Sophos Switch

No entries match these filters. Clear filters

1. changelog Oct 12, 2026 · issue 105

   Sophos Switch Network Map phase 2 adds SVG export, persistent layouts, and richer device visibility across firewalls, switches, and APs.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   └──▷ HOW TO FIND IT
   Export a saved Network Map layout as an SVG file for inclusion in network documentation or change-management records.
   📍In Sophos Central, navigate to the Network Map, arrange and save your device layout, then select Export to download the map in SVG format.
   • Improves the Network Map: export now saves in SVG format; adds zoom, pan, and fit-to-view buttons for improved navigation; no longer resets the view when refreshing device status; renders firewall connections and topology more accurately with offline firewalls clearly marked; displays switch names instead of serial numbers with the appropriate port layout for their model and marks offline switches; identifies AP6 access points in a mesh configuration as root or node and groups them to allow management of the entire mesh as a single unit; and gives managed and unmanaged devices better naming, a consolidated view, richer details, and reduced clutter.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds new Network Map capabilities: layout of devices can now be saved persistently, eliminating the need to re-arrange devices on every visit, and a collapsible flyout panel for a less obstructed view.

   2 details in Everything

2. changelog Sep 25, 2026 · issue 085

   Sophos Switch now displays switch names as the primary identifier and supports name-based search on management pages.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Switch names are now shown as the primary identifier on the switch, site, and stack management pages in Sophos Central, making it easier to identify switches at a glance.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • The search box on switch, site, and stack management pages now supports searching by switch name in addition to existing search criteria.
   • Switch names are now shown as the primary identifier on the switch, site, and stack management pages in Sophos Central, making it easier to identify switches at a glance.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 more in Everything

3. changelog Sep 22, 2026 · issue 082

   Sophos Switch now displays switch names as the primary identifier on management pages, with name-based search.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Displays switch names as the primary identifier on the switch, site, and stack management pages in Sophos Central.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Enables searching for switches by name in the search box on switch, site, and stack management pages.
   • Displays switch names as the primary identifier on the switch, site, and stack management pages in Sophos Central.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 more in Everything

4. Central 2026.41NewReleased on September 16, 2026 Sep 16, 2026 · issue 077

   Sophos Switch Central 2026.41 surfaces switch names as the primary identifier and adds name-based search on management pages.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Adds name-based search to the search box on switch, site, and stack management pages, alongside existing search criteria.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   1 detail in Everything

5. Central 2026.29Released on July 15, 2026 Jul 15, 2026 · release notes

   Live Discover queries for Sophos Switch connected devices added to ATR query pack

6. Network MapReleased on July 1, 2026 Jul 1, 2026 · release notes

   Network Map added to Sophos Central My Environment for LLDP-based topology visualization

   └──▷ HOW TO FIND IT
   Visualize device topology and relationships in Sophos Central to audit connected infrastructure.
   📍In the console, go to My Environment › Network Map
   Export the current network layout for documentation or sharing with stakeholders.
   📍In the Network Map view, click the download option and select PNG
   • Adds My Environment > Network Map UI path to view a unified LLDP-based topology of connected Sophos Firewall, Switches, and AP6 access points
   • Enables downloading the current network map as a PNG file directly from the UI

   2 details in Everything

7. Sophos Switch 2.1.1986MR2Released on June 15, 2026 Jun 15, 2026 · release notes

   Sophos Switch 2.1.1986MR2 adds CLI controls for cloud agent, de-registration, and port reset, plus expanded ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. limits.

