Wavy Abstract Background
Sophos_logo_edited.png

FIREWALL

Powerful Protection and Performance

Powerful Protection at Every Price Point

Sophos Firewall and the XGS Series deliver the industry’s best visibility, protection, and performance. From the small branch office to the distributed enterprise, no compromise protection is guaranteed.

Powered by Xstream

Sophos XGS Series firewalls combine the best of two worlds: the flexibility of a high-performance, multi-core CPU for deep-packet inspection, plus the performance benefits of a dedicated Xstream Flow Processor for intelligent application acceleration.

We’ve Got the Edge

Sophos Firewall can take your network anywhere it needs to go with an extensive range of modular hardware appliances, cloud and virtual platform support, and secure access edge devices like our SD-RED and APX wireless access points.

XGS Models for SMB and Branch Office

XGS 107.png

XGS 107 / 107w

Performance

FIREWALL
7,000 Mbps

FIREWALL IMIX
2,900 Mbps

IPSEC VPN
900 Mbps

THREAT
PROTECTION

330 Mbps

TLS INSPECTION
420 Mbps

IPS
1,355 Mbps

NGFW
1,050 Mbps

LATENCY
(64 BYTE UDP)

6 µs

Connectivity

ETHERNET INTERFACES (FIXED)

8 X GE copper
1 X SFP Fiber*

POWER-OVER-ETHERNET (FIXED)

n/a

MANAGEMENT INTERFACES

1 x COM RJ45
1 x COM Micro-USB

OTHER I/O INTERFACES
1 x USB 2.0 (front)
1 x USB 3.0 (rear)

 

WI-FI OPTION (W-MODEL ONLY)
Wi-Fi 5 (802.11ac)
2X2:2 MIMO
2 external antennas
single radio, 2.4 or 5 GHz

Modularity

EXPANSION SLOTS

n/a

OPTIONAL ADD-ON MODULES

SFP VDSL modem
SFP transceivers

Redundancy

SWAPPABLE COMPONENTS
n/a

NOTES:* Transceivers sold separately

XGS 116.png

XGS 116 / 116w

Performance

FIREWALL
7,700 Mbps

FIREWALL IMIX
3,500 Mbps

IPSEC VPN
1,100 Mbps

THREAT
PROTECTION

685 Mbps

TLS INSPECTION
650 Mbps

IPS
2,000 Mbps

NGFW
2,000 Mbps

LATENCY
(64 BYTE UDP)

8 µs

Connectivity

ETHERNET INTERFACES (FIXED)

8 X GE copper
1 X SFP Fiber*

POWER-OVER-ETHERNET (FIXED)

1 x GE
802.3at (30W max.)

MANAGEMENT INTERFACES

1 x COM RJ45
1 x COM Micro-USB

OTHER I/O INTERFACES
1 x USB 2.0 (front)
1 x USB 3.0 (rear)

 

WI-FI OPTION (W-MODEL ONLY)
Wi-Fi 5 (802.11ac)
2X2:2 MIMO
2 external antennas
single radio, 2.4 or 5 GHz

Modularity

EXPANSION SLOTS

1

OPTIONAL ADD-ON MODULES

3G/4G module
2nd Wi-Fi 5/802.11ac module (for w-model only)
SFP VDSL modem
SFP transceivers

Redundancy

SWAPPABLE COMPONENTS

optional 2nd power supply

NOTES:* Transceivers sold separately

126.png

126/126w

Performance

FIREWALL
10,500 Mbps

FIREWALL IMIX
4,000 Mbps

IPSEC VPN
1,800 Mbps

THREAT
PROTECTION

900 Mbps

TLS INSPECTION
800 Mbps

IPS
2,600 Mbps

NGFW
2,500 Mbps

LATENCY
(64 BYTE UDP)

8 µs

Connectivity

ETHERNET INTERFACES (FIXED)

10 X GE copper
1 X SFP Fiber*

POWER-OVER-ETHERNET (FIXED)

2 x GE
802.3at (30W max.)

