Skip to content
Click here to open the documentation of locally-managed switches, including the CLI and API guides.

Site management

Configure site templates to be applied to switches deployed in the same location.

The site management page gives an overview of the switches deployed with a specific site template and allows you to make changes to the site configuration. To manage a site, click the name of the site template in Switch Overview.

The summary section shows the following information about your switches:

  • The number of switches deployed with the site template.
  • The number of switches that are pending synchronization with Sophos Central.
  • The number of switches that have failed to synchronize with Sophos Central.

Switch management summary.

Next to the summary section is an overview of the port configuration for the site. This image shows a fifty-two port switch. Switches with fewer ports will only have settings deployed that correspond to the ports they have.

Site management ports overview.

You can configure the following settings for the site template:

  • Site details.
  • VLANs.
  • Port settings.

You can also view the task queue for your switches that have been assigned to the site.

Site details

You can do the following actions:

  • Configure a name for the site.
  • Add the location of the site.
  • Add a description of the site.
  • Save the site settings.
  • Delete the site.

Site details.


On the VLANs page, you can add, delete and edit the VLANs assigned to switches deployed with the site template.

To add a VLAN, do as follows:

  1. Click Add VLAN.
  2. In the Add VLAN dialog, enter the VLAN information and click Save.

You must enter the information shown in the following table.

Option Description
Name Enter a name for the VLAN.
VLAN ID Enter the VLAN ID. This must be a number from 2 to 4094.
Color Select a color to be displayed in the admin console for the VLAN. This is only a visual guide and doesn't affect the VLAN function.
Description Enter a description for the VLAN.
Untagged ports From the drop-down menu, select which ports are untagged. These ports will only allow traffic to pass from the single VLAN.
Tagged ports From the drop-down menu, select which ports will be tagged. These ports are trunk ports and allow traffic from multiple VLANs to pass through a single port.


All untagged ports use the default VLAN ID. To allow traffic from other VLANs ports must be tagged.

Add VLAN window.

Port settings

You can configure individual switch ports. You can also review the information for each port.

The following information and configuration options are described in the table below.

Option Description
Port Shows the port number.
Label Shows the label, if any, that you've assigned to the port.
Flow control

Shows the current flow control status of the port. The status can be:

  • Enabled: Flow control is turned on
  • Disabled: Flow control is turned off
  • Not set: Flow control status hasn't been configured.
Speed / Duplex

Show the current speed and duplex setting of the port.

  • Auto: The speed and duplex settings are automatically negotiated between connected ports
  • 10M / Half: Ten megabit, half-duplex
  • 10m / Full: Ten megabit, full-duplex
  • 100M / Half: One hundred megabit, half-duplex
  • 100M / Full: One hundred megabit, full-duplex
  • 1G / Full: One gigabit, full-duplex.
  • Disabled: The port is turned off
  • Not set: The port hasn't been configured.
Untagged VLAN Shows the untagged VLAN assigned to the port. You can only assign one untagged VLAN to a single port.
Tagged VLAN Shows the tagged VLANs assigned to the port. Multiple tagged VLANs can be assigned to a single port.
Configuration source Shows how the port was configured. You can configure a port using a site template or manually.

Task queue

The task queue shows an overview of actions, and their status, that have been carried out on switches deployed with the site template. You can also synchronize settings between Sophos Central and the switch.

Task queue.

The task queue table shows the following information.

Information Description

Shows the status of the task. The status can be:

  • Registering: Waiting to connect
  • Connected: Connected
  • Registered: Registered
  • Unregistered: Registration timed out.
  • Disconnected: Disconnected for X amount of time
  • Synchronized: Synchronized.
  • Waiting: A task is waiting to be completed. Click Skip to skip a waiting task
  • Pending: Tasks pending
  • Syncing: Synchronizing
  • Out of sync: Error needs attention
  • Suspended: Firmware is out of date and needs to be updated.
Switch Shows the serial number of the switch that the task is created for.
Site Shows the site of the switch.
Entity Shows the switch module that the task relates to. For example, synchronization, firmware, and remote support.
Action The action that the task performs. For example, turning on or turning off firmware updates or remote support.
Created at Shows the date and time the task was created.