   • Adds cloud-agent start, cloud-agent stop, and cloud-agent restart commands to manage the cloud agent without full device reboot
   • Adds sophos-central deregister command to de-register a switch from Sophos Central for reprovisioning or decommissioning
   • Adds port-reset <port> command to reset individual ports via CLI for granular network access control
   • Adds lacp interface speed query command to diagnose LACP link aggregation by querying negotiated speeds
   • Increases MAC ACL limit from 16 to 128 entries, IPv4 ACL limit from 16 to 128 entries, and IPv6IPv6The current version of the Internet Protocol, standardized by the IETF, using 128-bit addresses to replace the exhausted IPv4 space. Cyber tools target it because modern networks run dual-stack or IPv6-only. ACL limit from 16 to 64 entries

   5 details in Everything

8. Sophos Central 2026.05Released on February 4, 2026 Feb 4, 2026 · release notes

   Sophos Central now supports ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource./ACE management, RMON settings, and detailed switch statistics.

   └──▷ HOW TO FIND IT
   Configure access control policies for switches via the UI.
   📍Navigate to Sophos Central › Switch management › Security › Access Control Lists
   Monitor switch health and traffic patterns using RMON data.
   📍Navigate to Sophos Central › Switch management › System details › Remote network monitoring (RMON)
   View real-time network statistics for port utilization and security events.
   📍Navigate to Sophos Central › Switch management › System details › System statistics
   • Adds Access Control Lists (ACLsACLsAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource.) and Access Control Entries (ACEs) management in Sophos Central on Switch management > Security
   • Adds Remote network monitoring (RMON) settings management in Sophos Central on Switch management > System details
   • Adds detailed System statistics (L2/L3 traffic, 802.1x security, traffic by port) in Sophos Central on Switch management > System details

   3 details in Everything

9. Sophos Central 2025.51Released on December 13, 2025 Dec 13, 2025 · release notes

   Sophos Switch adds resiliency scoring for individual switches and stacks in Sophos Central

   • Adds overall stack resiliency score calculation including LAG interfaces, network loop topology, WAN reachability, and minimum switch score

   1 detail in Everything

10. Sophos Central 2025.51Released on December 10, 2025 Dec 10, 2025 · release notes

    Sophos Central 2025.51 adds Switch security settings configuration for 802.1x, port security, and RADIUSRADIUSA networking protocol for centralised authentication, authorisation, and accounting of users connecting to a network, maintained under IETF standards. Cyber tools use it to integrate with existing enterprise identity infrastructure./TACACS+ servers

    └──▷ HOW TO FIND IT
    Configure 802.1x authentication on a switch port via the UI to enforce device identity checks.
    📍In Sophos Central, go to Switch › Security Settings › 802.1x Port settings and toggle authentication On, then select the desired authentication server.
    Limit the number of MAC addressesMAC addressesA hardware-address identifier used on a local network, such as Ethernet or Wi-Fi. It identifies a network interface for delivery on that link, rather than routing across the internet. learned on a switch port to prevent unauthorized device connections.
    📍In Sophos Central, navigate to Switch › Security Settings › Port security and enter the maximum allowed MAC address count for the target port.
    • Adds configuration of 802.1x Port settings (turn on/off, set authentication server) for Switches in Sophos Central
    • Adds port security setting to limit the number of MAC addresses a port can learn
    • Adds RADIUS server configuration for external authentication
    • Adds TACACS+ server configuration for external authentication

    4 details in Everything

11. Sophos Central 2025.44Released on October 13, 2025 Oct 13, 2025 · release notes

    Sophos Central adds resiliency icons on the System details page to visualize switch stack connection health

    └──▷ HOW TO FIND IT
    Visually monitor the health of stacked switch uplinks directly from the web console to identify saturation risks without calculating percentages manually.
    📍In Sophos Central, navigate to Switch › System details and check the connection resiliency icons in the stack topology view.
    • Adds visual resiliency indicators (Green/Orange/Red icons) on the System details page to show link speed, Rx/Tx transfer rates, and port utilization thresholds for connections within a stack.

    1 detail in Everything

12. Sophos Central 2025.35Released on September 17, 2025 Sep 17, 2025 · release notes

    Add switch naming and SNTP config to Sophos Central UI for better device management.

