Sophos Access Point LED blink codes explained

The LEDs on a Sophos Access Point are often the quickest indication of whether the device is starting, reaching Sophos Central, registered or currently running a firmware update. Especially during onboarding, the LED status should be checked together with DHCP, DNS, NTP and outbound firewall rules.

AP6 Series, 420, 420E, 840, 840E

For AP6 420, AP6 420E, AP6 840 and AP6 840E, these status signals apply:

• Off: Access Point is switched off or restarting.
• Solid green: Normal operation.
• Flashing green: Access Point is starting and connecting to the Wireless Controller.
• Solid amber: No connection to the Wireless Controller.
• Flashing amber: Access Point is not yet registered with the Wireless Controller.
• Solid red: Error or no Wireless Controller found. If the reset button was pressed, the Access Point is preparing to reset the configuration.
• Flashing red: Configuration is being reset.
• Fast flashing red: Firmware update is running. Note: Do not disconnect the device from power.

The AP6 420X also has additional status, radio and mesh LEDs. In outdoor areas and where country-specific restrictions apply, the radio LED is particularly important because individual radio bands may be restricted depending on the region.

APX Series, APX 120, 320, 530, 740

• Off: Access Point is switched off.
• Flashing green: Restart is in progress or the cloud configuration is being applied.
• Solid green: Normal operation, configuration has been applied.
• Solid amber: On the APX 320, this can indicate that the reset button was pressed for a restart.
• Solid red: Ethernet is not connected, the cloud is unreachable or a reset is being prepared.

The APX 320X has more detailed status signals and is closer to the AP6 outdoor models. If an APX 320X does not come online, check the radio and mesh LEDs as well as the status LED.

How is a reset performed?

A reset should not be the first reflex. If an Access Point cannot reach Sophos Central, first check the Sophos Central Wireless requirements. A factory reset makes sense if an Access Point was registered incorrectly, is being moved from another tenant or cannot reconnect cleanly after a correction.

APX: Restart with current build and configuration

1. Press the reset button for up to 8 seconds.
2. Release the reset button.
3. The LED goes out and then lights green. The AP restarts.

APX: Restart with current build and base configuration

1. Press the reset button for 15-20 seconds.
2. Release the reset button.
3. The AP triggers a restart and starts in factory state.
4. The Access Point must now be registered again with the controller.

AP6: Factory reset

1. Press and hold the reset button.
2. Wait until the status LED lights solid red after a few seconds.
3. Keep holding until the LED flashes red.
4. Release the reset button.
5. Register the Access Point again in Sophos Central after the restart.

Quick classification for onboarding problems

• Flashing green: Device is starting or searching for Sophos Central. Check DHCP, DNS, gateway and internet access.
• Solid or flashing amber: Connection or registration is not yet complete. Check serial number, tenant and Wireless area in Sophos Central.
• Solid red: Check network path, Ethernet, cloud reachability and reset state.
• Fast flashing red: Firmware update is running. Do not risk a power interruption in this state.
• Online, but wrong status in Central: Delete, reset and re-register the Access Point if it was previously registered in another state or tenant.