6. Set Up Bypass Mode
Your XGS appliance can go into LAN Bypass Mode (Hardware Bypass Mode) in case of a power failure
or hardware malfunction. In Bypass Mode, the firewall allows all traffic to pass through without any
scanning. In this mode, one or two pairs of interfaces are bridged allowing uninterrupted traffic flow.
Your XGS appliance comes with two pairs of bypass ports as shown on the picture to the right.
After a power failure, the firewall automatically resumes normal functionality when power is restored. In
case of a hardware failure, please contact
By default, LAN Bypass Mode is disabled on your XGS appliance. You can enable/disable LAN Bypass
Mode by following the steps given below.
1. Log in to the CLI Console via Telnet or SSH.
2. Choose 'Option 4. Device Console' and press 'Enter'.
3. View the LAN Bypass Mode status by executing the following command:
console> show lanbypass
4. Enable or disable Bypass Mode by executing the following command:
console> set lanbypass <on/off>
The LED on the front panel of the appliance (see picture to the right) turns on when Bypass Mode is
enabled for the specific port pair.
Please note: Within initial SFOS releases Bypass Mode can only be enabled/disabled for all Bypass ports/
pairs at once (LEDs for all available bypass pairs will turn ON/OFF synchronously).
Enabling/disabling Bypass Mode for each bypass port pair individually will be added in a future SFOS
release. Please check the KBA at
information.
Quick Start Guide
XGS 4300/4500
Sophos
Support.
https:/ /community.sophos.com/kb/en-us/127014
Bypass pair 1
for further
ENGLISH
Bypass pair 2
(ports 1/2)
(ports 3/4)
Bypass LEDs –
Bypass ports 1/2
Bypass ports 3/4
7