    └──▷ HOW TO FIND IT
    Update the visible name and location details for a specific switch via the Sophos Central console.
    📍In the console, go to Network › Switches, select the target device, open System details, edit the Name and Location fields
    Configure SNTP time synchronization for a stack of switches.
    📍In the console, go to Network › Switch Stacks, select the stack, open Settings › Time settings, configure SNTP server details
    • Adds ability to change the switch name on the System details page in Sophos Central
    • Enables configuration of SNTP settings at site, stack, and individual switch levels

    2 details in Everything

13. Sophos Central 2025.29Released on July 21, 2025 Jul 21, 2025 · release notes

    Adds STPSTPSpanning Tree Protocol, an IEEE standard (802.1D) that prevents Layer 2 network loops by electing a root bridge and blocking redundant switch paths, keeping Ethernet networks stable under failure conditions. configuration (RSTP/MSTP) and MST instance creation for Sophos Switch at site, stack, and device levels

    • Adds Spanning Tree Protocol settings for Sophos Switch at the site, stack, and individual switch levels.
    • Enables Rapid Spanning Tree Protocol (RSTP) and Multiple Spanning Tree Protocol (MSTP) via Sophos Central Global STP configuration.
    • Allows creation of MST instances and configuration of RSTP, Common and Internal Spanning Tree (CIST), and MST settings for individual ports.

    3 details in Everything

14. Sophos Central 2025.25Released on June 25, 2025 Jun 25, 2025 · release notes

    Sophos Central Switch adds stack management with visualization and configuration support.

    └──▷ HOW TO FIND IT
    View physical and logical topology of switch stacks within the Sophos Central console
    📍In the console, go to Switch › Stack management to visualize connections
    • Adds Stack management page to visualize switch connections, port configurations, and connections for all switches in a logically grouped stack

    1 detail in Everything

15. Sophos Switch 2.1.1791Released on January 29, 2025 Jan 29, 2025 · release notes

    Sophos Switch 2.1.1791 adds MAC addressMAC addressA hardware-address identifier used on a local network, such as Ethernet or Wi-Fi. It identifies a network interface for delivery on that link, rather than routing across the internet. blocking via the local UI

    └──▷ HOW TO FIND IT
    Block traffic from a specific device identified by its MAC address using the local switch interface.
    📍In the Sophos Switch UI, navigate to Monitor › MAC address table › MAC blocking and add the target MAC to the list.
    • Adds MAC address blocking across all VLANs via Monitor > MAC address table > MAC blocking, with a new Blocking list tab to view blocked addresses.

    1 detail in Everything

16. Sophos Central 2025.02Released on January 16, 2025 Jan 16, 2025 · release notes

    Adds PoE configuration capabilities (power budget, per-port settings, keepalive) in Sophos Central.

    └──▷ HOW TO FIND IT
    Configure per-port PoE power limits and enable keepalive for connected devices in the site interface.
    📍In the Sophos Central console, navigate to Devices › Switches, select a switch, and open the PoE settings tab to configure the global budget and individual port states.
    • Configures global PoE power budget and adjusts individual power settings for each switch port via Sophos Central.

    1 detail in Everything

17. Sophos Central 2024.51Released on December 4, 2024 Dec 4, 2024 · release notes

    Sophos Central adds loopback detection, DoS protection, log settings, and pagination for Switch management

    └──▷ HOW TO FIND IT
    Enable automatic loopback detection to prevent network loops on managed switches.
    📍Navigate to Switch management › Port Settings and enable Loopback detection.
    Configure DoS protection rules for specific switch ports via Sophos Central.
    📍Navigate to Switch management › Security and configure DoS settings.
    Filter log messages by severity for RAMRAMWorking memory that holds programs and data while a computer is running. Its contents usually disappear when power is removed. logs in the switch overview.
    📍Navigate to Log settings and set the severity level for RAM logs.
    • Switch management > Port Settings now includes loopback detection to automatically shut down ports receiving packets from themselves.
    • Switch management > Security allows configuration of Denial-of-Service (DoS) protections against common attacks.
    • Switch management log settings enable configuration of severity levels for RAM and flash logs.
    • Pagination added to switch/site overview and Task queue with configurable page sizes (10, 25, or 50 items).

