FCC ID: 2ACTO-7922DMC 2T2R Wireless 802.11ac/abgn Dual Band Selectable PCIe Module

Regulatory Information Sophos 2x2 WLAN Card Copyright 2017 Sophos Limited. All rights reserved. Sophos is a registered trademark of Sophos Limited and the Sophos Group. All other product and company names mentioned are trademarks or registered trademarks of their respective owners. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording or otherwise unless you are either a valid licensee where the documentation can be reproduced in accordance with the license terms or you otherwise have the prior permission in writing of the copyright owner. Simplified EU Declaration of Conformity Hereby, Sophos Ltd. declares that the radio equipment type 7922DMC is in compliance with Directive 2014/53/EU. The full text of the EU declaration of conformity is available at the following Internet address:

https://community.sophos.com/kb/en-us/117713 Indoor Use Statement Caution: This product operates in the frequency band 5.1805.240 GHz. It is restricted to indoor operation only. Frequency Range and Transmit Power Product 7922DMC Frequency range (MHz) Max. transmit power (dBm) 2412-2472 5180-5240 xx.xx xx.xx Restrictions pursuant to Article 10(10) of Directive 2014/53/EU BE FI LV RO AT EE IT PT BG FR LT SK HR DE LU SI CY EL MT ES CZ HU NL SE DK IE PL UK Federal Communication Commission Interference Statement This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:

Reorient or relocate the receiving antenna. Increase the separation between the equipment and receiver. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help. FCC Caution: Any changes or modifications not expressly approved by the party responsible for compliance could void the user's authority to operate this equipment. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. Radiation Exposure Statement This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. This device is intended only for OEM integrators under the following conditions:

1. The antenna must be installed such that 20 cm is maintained between the antenna and users, and 2. The transmitter module may not be co-located with any other transmitter or antenna. As long as 2 conditions above are met, further transmitter test will not be required. However, the OEM integrator is still responsible for testing their end product for any additional compliance requirements required with this module installed IMPORTANT NOTE: In the event that these conditions cannot be met (for example certain laptop configurations or co-location with another transmitter), then the FCC authorization is no longer considered valid and the FCC ID cannot be used on the final product. In these circumstances, the OEM integrator will be responsible for re-

evaluating the end product (including the transmitter) and obtaining a separate FCC authorization. End Product Labeling This transmitter module is authorized only for use in device where the antenna may be installed such that 20 cm may be maintained between the antenna and users. The final end product must be labeled in a visible area with the following: Contains FCC ID: 2ACTO-7922DMC. The grantee's FCC ID can be used only when all FCC compliance requirements are met. Manual Information To the End User The OEM integrator has to be aware not to provide information to the end user regarding how to install or remove this RF module in the users manual of the end product which integrates this module. The end user manual shall include all required regulatory information/warning as show in this manual. Industry Canada Statements / Avis DIndustrie Canada This device complies with ISEDs licence-exempt RSSs. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. Le prsent appareil est conforme aux CNR d ISED applicables aux appareils radio exempts de licence. Lexploitation est autorise aux deux conditions suivantes : (1) le dispositif ne doit pas produire de brouillage prjudiciable, et (2) ce dispositif doit accepter tout brouillage reu, y compris un brouillage susceptible de provoquer un fonctionnement indsirable. Radiation Exposure Statement This equipment complies with ISED radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20cm between the radiator & your body. Dclaration d'exposition aux radiations Cet quipement est conforme aux limites d'exposition aux rayonnements ISED tablies pour un environnement non contrl. Cet quipement doit tre install et utilis avec un minimum de 20 cm de distance entre la source de rayonnement et votre corps. This device is intended only for OEM integrators under the following conditions: (For module device use) 1. The antenna must be installed such that 20 cm is maintained between the antenna and users, and 2. The transmitter module may not be co-located with any other transmitter or antenna. As long as 2 conditions above are met, further transmitter test will not be required. However, the OEM integrator is still responsible for testing their end-product for any additional compliance requirements required with this module installed. Cet appareil est conu uniquement pour les intgrateurs OEM dans les conditions suivantes: (Pour utilisation de dispositif module) 1. L'antenne doit tre installe de telle sorte qu'une distance de 20 cm est respecte entre l'antenne et les utilisateurs, et 2. Le module metteur peut ne pas tre complant avec un autre metteur ou antenne. Tant que les 2 conditions ci-dessus sont remplies, des essais supplmentaires sur l'metteur ne seront pas ncessaires. Toutefois, l'intgrateur OEM est toujours responsable des essais sur son produit final pour toutes exigences de conformit supplmentaires requis pour ce module install. IMPORTANT NOTE: In the event that these conditions cannot be met (for example certain laptop configurations or co-location with another transmitter), then the Canada authorization is no longer considered valid and the IC ID cannot be used on the final product. In these circumstances, the OEM integrator will be responsible for re-

