access, SSH admin@<ip> -c <mode> [supported modes 3des-cbc, aes128-cbc, aes256-cbc] |
NSW-1058 |
LOCAL UI: Unable to configure special characters in SNMP password |
NSW-895 |
LOCAL UI: Only a maximum of 256 VLANs can be configured |
NSW-1000 |
LOCAL UI: Users cannot add VLAN names with special characters |
NSW-1137 |
LOCAL UI: SFP ports should not show 10M or 100M half-duplex mode |
NSW-1105 |
LOCAL UI: No warning message while moving to a different page with unsaved config |
NSW-1086 |
LOCAL UI: Non-PoE switch port GRID will show PoE ports label and power usage percentage |
NSW-1182 |
LOCAL UI: Uplink tick is not displayed when the gateway’s MAC address expires from the ARP cache |
NSW-1219 |
Cloud UI: Switch alerts count in summary page is limited to max 100, even though real alerts are more. |
NSW-1301 |
Cloud UI Diagnostics: Switch Web UI redirect links are not navigating to specific Local web UI page |
NSW-1351 |
Cloud UI: Locally configured VLANs will not be synced to Sophos Central |
NSW-1172 |
Cloud UI: VLAN push from Sophos Central removes locally configured VLAN (it also removes LAG if configured on the same VLAN) |
NSW-814 |
STP: BPDUs from the uplink bridge is not forwarded when STP is disabled. |
NSW-1181 |
POE: Port MGMT: CLOUD UI uplink port identification is not updated in some cases |
NHD-1811 |
POE: CS110-48FP Long GUI refresh time to configure - Power Supply sub menu |
NSW-1428 |
POE: CS210-8FP Sometimes PoE does not auto recover after an overload condition |
Support access for Sophos Switch
Sophos support access can be activated for switches which are registered and connected to Sophos Central only. For switches not registered in Sophos Central, troubleshooting/debugging will be limited.