Sophos SD-RED

Sophos SD-RED makes extending your secure network to other locations easy. It requires
no technical skills at the remote site; simply enter the device ID into your Sophos firewall
appliance and ship it. As soon as the device is plugged in and connected to the internet,
it will contact your firewall and establish a secure dedicated VPN tunnel.
There is no user interface on the SD-RED appliance. It is designed to be fully configured and
managed from Sophos Firewall by a remote administrator with no prior knowledge of the site,
and no need to walk local personnel through technical setup steps.
Highlights:
► Easily extend your secure network to any location.
► Select from two models to suit your deployment and connectivity needs.
► Use strong AES 256-bit encryption.
► Seamlessly connect with Sophos APX Access Points.
► Benefit from Synchronized SD-WAN with Sophos Firewall and Intercept X.
RED operation modes:
► Standard/Unified mode
► Standard/Split mode
► Transparent/Split mode
Follow me:
INSTAGRAM: / ktslabs
============================================================
#NetworkEngineer #Sophos #Cybersecurity
============================================================

[@Timi7007]

Great overview for a good product!

[@ktslabs]

Kudos to Sophos for this good product. Thanks for your dope comment, much appreciated fam 👊🏽

[@keelingjohnson]

Which motherboards are inside the SOPHOS 15 and 20.? I am really looking for a PC Engines APUXXXXX motherboard.

[@ktslabs]

It is a Sophos custom PCB, unfortunately I can’t open the 20 as it will void the warranty and the 15s are EOL we no longer have those.

[@vit0k4]

Hello, do you have an environment where you transport VLANs using an SD-RED 20? I needed my branch to have the same VLANs as my headquarters.

[@ktslabs]

Hi Victor extending your HQ vlan over RED isn’t a good design it will introduce more problems than solution. The recommended design will be to let remote branches run on separate vlan but internet breakout via HQ firewall for filtering. Standard/Unified deployment

[@vit0k4]

@@ktslabs Thanks for answering me. I understand, my question is because in my guest network VLAN, I have a Hotspot (Mikrotik) configured where users create a registration to be able to use the internet, so I have browsing logs, according to the data law of my country. Do you have any suggestions to work around this problem?

[@yawnyame981]

Is there any docs for deployment?

[@ktslabs]

Hi fam yes Sophos have a pdf guide on that, just google Sophos RED deployment