evaluating the end product (including the transmitter) and obtaining a separate Canada authorization. NOTE IMPORTANTE: Dans le cas o ces conditions ne peuvent tre satisfaites (par exemple pour certaines configurations d'ordinateur portable ou de certaines co-

localisation avec un autre metteur), l'autorisation du Canada n'est plus considr comme valide et l'ID IC ne peut pas tre utilis sur le produit final. Dans ces circonstances, l'intgrateur OEM sera charg de rvaluer le produit final (y compris l'metteur) et l'obtention d'une autorisation distincte au Canada. End Product Labeling This transmitter module is authorized only for use in device where the antenna may be installed such that 20 cm may be maintained between the antenna and users. The final end product must be labeled in a visible area with the following: Contains IC: 20939-

7922DMC. Plaque signaltique du produit final Ce module metteur est autoris uniquement pour une utilisation dans un dispositif o l'antenne peut tre installe de telle sorte qu'une distance de 20cm peut tre maintenue entre l'antenne et les utilisateurs. Le produit final doit tre tiquet dans un endroit visible avec l'inscription suivante: "Contient des IC: 20939-7922DMC". Manual Information To the End User The OEM integrator has to be aware not to provide information to the end user regarding how to install or remove this RF module in the users manual of the end product which integrates this module. The end user manual shall include all required regulatory information/warning as show in this manual. Manuel d'information l'utilisateur final L'intgrateur OEM doit tre conscient de ne pas fournir des informations l'utilisateur final quant la faon d'installer ou de supprimer ce module RF dans le manuel de l'utilisateur du produit final qui intgre ce module. Le manuel de l'utilisateur final doit inclure toutes les informations rglementaires requises et avertissements comme indiqu dans ce manuel. Caution:

(i) the device for operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems;

(ii) the maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the equipment still complies with the e.i.r.p. limits specified for point-to-

point and non-point-to-point operation as appropriate; and

(iii) Users should also be advised that high-power radars are allocated as primary users

(i.e. priority users) of the bands 5650-5850 MHz and that these radars could cause interference and/or damage to LE-LAN devices. Avertissement:

(i) les dispositifs fonctionnant dans la bande 5150-5250 MHz sont rservs uniquement pour une utilisation lintrieur afin de rduire les risques de brouillage prjudiciable aux systmes de satellites mobiles utilisant les mmes canaux;

(ii) le gain maximal d'antenne permis (pour les dispositifs utilisant la bande de 5725 5 850 MHz) doit tre conforme la limite de la p.i.r.e. spcifie pour l'exploitation point point et lexploitation non point point, selon le cas;

(iii) De plus, les utilisateurs devraient aussi tre aviss que les utilisateurs de radars de haute puissance sont dsigns utilisateurs principaux (c.--d., quils ont la priorit) pour les bandes 5650-5850 MHz et que ces radars pourraient causer du brouillage et/ou des dommages aux dispositifs LAN-EL. This page is intentionally left blank. This page is intentionally left blank. This page is intentionally left blank. Contact Sophos Headquarters Sophos Ltd Registered in England number 2096520 The Pentagon, Abingdon Science Park, Abingdon, Oxfordshire OX14 3YP UK Europe, Middle East, Africa Sophos Technology GmbH Amalienbadstrae 41 / Bau 52 76227 Karlsruhe Germany The Americas Sophos Inc. 3 Van de Graaff Drive Burlington, MA 01803 USA Asia Sophos Computer Security Pte. Ltd. 2 Shenton Way SGX Center 1, #17-01 Singapore 068804 Pacific Japan Sophos KK Izumi Garden Tower 10F 1-6-1 Roppongi, Minato-ku, Tokyo, Japan, 106-6010 T: +49 721 255 160 sales@sophos.de T: +1 781 494 5800 nasales@sophos.com T: +65 6224 4168 salesasia@sophos.com T: +81 3 3568 7550 sales@sophos.co.jp DETACHABLE ANTENNA USAGE This radio transmitter (IC:20939-7922DMC / Model: 7922DMC) has been approved by ISED to operate with the antenna type listed below with maximum permissible gain indicated. Antenna types not included in this list, having a gain greater than the maximum gain indicated for that type, are strictly prohibited for use with this device. Le prsent metteur radio (IC:20939-7922DMC / Model: 7922DMC) a t approuv par ISED pour fonctionner avec les types d'antenne numrs ci-dessous et ayant un gain admissible maximal. Les types d'antenne non inclus dans cette liste, et dont le gain est suprieur au gain maximal indiqu, sont strictement interdits pour l'exploitation de l'metteur. Approved antenna(s) list Type Dipole Gain Brand Manufacturer See below table Sophos Sophos

