Skip to content

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/central/customer/help/en-us/index.html?contextId=wireless

Wireless

Configure and manage access points, wireless networks, and connected devices.

Go to My Products > Wireless to configure and manage Sophos Wireless.

Warning

Don't disconnect your access point from the power outlet when the lights blink rapidly. This means that a firmware update is in progress.

This video explains how to plan and set up your wireless network.

Domain requirements

You must allow traffic to specific domains so that access points can communicate with Sophos Central, update the time, and log wireless events. The domains you need to allow depend on whether your firewall or proxy supports wildcards.

Click the appropriate tab for details.

If your firewall or proxy supports wildcards, allow the following domains:

central.sophos.com
*.sophos.pool.ntp.org
sophos.jfrog.io
jfrog-prod-use1-shared-virginia-main.s3.amazonaws.com
wifix-\*.cloudstation.\*.sophos.com

If you can't use wildcards, you must determine the geographic location of your Sophos Central account and allow the specific domains for that location. Do as follows:

  1. Sign in to Sophos Central.
  2. Click your account name, and then click Support settings.

  3. Look for the line that starts with "This account is located in" to see which geographical region your Sophos Central account is in.

    Support settings page showing the geographic region of the Sophos Central account.

  4. Use the following table to find the MCS URL of your Sophos Central account.

    Region MCS URL
    United States (Oregon) us-west-2.prod.hydra.sophos.com
    United States (Ohio) us-east-2.prod.hydra.sophos.com
    Ireland eu-west-1.prod.hydra.sophos.com
    Germany eu-central-1.prod.hydra.sophos.com
    Canada stn100yul.ctr.sophos.com
    Australia stn100syd.ctr.sophos.com
    Asia Pacific (Tokyo) stn100hnd.ctr.sophos.com
    South America (Sao Paulo) stn100gru.ctr.sophos.com
    India stn100bom.ctr.sophos.com

  5. Allow the following domains, replacing <MCS_URL> with your Sophos Central account's MCS URL from the previous step:

    central.sophos.com
0.sophos.pool.ntp.org
jfrog-prod-use1-shared-virginia-main.s3.amazonaws.com
sophos.jfrog.io
wifix-proxy.cloudstation.<MCS_URL>
wifix-push-ws.cloudstation.<MCS_URL>

Network requirements

Access points must be able to communicate with Sophos Central. You must ensure your network meets the following requirements:

  • You must have DHCP and DNS servers to provide an IP address to the access point and answer its DNS requests (IPv4 only).
  • Access points can reach Sophos Central without requiring a VLAN to be configured on the access point for this connection.
  • There's no HTTPS proxy on the communication path.

Note

For remote support, allow outbound SSH connections on port 22.

VLAN requirements

You must add the proper VLANs in the trunk port of the wired switch. The access point always communicates over untagged VLAN. Make sure the native or management VLAN is untagged in the wired switch.