    4 details in Everything

18. Sophos Central 2024.36Released on September 18, 2024 Sep 18, 2024 · release notes

    Adds Smart logging to Sophos Central Switch management for capturing agent failure logs.

    └──▷ HOW TO FIND IT
    Access the new Smart logging feature in the web console to monitor switch health during critical failures.
    📍In the console, go to Switch management › Diagnostics › Sophos error reporting
19. Sophos Central 2024.24Released on June 20, 2024 Jun 20, 2024 · release notes

    Adds MAC filtering and ARPARPA network protocol that maps IP addresses to MAC addresses on a local Ethernet segment, letting tools resolve layer-3 targets to layer-2 hardware addresses for packet crafting or host discovery. statistics management via Sophos Central console

    • Adds MAC filter entry synchronization from Sophos Central to switches
    • Adds ARP statistics viewing in Sophos Central
    • Allows pausing and resuming Central backups

    3 details in Everything

20. Sophos Central 2024.21Released on June 3, 2024 Jun 3, 2024 · release notes

    Sophos Switch gains Active Threat Response isolation API and enhanced diagnostics UI

    • Adds Active Threat Response feature to Sophos Central for isolating malicious hosts on switches and AP6 access points
    • Adds Active Threat Response APIs on Sophos Central to enable third-party integrations for swift isolation at the network access layer
    • Adds Take a switch snapshot diagnostic action in Sophos Central to analyze memory and CPUCPUThe main general-purpose processor in a computer. It runs application instructions and coordinates work with memory and other hardware. usage via system commands
    • Adds Restart Sophos Central agent diagnostic action to resolve temporary runtime issues
    • Adds Clear core files diagnostic action to recover disk space from crash events

    +1 more show less

    • Adds RAMRAMWorking memory that holds programs and data while a computer is running. Its contents usually disappear when power is removed. and Flash logs tabs on the Diagnostics page in Sophos Central for viewing switch logs

    6 details in Everything

21. Sophos Central 2024.12Released on March 12, 2024 Mar 12, 2024 · release notes

    Sophos Central adds ARPARPA network protocol that maps IP addresses to MAC addresses on a local Ethernet segment, letting tools resolve layer-3 targets to layer-2 hardware addresses for packet crafting or host discovery., MAC, and Neighbour table viewing and entry creation from the cloud UI

    └──▷ HOW TO FIND IT
    View and manage ARP entries directly from the cloud console without accessing the switch locally.
    📍In the Sophos Central UI, navigate to Switch › ARP table.
    View and manage MAC addressesMAC addressesA hardware-address identifier used on a local network, such as Ethernet or Wi-Fi. It identifies a network interface for delivery on that link, rather than routing across the internet. directly from the cloud console.
    📍In the Sophos Central UI, navigate to Switch › MAC table.
    Monitor neighbor discovery state for connected devices via the cloud interface.
    📍In the Sophos Central UI, navigate to Switch › Neighbour table.
    • Adds ability to view and create entries in the ARP table from Sophos Central.
    • Adds ability to view and create entries in the MAC table from Sophos Central.
    • Adds ability to view the Neighbour table from Sophos Central.

    3 details in Everything

22. Sophos Switch 01.4.1466MR4Released on January 24, 2024 Jan 24, 2024 · release notes

    Adds TACACS+ authentication for local users and 802.1X, STPSTPSpanning Tree Protocol, an IEEE standard (802.1D) that prevents Layer 2 network loops by electing a root bridge and blocking redundant switch paths, keeping Ethernet networks stable under failure conditions. Root/BDU guards, and per-port realtime meters.

    • Configures a TACACS+ server for authentication via the TACACS+ server setting
    • Enables TACACS+ authentication for 802.1X using the 802.1x configuration
    • Applies Root and BDU guards within STP configuration
    • Views per-port statistics using the new realtime meters UI

    4 details in Everything

23. Central Switch 2023.40Released on October 26, 2023 Oct 26, 2023 · release notes

    Sophos Switch 2023.40 enables configuring advanced port settings and Voice VLAN via Sophos Central.