WARNING:pdfminer.pdfpage:The PDF <_io.BufferedReader name='/Volumes/Scratch/Incoming/eg-scratch/6146865.pdf'> contains a metadata field indicating that it should not allow text extraction. Ignoring this field and proceeding. Use the check_extractable if you want to raise an error in this case Quick Start Guide XGS 116(w)/126(w)/136(w) For more information about your appliance, scan the QR code or visit www.sophos.com/get-started-firewall ENGLISH Before you begin, please confirm that you have a working Internet connection and make sure you have the account information available that was provided by your ISP. 1. Before Deploying Congratulations on the purchase of your Sophos XGS appliance. This Quick Start Guide describes in short steps how to connect your appliance and explains how to open the web-based Admin Console from your administration PC. The Admin Console allows you to configure every aspect of the appliance. a) What is included in the box XGS 116(w)/126(w)/136(w) This Quick Start Guide and Safety Instructions 3 antennas

(XGS 126w/136w model, 2 on XGS 116w model) Power Adapter Micro USB cable RJ45 Ethernet cable Power cable Quick Start Guide XGS 116(w)/126(w)/136(w) 1 ENGLISH b) Appliance images: front and back XGS 116(w) 1 x USB 2.0 XGS 126(w)/136(w) Status LEDs

(w-model has additional WiFi LED) 1 x USB 2.0 Status LEDs

(w-model has additional WiFi LED) 1 x COM Micro USB 2 x external antenna

(XGS 116w only) 1 x COM Micro USB 3 x external antenna

(XGS 126w/136w only) 1 x COM

(RJ45) F1 1 x SFP fiber port 1 x GbE copper port Optional module expansion bay 1 x COM

(RJ45) F1F2 2 x SFP fiber ports Optional module expansion bay Power supply 1 x USB 3.0 6 x GbE copper port 1 x GbE PoE port Power supply 1 x USB 3.0 10 x GbE copper port 2 x 2.5 GbE PoE port (136(w)) 2 x GbE PoE port (126(w)) Connector for optional 2nd redundant power supply Connector for optional 2nd redundant power supply 2 Quick Start Guide XGS 116(w)/126(w)/136(w) ENGLISH Type RJ45 Speed 10/100/1000 Mbps RJ45 100/1000 Mbps Comment Port 8 on XGS 116(w) can be used to power a connected device (e.g. access point, IP camera, or IP Phone) via PoE with upto 30W (PoE 802.3at). RJ45 XGS 126(w):

100/1000 Mbps Both ports can be used to power a connected device (e.g. access point, IP camera, or IP Phone) via PoE with upto 30W (PoE 802.3at) each. XGS 136(w):

100/1000/2500 Mbps 1 Gbps 1 Gbps SFP transceivers are sold separately. SFP transceivers are sold separately. Comment You can connect a serial console to the Micro USB or RJ45 COM port to access the CLI. Only one port can be used at any time. If both ports are connected, then the Micro USB port will take precedence. The required connection settings are:

Bits per second: 38,400 Data bits: 8 Parity: N (none) Stop bits: 1 You can connect a USB 2.0 and/or 3.0 compatible device to these ports (e.g. USB thumb drive, UPS, 3G/4G dongles). Press and hold for >10 seconds to reset the unit to factory default settings. All configuration, reports and patterns will be flushed. Interfaces LAN Ports 18 910