MANAGEMENT INTERFACES

1 x COM RJ45
1 x COM Micro-USB

OTHER I/O INTERFACES
1 x USB 2.0 (front)
1 x USB 3.0 (rear)

 

WI-FI OPTION (W-MODEL ONLY)
Wi-Fi 5 (802.11ac)
3X3:3 MIMO
3 external antennas
single radio, 2.4 or 5 GHz

Modularity

EXPANSION SLOTS

1

OPTIONAL ADD-ON MODULES

3G/4G module
2nd Wi-Fi 5/802.11ac module (for w-model only)
SFP VDSL modem
SFP transceivers

Redundancy

SWAPPABLE COMPONENTS

optional 2nd power supply

NOTES:* Transceivers sold separately

XGS 87.png

XGS 87 / 87w

Performance

FIREWALL
3,700 Mbps

FIREWALL IMIX
2,500 Mbps

IPSEC VPN
750 Mbps

THREAT
PROTECTION

240 Mbps

TLS INSPECTION
375 Mbps

IPS
1,015 Mbps

NGFW
700 Mbps

LATENCY
(64 BYTE UDP)

6 µs

Connectivity

ETHERNET INTERFACES (FIXED)

4 X GE copper
1 X SFP Fiber*

POWER-OVER-ETHERNET (FIXED)

n/a

MANAGEMENT INTERFACES

1 x COM RJ45
1 x COM Micro-USB

OTHER I/O INTERFACES
1 x USB 2.0 (front)
1 x USB 3.0 (rear)

 

WI-FI OPTION (W-MODEL ONLY)
Wi-Fi 5 (802.11ac)
2X2:2 MIMO
2 external antennas
single radio, 2.4 or 5 GHz

Modularity

EXPANSION SLOTS

n/a

OPTIONAL ADD-ON MODULES

SFP VDSL modem
SFP transceivers

Redundancy

SWAPPABLE COMPONENTS
n/a

NOTES:* Transceivers sold separately

XGS Models Distributed Edge: 1U

xgs-2100.png

XGS 2100

Performance

FIREWALL
30,000 Mbps

FIREWALL IMIX
15,900 Mbps

IPSEC VPN
3,000 Mbps

THREAT
PROTECTION

1,250 Mbps

TLS INSPECTION
1,100 Mbps

IPS
5,800 Mbps

NGFW
5,200 Mbps

LATENCY
(64 BYTE UDP)

6 µs

Connectivity

ETHERNET INTERFACES (FIXED)

8 x GE copper
2 x SFP Fiber*

BYPASS PORT PAIRS (FIXED)

1

MAX. PORT DENSITY (INCL. MODULES)

18

MANAGEMENT INTERFACES

1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB

OTHER I/O INTERFACES

2 x USB 3.0 (front)
1 x USB 2.0 (rear)

 

MAX. POE (USING FLEXI PORT MODULE)

1 Module: 4 Ports, 60W max.

Modularity

FLEXI PORT SLOTS

1

OPTIONAL ADD-ON MODULES

SFP VDSL modem
Transceivers

FLEXI PORT MODULES (OPTIONAL)

8 port GE copper
8 port GE SFP Fiber*
4 port 10GE SFP+ Fiber*
4 port GE copper bypass (2 pairs)
4 port GE copper PoE + 4 port GE copper
4 port 2.5 GE copper PoE

Redundancy

2ND POWER SUPPLY

optional external

DUAL SSD / RAID

n/a

NOTES:* Transceivers sold separately

xgs-2300.png

XGS 2300

Performance

FIREWALL
35,000 Mbps

FIREWALL IMIX
20,000 Mbps

IPSEC VPN
3,500 Mbps

THREAT
PROTECTION

1,400 Mbps

TLS INSPECTION
1,450 Mbps

IPS
7,000 Mbps

NGFW
6,300 Mbps

LATENCY
(64 BYTE UDP)

