Sophos Switch
Sophos Switch Series
The Sophos Switch Series offers a range of cloud-managed, network
access layer switches to connect, power, and control device accessat the LAN edge. Sophos Central provides a single pane of glass tomanage your switches alongside your other Sophos security solutions.

Connectivity, power, and control

Highlights

The Sophos Switch Series offers a range of 8-, 24-, and 48-port network access layerswitches to connect and power the devices on your LAN. Switches put you in control ofdevice access with port security and VLAN segmentation and add quality of service at theall-important access layer.

Ì Access layer switches with 8-,24-, or 48- 1G or 2.5G ports.

Many ways to manage a switch

Ì Power-over-Ethernet (PoE)
options available to power
PoE-capable devices

Your Sophos switches can be managed in different ways. Use Sophos Central for
management and visibility alongside your other Sophos solutions, or open the local webinterface, command line interface or use SNMP for additional configuration options.

Ì SFP (1G) or SFP+ (10G) uplink
ports on all models

Ì Easy to set up and deploy

Simple setup and deployment

Ì Multiple management options
including Sophos Central

Sophos Switches are very easy to setup and deploy. Simply enter the serial number ofyour switch in Sophos Central and click register to start the process. Your switches will beup and running in minutes.

Ì Ideal for branch office, retail,and SMB use cases

SMB and SD-branch use cases
Sophos switches suit the connectivity needs of many organizations: remote and homeoffices, small and medium-sized businesses, retail outlets and branch offices. Addswitches to extend your SD-Branch deployments using our full range of products.

One vendor, one view.
Rather than adding complexity and security risk, Sophos switches seamlessly integratewith your existing Sophos solutions and so remove the risks of multi-vendor deployments.
Integration is taken one step further with Active Threat Response, empowering MDR
analysts to send an API-triggered response to isolate potentially malicious hosts acrossthe network.
New and existing customers, resellers, and managed service providers benefit fromhaving a single vendor for the full network stack.

Ì Active Threat Responseto isolate potentiallycompromised hostsÌ A single vendor for the fullnetwork stackSophos Switch

Sophos Switch – Model overview
We offer two different series within our model range
Ì 100 Series models offer 1 GE Ethernet ports plus either SFP or SFP+
Ì 200 Series models are equipped with 2.5 GE ports plus SFP+
Each series includes 8-, 24-, and 48-port models

8-Port Switches
100 Series
Model

200 Series

CS101-8

CS101-8FP

CS210-8FP

HardwareForm Factor

Desktop

Desktop

1U

Mounting

Wall mount

Wall mount

Rackmount
120

Technical Specifications
Switching Capacity (Gbps)

2020MAC Address Table

8K8K

8K

512 KB

512 KB

512 KB

Support for up to 256 VLANs
simultaneously(out of 4096 VLAN IDs)

Support for up to 256 VLANs
simultaneously(out of 4096 VLAN IDs)

Support for up to 256 VLANs
simultaneously(out of 4096 VLAN IDs)

10/100/1000Base-T

88-

100/1000Base-T/2500Base-T **--

80Packet Buffer Memory
VLANs
Network Interfaces

SFP 1G

22

SFP+ 1G/10G004

Other Interfaces

DC-In
on/off switch

DC-In
on/off switch

Console port
AC power socket

Power Budget

n/a110W

240W

PoE-capable Ports

n/a

1 to 81 to 8Supported PoE Standard

n/a

802.3af/802.3at

802.3af/802.3at/802.3bt

Max. PoE Devicesn/a

7 (15.4W)/3 (30W)

8 (15.4W)/8 (30W)/4 (60W)

CS110-24FP

CS210-24FP

Power over Ethernet**10M full and half duplex and 100M half duplex speeds are not supported on this model

24-Port Switches
100 Series
Model

CS110-24

200 Series

HardwareForm Factor

1U

1U

1U

Mounting

RackmountRackmountRackmount

Technical Specifications
Switching Capacity (Gbps)

128

128

152

MAC Address Table

16K

16K

16K

Packet Buffer Memory

1.5 MB

1.5 MB1.5 MB

Support for up to 256 VLANs
simultaneously (out of 4096 VLAN IDs)

Support for up to 256 VLANs
simultaneously (out of 4096 VLAN IDs)

Support for up to 256 VLANs
simultaneously (out of 4096 VLAN IDs)

10/100/1000Base-T

24

24

16

100/1000Base-T/2500Base-T--

8

SFP 1G000

VLANs
Network Interfaces

SFP+ 1G/10G

444

Other Interfaces

Console port
AC power socket

Console port
AC power socket

Console port
AC power socket

Power over Ethernet
Power Budgetn/a

410W

410W

PoE-Capable Ports

n/a

1 to 24

1 to 24

Supported PoE Standardn/a

802.3af/802.3at

802.3af/802.3at

Max. PoE Devicesn/a

24 (15.4W)/13 (30W)

