Multigig connectivity at the LAN edge
The Sophos Switch Series provides secure, scalable Ethernet access for your wired and wireless devices while putting LAN connectivity fully under your control.
Devices, devices everywhere
Many businesses have pieced together a colorful collection of network equipment in an attempt to optimize connectivity amid rapidly changing requirements. Sophos switches provide a simple solution to connect an ever-increasing range of devices to your network.
Segmentation for security
A network segmentation approach to security often begins with your switch. Configure virtual LANs (VLANs) in your switches to segment your internal traffic and reduce the attack surface in case of an infection or breach. VLANs help prevent guest devices from introducing risk to your environment and enhance overall security at the access layer.
SMB and SD-branch
Ideal for remote and home offices, small and midsize businesses (SMBs), retail outlets, and branch offices, Sophos switches come in a range of sizes to suit the connectivity needs of many organizations.
Active Threat Response
Isolate compromised hosts at the access layer
Active Threat Response in Sophos switches triggers an automatic action to isolate compromised hosts across all Sophos switches and AP6 Series wireless access points on the network. Threat feeds can originate from the Sophos Managed Detection and Response (MDR) service, Sophos Extended Detection and Response (XDR) platform, and even third-party security solutions. Sophos Network Detection and Response (NDR) adds a response action to detections deep within the network.
How it works
API-triggered threat feed
A threat feed gathers the MAC addresses of any devices that are potentially compromised, and that feed is distributed to network devices.
Distributed on the network
The feed updates all switches and Sophos AP6 access points managed from the same Sophos Central account.
Automatic isolation
The compromised devices are isolated across the network and no longer have access.
Benefits
- Isolates wired, wireless, managed, and unmanaged hosts.
- Prevents lateral movement and buys you time for remediation.
- Detects issues originating from multiple sources (Sophos and third-party solutions).
Active Threat Response is available via Sophos Central for Sophos Switch, Sophos Wireless AP6 Series access points, and Sophos Firewall.
Sophos Switch use cases
Sophos switches address a wide variety of use cases and help solve the connectivity challenges that businesses face today.
SMBs and branch offices
Switches extend the connectivity options in SMBs and branch offices and offer the flexibility to scale as needed.
To enhance security, you can deactivate unused switch ports or set up restricted access policies.
SD-branch
With a firewall in your main office and Sophos SD-RED Remote Ethernet Devices in your remote locations, Sophos Switch integrates perfectly into your SD-WAN deployments, providing multi-gigabit connectivity across all locations.
Find out more about Sophos Firewall and SD-WAN.
Retail/franchise outlets
Adding security and connectivity to your retail space helps you meet the growing need for an enhanced user experience.
Your Sophos Switch can power and connect devices such as security cameras, Wi-Fi access points, printers, kiosk systems, and more.
Remote offices
By equipping your many remote workers with an entry-level switch, you’ll ensure better connectivity in the home while keeping work separate from consumer-grade (and risk-prone) smart devices.
You can add a Sophos wireless access point for an even better experience.
Access-layer switch range
The Sophos Switch Series offers a range of network access-layer options for connecting and powering devices on your LAN while adding security controls and segmentation at the all-important LAN edge.
Ethernet options
Sophos offers three switch series:
- 100 Series models offer 1 GE ports plus either an SFP or SFP+ interface.
- 200 Series models are equipped with 2.5 GE and 1 GE ports plus an SFP+ interface; configuration varies by model.
- 1000 Series offers 10 GE ports plus SPF+.
The 100 and 200 series contain models with 8, 24, and 48 ports. The 1000 series currently offers an 8-port model only.
Power over Ethernet
Power over Ethernet (PoE) allows you to connect and power your PoE-capable devices, such as wireless access points, security cameras, and IP phones, via a single Ethernet cable. Your management interface of choice provides visibility into your power consumption and remaining PoE budget.
Deployment options
While most 24- and 48-port models will find their future home in a rack, our 8-port models are suitable for wall mounting or desktop use, making them ideal for deployments outside the standard data center environment. All switches come with a suitable mounting kit.
One vendor. One view.
The Sophos Switch Series is the perfect addition to your existing Sophos product portfolio. It offers customers, managed service providers (MSPs), and resellers a single-vendor solution for the full network stack.
Less complexity, less risk
Rather than adding complexity and security risk, Sophos switches seamlessly integrate with your existing Sophos solutions, removing the risks of multivendor deployments.
Cloud-managed in Sophos Central
The Sophos Central open security management platform is the single point of truth for resellers, MSPs, and customer admins. Whether you’re managing a single firewall or a large, distributed network deployment, Sophos Central eases operations, putting control of all your other Sophos products just a click away.
Zero-touch deployment
Sophos switches are very easy to set up and deploy. Simply enter the serial number of your switch and click “Register” to start the process. This simple onboarding process ensures that your switches are up and running in minutes.
Sophos Switch management
Your Sophos switches can be managed in different ways.
Sophos Central
You get a single pane of glass for managing all your Sophos solutions.
Sophos Central management requires a support and services subscription.
Local web management
Use this interface to access the full feature set and configuration options of your Sophos Switch from day one.
Local web management is included in the purchase price of your switch.
Command-line interface
This option is for admins familiar with using the command-line interface (CLI) for network management.
CLI management is included in the purchase price of your switch.
SNMP
Simple Network Management Protocol (SNMP) can be used for switch management and monitoring.
SNMP management is included in the purchase price of your switch.
Why Sophos Switch?
The Sophos Switch Series is part of a broader product ecosystem. Together, the solution components provide enhanced visibility and minimize overall management overhead.
Secure access portfolio
The Sophos Secure Access Portfolio includes products and solutions for secure access inside and outside your network. Sophos Zero Trust Network Access (ZTNA) delivers secure access to applications, Sophos SD-RED securely connects remote locations, Sophos Firewall provides the ultimate network security and integrates with other Sophos solutions, and Sophos Wireless access points and Sophos switches provide connectivity at the LAN edge for wired and wireless devices.
The Sophos ecosystem
Our single cloud management console and pioneering cross-product integration options are unmatched, creating a future-forward platform for seamless network security and connectivity management.