(XGS 126(w)/136(w) only) 1112

(XGS 126(w)/136(w) only) F1 F2

(XGS 126(w)/136(w) only) Other Ports COM USB Reset Expansion Bay Cellular Module WiFi Module SFP SFP Type Micro USB [front]

RJ45 [back]

USB 2.0 [Type A] [front]

USB 3.0 (Type A) [back]

Button Comment Can be used for Sophos XGS 3G/4G or 4G/5G Module, which is optionally available from your Sophos partner. Can be used for Sophos XGS WiFi Module, which is optionally available from your Sophos partner. Quick Start Guide XGS 116(w)/126(w)/136(w) 3 ENGLISH 2. Mount and Connect the Appliance Mount the antennas (for wireless models only) Connect the provided antennas to the connectors on the back of your appliance and align them in a vertical position. Connect the ports to the internal and external networks 1. Connect the port 1/LAN via a switch to the internal network. For this purpose, use the RJ45 Ethernet cable provided. Note that your Administration PC must also be connected to this network. 2. Connect Port 2/WAN to the external network. The connection to the WAN depends on the type of Internet access. XGS appliances are shipped with the following default settings:

Ethernet Port 1/LAN 2/WAN IP Address 172.16.16.16/255.255.255.0 DHCP Zone LAN WAN Admin Console Username Admin Console Password CLI Console Password admin Default Gateway DHCP admin DNS DHCP admin DHCP Service Enabled Mount the appliance to the rack If you want to mount the device within a rack please use the optionally available rackmount kit for this device. 4 Quick Start Guide XGS 116(w)/126(w)/136(w) 3. Power Up the Appliance Connect the power cable and turn on the appliance Connect the appliance to the power supply using the power cable(s). Turn the appliance on. The power switch is on the back of the appliance near the power connection. During boot up the Status LED on the front will blink green. Once the device has booted completely the Status LED will turn to solid green. 4. Connect Your Administration PC Administration PC connection properties:

Use the settings below to configure your (PC/laptop) network interface:

IP address: 172.16.16.2 Netmask: Enter 255.255.255.0 Default Gateway: Enter the IP address of the appliances internal network card (Port1/LAN): 172.16.16.16 DNS Server: Enable this option and enter the IP address of the internal network card (Port1/LAN): 172.16.16.16 Connect your PC/laptop to Port 1/LAN of the appliance:

Start the browser and enter the IP address of the appliances LAN port that your PC is connected to:

https://172.16.16.16:4444 Login with the default details below:

Username: admin Password: admin ENGLISH Internet e.g., DSL modem 2/WAN XGS Appliance 1/LAN Switch Internal network admin client PC Quick Start Guide XGS 116(w)/126(w)/136(w) 5 ENGLISH 5. Set Up the Appliance a) Start network configuration Select Click to begin on the Welcome screen to start your basic appliance configuration. Change the interface IP addresses, default gateway, DNS settings and date/time zone to match your local network settings. b) Register the appliance If you have not previously registered your appliance on MySophos, you will see the registration screen Register Your Firewall. The appliance requires Internet connectivity for it to be registered with MySophos. If you want to register later, click the check box I do not want to register now and proceed with section c). If you have a serial number provided on your License Schedule please enter it into the first field and click I have an existing serial number, otherwise click I dont have a serial number (Start a Trial). If you are upgrading from an existing UTM/SG appliance and want to migrate your existing UTM license to your new firewall, click the respective button on the screen and browse for your UTM license to upload it to your firewall. After clicking Continue, you will be redirected to the MySophos portal. If you already have a MySophos account, enter your login credentials under Log in to MySophos. If you are a new user, sign up for a MySophos account by entering the details under Register for MySophos. Click Continue to complete the registration process. Please wait while the process completes it will take a few seconds. After successful registration, you will see a screen with the message, Your device is now registered. Please note that you should proceed with the next step, i.e. Synchronize License only after the appliance is successfully registered. c) Synchronize license Click Initiate License Synchronization to get the license information from Sophos onto the appliance. After synchronization, you will see a screen with the message, Synchronization with server was successful. 6 Quick Start Guide XGS 116(w)/126(w)/136(w) ENGLISH 6. Connecting PoE Powered Devices Ports 8 (on XGS 116(w) and 11/12 (on XGS 126(w)/136(w) are able to provide power over Ethernet (PoE) to a connected PoE device which conforms to the standards 802.3af (max. 15.4W) or 802.3at (max. 30W). Each port can provide up to 30 watts max. Please note: If a high performance expansion module is used in a XGS 126(w) or XGS 136(w) module slot then the max. power of one PoE port will be limited to 15.4 watts. Please visit www.sophos.com/en-us/support or contact your local Sophos reseller for more information about high performance expansion modules. 7. Appliance LED codes LEDs on each RJ45 Ethernet Connector ACT/LNK

