Much More Than a Firewall
Sophos Firewall and XGS Series appliances are at the heart of the world’s best network security platform. Consolidate your network protection with our integrated and extensible platform to secure your hybrid networked world. Unlock supreme desktop performance, improved energy efficiency, and a wealth of new high-speed connectivity options.
Sophos second-generation XGS Series desktop appliances deliver double the performance of our first-generation models while cutting power consumption in half. All these desktop firewalls include 2.5 GE interfaces, allowing traffic to flow freely and without bottlenecks, from your firewall to your 2.5 GE switch to your Wi-Fi 6 access point.
Customers with noise-sensitive environments such as healthcare, education, and retail will love the whisper-quiet operation of the fanless XGS 88 and XGS 108 models. Using the expansion bay, an optional 5G module adds either redundant cellular connectivity or cost-effective 5G fixed wireless access (FWA).
The XGS 88 to XGS 128 models feature a streamlined, single-CPU architecture that utilizes virtual FastPath technology for traffic acceleration (in combination with Sophos Firewall OS v21 and higher). As our gateway model to the distributed edge, the XGS 138 boasts a dedicated Xstream Flow processor for hardware acceleration and two 10 GE SFP+ interfaces for high-speed fiber connectivity. All models except the XGS 138 are optionally available with built-in Wi-Fi.
Product highlights
- All protection features are supported on every XGS 1xx desktop model and most are available on XGS 88 and XGS 88w.
- Accelerated performance: Up to double the throughput of Gen.1 models plus Xstream virtual FastPath acceleration for IPsec VPN (XGS 88 to XGS 128) in combination with SFOS v21 and higher
- High-speed connectivity built in: 2.5 GE interfaces on everymodel,two built-in 10 GE SFP+ interfaces on the XGS 138, and Wi-Fi 6 (802.11ax) integrated on all w-models with concurrent use of the 2.4 and 5 GHz bands for better performance
- Power and environment: Up to 50% lower power consumption, fanless XGS 88 and 108 models for whisper-quiet operation, optimized thermal design for XGS 118 and above, and redundant power option for all XGS 1xx models
- Optional connectivity: New 5G module available exclusively for Gen.2 models for more cost-effective redundant connectivity
- Streamlined hardware architecture: The XGS 88 to XGS 128 models boast a new single-CPU architecture while the XGS 138 has a refreshed dual-processor architecture
Powerful Protection and Performance
Sophos Firewall includes the latest advanced protection technologies and threat intelligence, including:
- Streaming DPI engine with web protection and IPS
- Accelerated TLS 1.3 encrypted traffic inspection
- Zero-day AI and machine learning analysis
- Real-time cloud sandboxing
- DNS Protection
The best part is, you don' t need to compromise on performance. This is thanks to our programmable Xstream architecture. It offloads benign traffic flows and crypto operations as well as VPN and select application routing to accelerate these network traffic flows and create performance headroom for traffic that actually needs deep packet inspection.
Sophos Firewall leverages the Sophos Cloud to ensure that your organization is protected from the latest threats and further maximize your performance. You get the latest AI and machine learning technology from SophosLabs working to identify previously unseen threats and malicious URLs.
Sophos XGS Series Appliances
All XGS Series firewall appliances are built upon a dual-processor architecture, combining a high-performance, multi-core CPU with a dedicated Xstream Flow Processor for targeted acceleration at the hardware level. This gives you all the flexibility and adaptability of an x86 based firewall plus a significant performance boost over legacy firewall designs.
