Sophos Central Switches - anyone got any secrets they want to share?

The switches already exist with all 100 series, and the smaller 200 avail, more coming this summer.

They can be managed either locally as standalone, or via central.

There's a forum group already up for them.  https://community.sophos.com/sophos-switch/

product info www.sophos.com/.../sophos-switch

are there plans to integrate the switches into synchronized security like disabling ports when the device on that port is acting maliciously? currently they seem to be classic "dumb" manageable switches with no integration or linkage to other sophos security products.

There are plans to get such a service in the Switch. The integration part of Sophos Switches is not final at this point, new features in management and sync-sec will be included in the upcoming months. 

Getting switches integrated would seem like a KEY selling point, differentiating Sophos from competitors.  

There are some shortcomings with Sophos switches. Fortinet has far better lineup here as far as ap-switch-fg-extender. But at the end, it depends on what you need so Sophos may fit the shoes. 

Please expand on shortcomings if you have tested or used Sophos switches.  Currently integration into central is the biggest selling point, other than that, similar to others. 

I think Sophos would do well to sell add-on apps w switches, IE: 802.10 access / management via central, new device notifications (security), etc.  Integration of switches, central and FW for holistic security management. -- NAC.

IE: Sophos takes leadership w 802.10 -

1.  Install Switch / basic setup. 

2.  Tell Central to add 802.10 feature $$ - MAC BASED switch device security

3.. Switches and FW take inventory of devices and ports at each switch / location.

4.  User says allow for discovered devices / MAC addresses, adds friendly labels, host names, etc.

5.  User says whether devices can change ports or switches, (mobility OK)?   - device DB created.

6.  User enables switch lock down w config, 

6.  User can lock down so that any new device must be authorized by IT, portal reg, etc.

Many other iterations here, but why can't Sophos have something basic as above, and maybe a more advanced tier $$$ for those who need?

I have them 8 under my desk getting ready to be sent back. Primary reason is this: 

 CS110-24FP - max 4 vlan interfaces can get ip assigned and no static routing ? 

all what you have wrote here is available at competing offering for long time. I was hopping for Sophos not to get in to this game but to integrate with one of Tier-1 switch/ap suppliers for security part (Extreme for example).  

Ouch, sorry they are not what you need for your application.  Features and limitations should be completely disclosed, marketing and technical people @ Sophos need to be on the same page...

AstaroNBack said:

Ouch, sorry they are not what you need for your application.

any application ... this switch isn't any type of enterprise.

AstaroNBack said:

marketing and technical people @ Sophos need to be on the same page...

they are not. and it will cost them some money now.