Network management device Sophos SD-RED 20

The Sophos SD-RED 20 is a wired network management device designed to extend secure network connectivity to remote locations and branch offices. It delivers a firewall throughput of 250 Mbit/s, supports Ethernet LAN speeds of 10/100/1000 Mbit/s, and uses 256-bit AES encryption. The unit is CE, FCC and IC certified and is intended for use with Sophos firewalls to simplify remote site onboarding and management.

Advantages

The device provides a simple and centralized method to connect remote sites without relying on costly MPLS circuits. It integrates with Sophos firewall products to enable SD-WAN features and enhanced security like Intercept X. Compliance with common international certifications and support for standard Ethernet rates ensure interoperability and predictable performance. Compact, wired design and hardware-based AES-256 encryption provide a secure, low-maintenance option for distributed networks.

Suitable for

• Small branch offices and retail locations
• Remote workers or satellite sites requiring secure WAN connectivity
• Organizations replacing MPLS with SD-WAN managed by Sophos firewalls
• Environments needing hardware-based encryption and standard Ethernet support

Key specifications

• Firewall throughput: 250 Mbit/s
• Ethernet LAN speeds: 10/100/1000 Mbit/s
• Security: 256-bit AES encryption
• Certifications: CE, FCC, IC
• Weight: 0.9 kg
• Brand: Sophos, Model: SD-RED 20 (MPN: R20ZTCHMR, EAN: 5054074006401)

How to use

Install the SD-RED 20 at the remote site and connect its LAN port to the local network switch or router. Link the device to the central Sophos firewall management (XG Firewall or compatible Sophos management) following the vendor’s provisioning steps so the remote unit registers and receives configuration from the central console. Monitor status and update policies from the central management interface to ensure consistent security and SD-WAN routing across sites.

Recommendations

Use the SD-RED 20 as part of a managed Sophos deployment; ensure firmware and central firewall definitions are kept up to date, and prefer wired connections at the remote site for stable throughput and security.