    • Adds configuration of advanced port settings from Sophos Central
    • Adds configuration of Voice VLAN from Sophos Central

    2 details in Everything

24. Central Switch 2023.37Released on September 21, 2023 Sep 21, 2023 · release notes

    Adds configuration backup and restore capabilities from Sophos Central.

    • Enables taking and restoring configuration backups directly from Sophos Central.

    1 detail in Everything

25. Central Switch 2023.27Released on July 10, 2023 Jul 10, 2023 · release notes

    Central Switch now supports full QoS management per switch or site from Sophos Central.

    └──▷ HOW TO FIND IT
    Configure QoS policies for a specific switch via the central console.
    📍In Sophos Central, navigate to Devices › Switches, select your device, and open the QoS management tab to apply settings.
    Apply a site-wide QoS configuration across all switches at a location.
    📍In Sophos Central, go to Network › Switches, select the target site, and configure QoS policies in the central dashboard.
    • Adds full Quality of Service (QoS) management for individual switches or entire sites directly within the Sophos Central interface

    1 detail in Everything

26. Sophos Switch Firmware 01.03.1268MR3Released on April 13, 2023 Apr 13, 2023 · release notes

    Sophos Switch firmware adds MAC Address Bypass (MAB) for 802.1x and integrates Support subscription activation in Sophos Central.

    • Adds MAC Address Bypass (MAB) to extend 802.1x functionality, allowing authentication of connected hosts using their MAC addressMAC addressA hardware-address identifier used on a local network, such as Ethernet or Wi-Fi. It identifies a network interface for delivery on that link, rather than routing across the internet.
    • Integrates Support and Services subscription activation into Sophos Central for seamless management

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Removed support for weak encryption ciphers (3DES-CBC, AES128-CBC, AES258-CBC) for SSH access
27. Sophos Switch Firmware 01.2.191MR2Released on August 29, 2022 Aug 29, 2022 · release notes

    Sophos Switch 01.2.191MR2 adds MAC addressMAC addressA hardware-address identifier used on a local network, such as Ethernet or Wi-Fi. It identifies a network interface for delivery on that link, rather than routing across the internet. filtering, IP source guard, CDPCDPCisco Discovery Protocol, a Cisco-proprietary Layer 2 protocol that advertises device identity, capabilities, and topology between directly connected Cisco gear, giving cyber tools a passive way to map network infrastructure., priority-tag ingress filter, PoE port reset, LAG via Central, and Global UI search

    └──▷ HOW TO FIND IT
    Configure LAG in Sophos Central to combine multiple links for throughput.
    📍In Sophos Central, go to Network › Switches › [Switch Name] › Port Settings and configure Link Aggregation Group (LAG).
    • Adds MAC-Address Filtering (MAF) to block traffic from specific VLAN-MAC combinations (unicast only).
    • Adds IP source guard per-interface traffic filter allowing IP/DHCP packets only when IP and MAC match DHCP snooping or static bindings.
    • Adds support for enabling Cisco Discovery Protocol (CDP) to exchange device information with Cisco/CDP neighbors.
    • Adds priority-tag packet ingress filter to ignore 802.1Q802.1QAn IEEE standard that adds a 4-byte VLAN tag to Ethernet frames, letting a single physical link carry traffic for multiple isolated networks. Cyber tools use it to capture or inject traffic on specific VLANs. frames with VLAN ID zero, defending against VLAN 0 attack packets.
    • Adds PoE Port Reset capability via CLI (power reset command) and configurable 'power reset interval' per port.

    +2 more show less

    • Adds Link Aggregation Group (LAG) configuration support in Sophos Central at site and switch levels.
    • Adds Global UI search in the switch local user interface for faster navigation to configuration pages.

    7 details in Everything