24 (15.4W)/13 (30W)

Sophos Switch

Sophos Switch – Model overview
48-Port Switches
100 Series
Model

CS110-48

CS110-48P

200 Series
CS110-48FP

CS210-48FP

HardwareForm Factor

1U

1U

1U

1U

Mounting

RackmountRackmountRackmountRackmount

Technical Specifications
Switching Capacity (Gbps)

176

176

176

224

MAC Address Table

32K

32K

32K

32K

Packet Buffer Memory

2 MB

2 MB

2 MB

2 MB

Support for up to 256 VLANs
simultaneously (out of 4096
VLAN IDs)

Support for up to 256 VLANs
simultaneously (out of 4096
VLAN IDs)

Support for up to 256 VLANs
simultaneously (out of 4096
VLAN IDs)

Support for up to 256 VLANs
simultaneously (out of 4096
VLAN IDs)

10/100/1000Base-T

48

4848

32

100/1000Base-T/2500Base-T---16

SFP 1G

0000

SFP+ 1G/10G

4444

Other Interfaces

Console PortAC Power Socket

Console PortAC Power Socket

Console PortAC Power Socket

Console PortAC Power Socket

VLANs
Network Interfaces

Power over Ethernet
Power Budget

n/a

410W

740W

740W

PoE-capable Ports

n/a

1 to 48

1 to 48

1 to 48Supported PoE Standard

n/a

802.3af/802.3at

802.3af/802.3at

802.3af/802.3at

Max. PoE Devicesn/a26 (15.4W)/13 (30W)

48 (15.4W)/24 (30W)

48 (15.4W)/24 (30W)

Sophos Central Management

Local Web Management

Sophos Switch

Sophos Switch management
Sophos Central is the single point of truth for resellers, managed service providers, and customer admins.
Whether you’re managing a single switch or a large, distributed network deployment with multiple products,
Sophos Central eases management and has all your other Sophos products just a click away.
You have the following options to manage your switches:

Sophos CentralLocal Web Management*

Single pane of glass for all your Sophossolutions. Limited configuration upon
first release.

Access the full feature set and all
configuration options of your switchfrom the very first release.

Sophos Central management is included in theSupport and Services subscription.

Web management is includedin the purchase price of your switch.

Command Line Interface (CLI)*

SNMP*

For network administrators who preferto manage their switch via the commandline interface (CLI).

SNMP is supportedon all switches for management andmonitoring.

CLI management is included inthe purchase price of your switch.

SNMP management isincluded in the purchase price of your switch.

Active Threat Response
Managing your switches in Sophos Central unlocks additional capabilities to integrate with otherSophos solutions and services.
With Active Threat Response, threat feeds triggered via an API initiate an automatic response
to isolate compromised hosts across all Sophos switches and AP6 Series access points on thenetwork. Threat feeds can originate from Sophos MDR, Sophos XDR, and even third-party securitysolutions. For customers using Sophos NDR, this functionality adds a response action to detections
from deep within the network.

BenefitsÌ Isolates wired, wireless, managed, and unmanaged hosts
Ì Prevents lateral movement and buys you time for remediation
Ì Detects issues originating from multiple sources (Sophos or third-party solutions)
Active Threat Response is available via Sophos Central for Sophos Switch, Sophos Wireless (AP6Series only), and Sophos Firewall.
While a Sophos Firewall is not a prerequisite for Active Threat Response with Sophos Switch,
customers who also own a Sophos Firewall benefit from different response actions and enhanced
automation, resulting in a faster time to remediation at every network layer.

Sophos Switch

Sophos Switch – Software Features
Management and Configuration
Switch Auto-Discovery
Dynamic VLAN Configuration

Feature Availability by Model✓ (all models)✓ (GVRP) – all models

LAG Group Size (up to 8)

8 – all models

Total Link Aggregation Groups (Up to # of ports)

8 – all models

IGMP Snooping✓ (all models)✓ (all models)Static Routing

IPv4: 59 entries for static route, 4 entries for interface
route and 1 entry for default route.
IPv6: 5 entries for static route, 16 entries for interface
route and 1 entry for default route.