(Left LED) Green Solid Speed

(Right LED) Amber Green Flashing Off On On Off 1. The Ethernet port has established link. 2. Good connection between the Ethernet port and hub. The adapter is sending or receiving network data. 1. The adapter and switch are not receiving power. 2. No connection between both ends of network. 3. Network drivers have not been loaded or do not function correctly. If Ethernet port is operating at 1000 Mbps. If Ethernet port is operating at 100 Mbps. If Ethernet port is operating at 10 Mbps. Quick Start Guide XGS 116(w)/126(w)/136(w) 7 ENGLISH LEDs on each SFP Connector ACT/LNK Green Solid Flashing Off Flashing Solid Flashing Solid Flashing On Off Solid Solid Solid Solid LEDs (Front) Storage Status WiFi Power 1 Power 2 Blue Green Red Green Green Red Green Red 1. The SFP connector is receiving power. 2. Good connection between the SFP port and hub. The adapter is sending or receiving network data. 1. The adapter and switch are not receiving power. 2. No connection between both ends of network. 3. Network drivers have not been loaded or do not function correctly. SSD is being accessed. Normal operation. Device is booting up or shutting down. SSD or boot failure. General error (please contact support). WiFi is active. WiFi is inactive. Power adapter 1 in normal operation. Power adapter 1 failed or disconnected. Power adapter 2 in normal operation. Power adapter 2 failed or disconnected. 8 Quick Start Guide XGS 116(w)/126(w)/136(w) ENGLISH PoE LEDs (Front) PoE1 Green Solid PoE1 providing power to connected device. Blinking fast*

PoE1 has an internal hardware failure. Blinking slowly**

PoE1 is denied power (e.g. connected device requesting power above max. power capacity) or is detecting a fault on connected device. PoE2 Green Off Solid PoE1 not providing power to connected device. PoE2 providing power to connected device. Blinking fast*

PoE2 has an internal hardware failure. Blinking slowly**

PoE2 is denied power (e.g. connected device requesting power above max. power capacity) or is detecting a fault on connected device. Off PoE2 not providing power to connected device. 8. Support and Documentation For more information and technical support, please visit www.sophos.com/en-us/support or contact your local Sophos reseller. Check our Getting Started resources to find out how you can get the most out of your purchase www.sophos.com/get-started-firewall Quick Start Guide XGS 116(w)/126(w)/136(w) 9

* The blinking behavior is an on/off cycle approx. once every 0.3 seconds.

** The blinking behavior is an on/off cycle approx. once every 2.5 seconds. Quick Start Guide XGS 116(w)/126(w)/136(w) United Kingdom Sales Tel.: +44 (0)8447 671131 Email: sales@sophos.com North American Sales Toll Free: 1-866-866-2802 Email: nasales@sophos.com Sales DACH

(Deutschland, sterreich, Schweiz) Tel.: +49 (0) 611 585 8-0 Tel.: +49 (0) 721 255 16-0 E-Mail: sales@sophos.de Australia and New Zealand Sales Tel.: +61 2 9409 9100 Email: sales@sophos.com.au Japan Sales Tel.: +81 3 3568 7550 Email: sales@sophos.co.jp China Sales Tel.: +86-10-6567 5820 Email: sales@sophos.co.jp Shanghai Sales Tel.: +86-21-32517160 Email: sales@sophos.co.jp Copyright 2022. Sophos Ltd. All rights reserved. Registered in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UK Sophos is the registered trademark of Sophos Ltd. All other product and company names mentioned are trademarks or registered trademarks of their respective owners. 2022-14-08 QSG [PC]

WARNING:pdfminer.pdfpage:The PDF <_io.BufferedReader name='/Volumes/Scratch/Incoming/eg-scratch/6146864.pdf'> contains a metadata field indicating that it should not allow text extraction. Ignoring this field and proceeding. Use the check_extractable if you want to raise an error in this case Safety Instructions and Regulatory Compliance XGS Series Wireless Desktops ENGLISH Safety Instructions You can operate the appliance safely if you follow the information in these Safety Instructions and on the appliance:

Do not reach into the appliance. There are dangerous circuits inside the appliance that can cause death if you touch them. Damaged appliances must be returned. It is forbidden to open the hardware appliance or to change its components. Failure to comply with this rule results in the loss of warranty cover from Sophos. Connect the device to a power socket with an earth conductor. Defective earth conductor connections do not comply with the requirements for safety and electromagnetic compatibility. Check the power socket before connecting the hardware appliance. Before you switch on the appliance make sure that your mains voltage complies with the supply voltage of the appliance. The connection data are shown on the name plate. To disconnect the appliance completely take the power cable from the power socket. Make sure that the power plug is freely accessible. Make sure that no one can trip over the power cable and that it cannot be damaged by objects. Only connect system peripherals complying with the requirements for protective extra-low voltage according to EN/IEC 62368-1. Only use parts and accessories validated by Sophos. Using non-approved parts and accessories may affect the functioning of the appliance and your safety. The appliance produces heat. Ensure that there is sufficient air circulation to remove the heat. Avoid a permanent high level of air humidity and formation of condensation. Protect the appliance from humidity and chemicals. Safe use of the appliance is no longer possible if:

the chassis is damaged water penetrated the appliance objects entered the appliance via air opening 1 Safety Instructions and Regulatory Compliance Sophos XGS Series Wireless Desktops ENGLISH smoke comes out of the appliance the power cable is damaged it does not work properly Immediately turn off the appliance in the event of one of the above problems, remove the power cable from the power socket and contact your customer service as soon as possible. We expressly exclude any product liability and warranty claims if the appliance is not operated according to the instructions in these Safety Instructions and to the notes attached to the appliance itself. This product is intended to be supplied by a UL approved built-in power supply or an external DC power adapter. To reduce potential safety issues and if you need further assistance with purchasing the external DC power adapter, please contact Sophos Ltd. This equipment is not suitable for use in locations where children are likely to be present. Never open the equipment. For safety reasons, the equipment should be opened only by qualified skilled personnel. Suitable for installation in Information Technology Rooms in accordance with Article 645 of the National Electrical Code and NFPA 75. California Proposition 65 Warning WARNING: Cancer and Reproductive Harm www.P65Warnings.ca.gov This product contains components that can cause exposure to substances known to the State of California to cause cancer and/or reproductive harm. Lithium Battery Warning CAUTION: Risk of explosion if battery is replaced by an incorrect type. Dispose of used batteries according to the instructions. Safety Instructions and Regulatory Compliance Sophos XGS Series Wireless Desktops 2 ENGLISH Optical Fiber Warning Before using optical fiber for transferring data, make sure you have connected an approved optical transceiver module. Always install appropriate and UL approved laser class I transceivers, rated 3.3Vdc, max. 1W, prior to using the fiber ports. Rack Mount Instructions The following or similar rackmount instructions are included with the installation instructions:

1. Elevated Operating Ambient If installed in a closed or multi-unit rack assembly, the operating ambient temperature of the rack environment may be greater than room ambient. Therefore, consideration should be given to installing the equipment in an environment compatible with the maximum ambient temperature (Tma) specified by the manufacturer. 2. Reduced Air Flow Installation of the equipment in a rack should be such that the amount of air flow required for safe operation of the equipment is not compromised. 3. Mechanical Loading Mounting of the equipment in the rack should be such that a hazardous condition is not achieved due to uneven mechanical loading. 4. Circuit Overloading Consideration should be given to the connection of the equipment to the supply circuit and the effect that overloading of the circuits might have on overcurrent protection and supply wiring. Appropriate consideration of equipment nameplate ratings should be used when addressing this concern. 5. Reliable Earthing Reliable earthing of rack-mounted equipment should be maintained. Particular attention should be given to supply connections other than direct connections to the branch circuit, (e.g. use of power strips). Equipment Markings The product label is located on the bottom of the appliance. 3 Safety Instructions and Regulatory Compliance Sophos XGS Series Wireless Desktops ENGLISH Regulatory Compliance CE Marking Simplified EU Declaration of Conformity Hereby, Sophos Ltd. declares that the radio equipment type XGS 87w, XGS 107w, XGS 116w, XGS 126w, and XGS 136w are in compliance with Directive 2014/53/EU. The full text of the EU declaration of conformity is available at the following Internet address:

https://docs.sophos.com/nsg/other/RegulatoryCompliance/en-us/index.html Indoor Use Statement CAUTION: The products XGS 87w, XGS 107w, XGS 116w, XGS 126w, and XGS 136w operate in the frequency bands 5.1505.250GHz. These products are restricted to indoor operation only. Frequency Range and Transmit Power PRODUCT XGS 87w XGS 107w XGS 116w XGS 126w XGS 136w FREQUENCY RANGE (GHZ) MAX. TRANSMIT POWER (DBM) 2.400-2.4835 5.150-5.250 2.400-2.4835 5.150-5.250 2.400-2.4835 5.150-5.250 2.400-2.4835 5.150-5.250 2.400-2.4835 5.150-5.250 19.91 22.72 19.91 22.72 19.63 21.63 19.38 21.32 19.38 21.32 MPE Statement CAUTION: This product complies with maximum permissible exposure limits as set forth by the European Norm EN 62311. The Sophos appliances should be installed and operated with minimum distance of 20cm between the radiator and your body. Safety Instructions and Regulatory Compliance Sophos XGS Series Wireless Desktops 4 ENGLISH Member states with restrictions pursuant to Article 10(10) of Directive 2014/53/EU Manufacturers Federal Communication Commission (FCC) Statements CFR Title 47 Part 15 Subpart AGeneral 15.21 Statement Changes or modifications made to this equipment not expressly approved by Sophos may void the FCC authorization to operate this equipment. CFR Title 47 Part 15 Subpart BUnintentional Radiators 15.105 Statement This product has been tested and found to comply with the limits for a Class A digital device pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This product generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the manufacturers instruction manual, may cause harmful interference with radio communications. Operation of this product in a residential area is likely to cause harmful interference, in which case you will be required to correct the interference at your own expense. This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions:

1. This device may not cause harmful interference. 2. This device must accept any interference received, including interference that may cause undesired operation. 5 Safety Instructions and Regulatory Compliance Sophos XGS Series Wireless Desktops ENGLISH Increase the separation between the equipment and receiver. The products XGS 87w, XGS 107w, XGS 116w, XGS 126w, and XGS 136w operate in the frequency bands These limits are designed to provide reasonable protection against harmful interference in a non-residential installation. However, there is no guarantee that interference will not occur in a particular installation. If this equipment does cause harmful interference with radio or television reception, which can be determined by turning the equipment off and on, you are encouraged to try to correct the interference by one or more of the following measures:

Reorient or relocate the receiving antenna. Connect the equipment into an outlet on a circuit different from that to which the receiver is connected. Consult the dealer or an experienced radio/TV technician for help. Indoor Use Statement CAUTION:

5.1505.250GHz. These products are restricted to indoor operation only. FCC Radiation Exposure Statement This equipment complies with FCC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20 cm between the radiator and your body. This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter. IEEE 802.11b or 802.11g operation of this product in the USA is firmware-limited to channels 1 through 11. Industry Canada Statements This device complies with RSS-247 of the Industry Canada Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. (3) this device subject to this section shall not be capable of transmitting in the band 5600-5650 MHz. This restriction is for the protection of Environment Canadas weather radars operating in this band. Ce dispositif est conforme la norme CNR-247 dIndustrie Canada applicable aux appareils radio exempts de licence. Son fonctionnement est sujet aux deux conditions suivantes: (1) le dispositif ne doit pas produire de brouillage prjudiciable, et (2) ce dispositif doit accepter tout brouillage reu, y compris un brouillage susceptible de provoquer un fonctionnement indsirable. (3) Ce dispositif soumis au prsent article ne doit pas pouvoir mettre dans la bande 5600-5650 MHz. Cette restriction vise la protection des radars mtorologiques dEnvironnement Canada qui fonctionnent dans cette bande. Safety Instructions and Regulatory Compliance Sophos XGS Series Wireless Desktops 6 ENGLISH For product available in the USA/Canada market, only channel 1~11 can be operated. Selection of other channels is not possible. Pour les produits disponibles aux tats-Unis / Canada du march, seul le canal 1 11 peuvent tre exploits. Slection dautres canaux nest pas possible. This device and its antenna(s) must not be co-located or operating in conjunction with any other antenna or transmitter except in accordance with IC multi-transmitter product procedures. Cet appareil et son antenne (s) ne doit pas tre co-localiss ou fonctionnement en association avec une autre antenne ou transmetteur. Dynamic Frequency Selection (DFS) for devices operating in the bands 5250- 5350 MHz, 5470-5600 MHz and 5650-

