Network Map

The Sophos Central Network Map shows a unified view of your connected Sophos Firewall, Switches, and AP6 access points. This helps you to visualize the topology of your infrastructure, search for devices, and navigate the relationships between your network devices across your entire account.

The Network Map uses LLDP-based discovery to identify and map the connections between firewalls, switches, and access points in your network. It's also used to discover connected devices.

Requirements

In order for managed devices to appear on the Network Map, they must meet the following requirements:

• LLDP must be turned on for all devices. Without LLDP, the network topology shown may be incorrect or incomplete.

• Devices must have the minimum firmware version listed below.

  • Sophos Firewall: Version 22.0 GA. See Sophos Firewall release notes.
  • Sophos Switch: 2.1.1986 MR2. See Sophos Switch release notes.
  • Sophos AP6 access points: 1.9.2854 MR9. See Sophos AP6 access points release notes.

Network discovery view

The Network discovery view shows the Network Map, an overview of your network devices. You can see icons representing your firewalls, switches, access points, and connected devices. Each icon has a number indicating how many of that type of device are in your network.

Use the search box to search all devices by MAC address, IP address, serial number, or name.

Click Download on any map to download it as a PNG image.

The map doesn't update automatically. You must reload the Network discovery view page.

Your Network Map

Under Your Network Map, you can see tiles for Firewalls, Switches, and Access points that show the total number of each device and how many are online and offline. You can also see a Devices tile that shows the total number of devices connected to your firewalls, switches, and access points, and how many are connected to each.

Network Devices

Clicking the Firewalls, Switches, or Access points icon or tile opens the Network Devices view. This view shows the individual network devices and the connections between them, helping you visualize your network topology.

The information you can see varies by device type.

• Firewalls: Name and IP address
• Switches: Serial number
• Access points: Name

You can arrange the devices on the map by clicking and dragging each device's icon. You can also highlight multiple devices before clicking and dragging to move them without changing their arrangement.

You can click the white space around the icons and drag to see different areas of the map. You can also zoom in and out on the map to make it easier to see your entire deployment.

The connections between devices are drawn automatically based on LLDP neighbor discovery data. However, you may see some of the following inconsistencies, depending on your environment:

• Network loops: The network map draws a connection to the peer device based on LLDP neighbor discovery, even if the port is in a blocking status due to STP.
• Active connections from offline devices: Offline devices may still appear connected due to stale data, and the network map shows their last known status.

Device Details

Clicking a device opens the Device Details page. Here you can see more detailed information about the device and any devices connected to it.

Firewalls

Firewalls show the device's name next to a red icon. Connection information shows whether the device is online or offline, its model, MAC address, and IP address.

Switches

Switches show the serial number next to a green icon. Connection information shows whether the device is online or offline, as well as its model and MAC address. Site information shows the site or stack the switch belongs to and its location. Click the switch's serial number to go to the switch management page. See Switch management.

You can see a representation of the switch ports and the connected devices discovered on those ports. You can click connected access points to see the details for the connected devices on the AP6.

Click the switch to see a list of ports and the names and MAC addresses of the devices connected to them.

Click Manage this switch to go to the switch management page.

Access points

Access points show the name of the device next to a yellow icon. Connection information shows whether the device is online or offline, its model, MAC address, and IP address. Click the access point's name to go to the access point details page. See Access point details.

You can see a representation of the access point and the switch it's connected to, if applicable. The switch port that the access point is connected to is shown on the connection. You can click the connected switch to see the details for that device.

Click the access point to see a detailed list of information for each connected device, including MAC address, host name, username, SSID, IP address, and frequency band.

Click Manage this AP to go to the access point's management page.

Connected devices

Connected devices shows all devices discovered by the firewall, switch, or access point. You can see the MAC address of connected endpoint devices, the serial number of firewalls and switches, and the name of access points. You can click switches and access points to open the Sophos Central page to manage those devices.

Unmanaged devices

The Network Map is currently designed to work with Sophos Firewall, Sophos Switch, and Sophos AP6 access points managed by Sophos Central. All other devices, such as Sophos APX access points, are considered unmanaged devices. These devices are subject to the following restrictions:

• Unmanaged devices connected directly to a Sophos Switch won't appear on the map unless they have endpoint devices connected to them.
• Unmanaged devices aren't identified in the device list. The System name shown is "Device".