802.1x Authentication✓ (all models)IEEE 802.1x MAC Authentication Bypass (MAB) - (host, port, and fallback)✓ (all models)Syslog Collection✓ (all models)

IP/MAC ACL✓ (all models)✓Jumbo Frames(CS101-8/8FP: size 9K, per system setting)(other models: size 10K, per port setting)Auto-Negotiation for Port Speed and Duplex✓ (all models)

MDI/MDIX Auto-crossover✓ (all models)IEEE 802.1D MAC Bridging/STP (RSTP compatible)✓ (all models)IEEE 802.1w Rapid Spanning Tree Protocol (RSTP)✓ (all models)IEEE 802.1s Multiple Spanning Tree Protocol (MSTP)✓ (all models)Edge Port / Port Fast

✓ (all models)IEEE 802.1Q VLAN Tagging✓ (all models)

Guest VLAN and Voice VLAN

✓ (all models)IEEE 802.3ad Link Aggregation with LACP

✓ (all models)

Unicast/Multicast Traffic Balancing Over Trunk Port✓ (all models)IEEE 802.1AX Link Aggregation✓ (all models)

Spanning Tree Instances (MSTP/CST)✓ (all models)IEEE 802.3x Flow Control and Back-Pressure✓ (all models)IEEE 802.3 10Base-T✓ for 100 series only (not supported on 200 series)

IEEE 802.3u 100Base-TX✓ (all models)IEEE 802.3z 1000Base-SX/LX✓ (all models)IEEE 802.3ab 1000Base-T✓ (all models)IEEE 802.3bz Gigabit Ethernet Support✓ (all models)IEEE 802.3 CSMA/CD Access Method and Physical Layer Specifications✓ (all models)

Storm Control✓ (all models)Port Mirroring✓ (all models)

DHCP Relay✓ (all models)Sophos Switch

Security and Visibility
ACL - Maximum Entries Per Group
Max. ACL Groups

Feature Availability by Model128
2 for CS101-8/8FP, 8 for all other models

IEEE 802.1x Authentication Port-Based✓ (all models)IEEE 802.1x Guest VLAN

✓ (all models)IEEE 802.1ab Link Layer Discovery Protocol (LLDP)✓ (all models)IEEE 802.1ab LLDP-MED✓ LLDP MED on PoE models only

DHCP-Snooping✓ (all models)Cisco-compliant Discovery Protocol✓ (all models)

MAC Address Filtering✓ (all models)

Priority Tag - Packet Ingress Filtering✓ (all models)

IP Source Guard
Active Threat Response
Sophos MDR/XDR Integration✓ (all models)(uses 1 ACL group if enabled)✓ (all models)(requires a valid support subscription)

Quality of Service
IEEE 802.1p Based Priority Queuing✓ (all models)

IP TOS/DSCP Based Priority Queuing✓ (all models)Management
IPv4 and IPv6 Management (IP assignment supports DHCP or staticaddress; Sophos defines default mode of operation)✓ (all models)SSH✓ (all models)

HTTPS✓ (all models)

SNMP v1/v2c/v3✓ (all models)SSH, Web Interface, and REST API✓ (all models)

Sophos Central✓ (all models)

RFC and MIB Support
DHCP Client✓ (all models)

RFC 854 Telnet Server✓ (all models)RFC 2865 RADIUS for 802.1X authentication✓ (all models)

RFC 1643 Ethernet-like Interface MIB✓ (all models)

RFC 1213 MIB-II✓ (all models)

RFC 1157 SNMPv1/v2c✓ (all models)RFC 2618 RADIUS Authentication Client MIB✓ (all models)

RFC 1493 Bridge MIB✓ (all models)Sophos Switch

How to Buy
What You Purchase

What Your Purchase Includes

Sophos Switch hardware

Sold per switch

Included in the hardware purchase cost

Local Web/CLI/SNMP management
Limited lifetime warranty

Sophos Switch Support and Services

Sold per switch per year

Subscription entitles you to:

Sophos Central Management, with access to additional features
Advanced RMA support
24x7 Multi-channel support
Firmware updates

If subscription expires or is not purchased

Sophos Central management goes into read-only
Firmware updates are not available
No phone support
No advanced RMA support*Important Note

Your Sophos Switch will always work via local configuration without a
Support and Services subcription, however, with the above limitations

Further information about the limited lifetime warranty is available under sophos.com/legal.

Support access for Sophos Switch
Sophos Support access can be activated for switches that are registered and connected to Sophos
Central only. For switches not registered in Sophos Central, troubleshooting/debugging will belimited.

For further information,please visit sophos.com/switch
United Kingdom and Worldwide Sales
Tel: +44 (0)8447 671131
Email: sales@sophos.com

North American Sales
Toll Free: 1-866-866-2802
Email: nasales@sophos.com© Copyright 2024. Sophos Ltd. All rights reserved.
Registered in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UKSophos is the registered trademark of Sophos Ltd. All other product and company names mentioned aretrademarks or registered trademarks of their respective owners.
24-05-30 DS-EN (MP)Australia and New Zealand Sales
Tel: +61 2 9409 9100
Email: sales@sophos.com.au

Asia Sales
Tel: +65 62244168
Email: salesasia@sophos.com