5725 MHz. Slection dynamique de frquences (DFS) pour les dispositifs fonctionnant dans les bandes 5250-5350 MHz, 5470-

5600 MHz et 5650-5725 MHz. Industry Canada Caution

(i) the device for operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems;

(ii) high-power radars are allocated as primary users (i.e. priority users) of the bands 5250-5350 MHz and 5650-5850 MHz and that these radars could cause interference and/or damage to LE-LAN devices. Avertissement :

(i) les dispositifs fonctionnant dans la bande 5 150-5 250 MHz sont rservs uniquement pour une utilisation lintrieur afin de rduire les risques de brouillage prjudiciable aux systmes de satellites mobiles utilisant les mmes canaux;

(ii) De plus, les utilisateurs devraient aussi tre aviss que les utilisateurs de radars de haute puissance sont dsigns utilisateurs principaux (c.--d., quils ont la priorit) pour les bandes 5 250-5 350 MHz et 5 650-5 850 MHz et que ces radars pourraient causer du brouillage et/ou des dommages aux dispositifs LAN-EL. 7 Safety Instructions and Regulatory Compliance Sophos XGS Series Wireless Desktops Industry Canada Radiation Exposure Statement This equipment complies with IC radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with minimum distance 20 cm between the radiator & your body. Dclaration dexposition aux radiations :

Cet quipement est conforme aux limites dexposition aux rayonnements IC tablies pour un environnement non contrl. Cet quipement doit tre install et utilis avec un minimum de 20 cm de distance entre la source de rayonnement et votre corps. ENGLISH Safety Instructions and Regulatory Compliance Sophos XGS Series Wireless Desktops 8 United Kingdom Sales Tel.: +44 (0)8447 671131 Email: sales@sophos.com North American Sales Toll Free: 1-866-866-2802 Email: nasales@sophos.com Sales DACH

(Deutschland, sterreich, Schweiz) Tel.: +49 (0) 611 585 8-0 Tel.: +49 (0) 721 255 16-0 E-Mail: sales@sophos.de Australia and New Zealand Sales Tel.: +61 2 9409 9100 Email: sales@sophos.com.au Japan Sales Tel.: +81 3 3568 7550 Email: sales@sophos.co.jp China Sales Tel.: +86-10-6567 5820 Email: sales@sophos.co.jp Shanghai Sales Tel.: +86-21-32517160 Email: sales@sophos.co.jp Copyright 2021. Sophos Ltd. All rights reserved. Registered in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UK Sophos is the registered trademark of Sophos Ltd. All other product and company names mentioned are trademarks or registered trademarks of their respective owners. 2021-01-20 (DD) Safety Instructions and Regulatory Compliance Sophos XGS Series Wireless DesktopsUnited Kingdom SalesTel.: +44 (0)8447 671131Email: sales@sophos.comNorth American SalesToll Free: 1-866-866-2802Email: nasales@sophos.comAustralia and New Zealand SalesTel.: +61 2 9409 9100Email: sales@sophos.com.auSales DACH(Deutschland, sterreich, Schweiz) Tel.: +49 (0) 611 585 8-0Tel.: +49 (0) 721 255 16-0 E-Mail: sales@sophos.deJapan SalesTel.: +81 3 3568 7550 Email: sales@sophos.co.jpChina SalesTel.: +86-10-6567 5820 Email: sales@sophos.co.jpShanghai SalesTel.: +86-21-32517160 Email: sales@sophos.co.jp

WARNING:pdfminer.pdfpage:The PDF <_io.BufferedReader name='/Volumes/Scratch/Incoming/eg-scratch/6146871.pdf'> contains a metadata field indicating that it should not allow text extraction. Ignoring this field and proceeding. Use the check_extractable if you want to raise an error in this case

WARNING:pdfminer.pdfpage:The PDF <_io.BufferedReader name='/Volumes/Scratch/Incoming/eg-scratch/6148603.pdf'> contains a metadata field indicating that it should not allow text extraction. Ignoring this field and proceeding. Use the check_extractable if you want to raise an error in this case