| Model |
Tech Specs |
Throughput |
| XGS 88(w) |
Gen.2 Desktop* |
4/- (4) |
Wi-Fi 6 |
n/a |
9,900 |
6,000 |
2,000 |
600 |
| XGS 108(w) |
Gen.2 Desktop* |
7/-(7) |
Wi-Fi 6 |
Optional: 2nd power supply, 5G module |
12,500 |
8,250 |
2,500 |
800 |
| XGS 118(w) |
Gen.2 Desktop* |
10/1(10) |
Wi-Fi 6 |
Optional: 2nd power supply, 5G module |
15,500 |
13,000 |
3,250 |
1,100 |
| XGS 128(w) |
Gen.2 Desktop* |
10/1(10) |
Wi-Fi 6 |
Optional: 2nd power supply, 5G module |
19,100 |
15,050 |
4,000 |
1,450 |
| XGS 138(w) |
Gen.2 Desktop* |
8/1(8) |
n/a |
Optional: 2nd power supply, 5G module |
19,100 |
6,600 |
4,750 |
1,700 |
| XGS 88(w) |
Gen.1 Desktop |
5/- (5) |
Wi-Fi 5 |
n/a |
3,850 |
3,000 |
850 |
375 |
| XGS 107(w) |
Gen.1 Desktop |
9/- (9) |
Wi-Fi 5 |
Optional: 2nd power supply |
7,000 |
4,000 |
1,110 |
420 |
| XGS 116(w) |
Gen.1 Desktop |
9/1 (9) |
Wi-Fi 5 |
Optional: 2nd power supply, 3G/4G, 5G, Wi-Fi** |
7,700 |
4,800 |
2,160 |
650 |
| XGS 126(w) |
Gen.1 Desktop |
14/1 (14) |
Wi-Fi 5 |
Optional: 2nd power supply, 3G/4G, 5G, Wi-Fi** |
10,500 |
5,500 |
2,700 |
800 |
| XGS 136(w) |
Gen.1 Desktop |
14/1 (14) |
Wi-Fi 5 |
Optional: 2nd power supply, 3G/4G, 5G, Wi-Fi** |
11,500 |
6,350 |
3,000 |
950 |
| XGS 2100 |
1U Short |
10/1 (18) |
n/a |
Optional: external power supply |
30,000 |
17,000 |
5,000 |
1,100 |
| XGS 2300 |
1U Short |
10/1 (18) |
n/a |
Optional: external power supply |
39,000 |
20,500 |
5,550 |
1,450 |
| XGS 3100 |
1U Short |
12/1 (20) |
n/a |
Optional: external power supply |
47,000 |
25,000 |
7,400 |
2,470 |
| XGS 3300 |
1U Short |
12/1 (20) |
n/a |
Optional: external power supply |
58,000 |
31,100 |
10,000 |
3,130 |
| XGS 4300 |
1U Long |
12/2 (28) |
n/a |
Optional: external power supply |
75,000 |
62,500 |
25,200 |
8,000 |
| XGS 4500 |
1U Long |
12/2 (28) |
n/a |
Optional: internal power supply |
80,000 |
75,550 |
31,850 |
10,600 |
| XGS 5500 |
2U |
16/3 (48) |
n/a |
Built in: redundant power, SSDs, fans |
100,000 |
92,500 |
46,000 |
13,500 |
| XGS 6500 |
2U |
20/4 (68) |
n/a |
Built in: redundant power, SSDs, fans |
120,000 |
109,800 |
53,500 |
16,000 |
| XGS 7500 |
2U |
22/4 (70) |
n/a |
Built in: redundant power, SSDs, fans |
160,000 |
117,000 |
70,000 |
19,500 |
| XGS 8500 |
2U |
22/4 (70) |
n/a |
Built in: redundant power, SSDs, fans |
190,000 |
141,000 |
92,500 |
24,000 |
* All Gen.2 Desktop models include two or more 2.5 GE ports
** 2nd Wi-Fi module option for XGS 116w, 126w and 136w only
Performance Test Methodology
- General: Maximum throughput measured under ideal test conditions using industry standard Keysight-Ixia BreakingPoint test tools. Actual performance may vary depending on network conditions and activated services.
- Firewall: Measured using HTTP traffic and 512 KB response size.
- Firewall IMIX: UDP throughput based on a combination of 66 byte, 570 byte and 1518 byte packet sizes.
- IPS: Measured with IPS with HTTP traffic using default IPS ruleset and 512 KB object size.
- IPsec VPN: HTTP throughput using multiple tunnels and 512 KB HTTP response size.
- TLS inspection: Performance measured with IPS with HTTPS sessions and different cipher suites.
- Threat Protection: Measured with Firewall, IPS, Application Control, and malware prevention enabled using HTTP 200 KB response size.