4 µs

Connectivity

ETHERNET INTERFACES (FIXED)

8 x GE copper
2 x SFP Fiber*

BYPASS PORT PAIRS (FIXED)

1

MAX. PORT DENSITY (INCL. MODULES)

18

MANAGEMENT INTERFACES

1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB

OTHER I/O INTERFACES

2 x USB 3.0 (front)
1 x USB 2.0 (rear)

 

MAX. POE (USING FLEXI PORT MODULE)

1 Module: 4 Ports, 60W max.

Modularity

FLEXI PORT SLOTS

1

OPTIONAL ADD-ON MODULES

SFP VDSL modem
Transceivers

FLEXI PORT MODULES (OPTIONAL)

8 port GE copper
8 port GE SFP Fiber*
4 port 10GE SFP+ Fiber*
4 port GE copper bypass (2 pairs)
4 port GE copper PoE + 4 port GE copper
4 port 2.5 GE copper PoE

Redundancy

2ND POWER SUPPLY

optional external

DUAL SSD / RAID

n/a

NOTES:* Transceivers sold separately

xgs-3100.png

XGS 3100

Performance

FIREWALL
38,000 Mbps

FIREWALL IMIX
22,000 Mbps

IPSEC VPN
5,200 Mbps

THREAT
PROTECTION

2,000 Mbps

TLS INSPECTION
2,470 Mbps

IPS
9,820  Mbps

NGFW
9,000 Mbps

LATENCY
(64 BYTE UDP)

4 µs

Connectivity

ETHERNET INTERFACES (FIXED)

8 x GE copper
2 x SFP Fiber*

2 x SFP+ 10 GE Fiber*

BYPASS PORT PAIRS (FIXED)

1

MAX. PORT DENSITY (INCL. MODULES)

20

MANAGEMENT INTERFACES

1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB

OTHER I/O INTERFACES

2 x USB 3.0 (front)
1 x USB 2.0 (rear)

 

MAX. POE (USING FLEXI PORT MODULE)

1 Module: 4 Ports, 60W max.

Modularity

FLEXI PORT SLOTS

1

OPTIONAL ADD-ON MODULES

SFP VDSL modem
Transceivers

FLEXI PORT MODULES (OPTIONAL)

8 port GE copper
8 port GE SFP Fiber*
4 port 10GE SFP+ Fiber*
4 port GE copper bypass (2 pairs)
4 port GE copper PoE + 4 port GE copper
4 port 2.5 GE copper PoE

Redundancy

2ND POWER SUPPLY

optional external

DUAL SSD / RAID

n/a

NOTES:* Transceivers sold separately

xgs-3300.png

XGS 3300

Performance

FIREWALL
40,000 Mbps

FIREWALL IMIX
24,500 Mbps

IPSEC VPN
6,500 Mbps

THREAT
PROTECTION

2,770 Mbps

TLS INSPECTION
3,130 Mbps

IPS
13,440 Mbps

NGFW
12,500 Mbps

LATENCY
(64 BYTE UDP)

4 µs

Connectivity

ETHERNET INTERFACES (FIXED)

8 x GE copper
2 x SFP Fiber*

2 x SFP+ 10 GE Fiber*

BYPASS PORT PAIRS (FIXED)

1

MAX. PORT DENSITY (INCL. MODULES)

20

MANAGEMENT INTERFACES

1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB

OTHER I/O INTERFACES

2 x USB 3.0 (front)
1 x USB 2.0 (rear)

 

MAX. POE (USING FLEXI PORT MODULE)

1 Module: 4 Ports, 60W max.

Modularity

FLEXI PORT SLOTS

1

OPTIONAL ADD-ON MODULES

SFP VDSL modem
Transceivers

FLEXI PORT MODULES (OPTIONAL)

8 port GE copper
8 port GE SFP Fiber*
4 port 10GE SFP+ Fiber*
4 port GE copper bypass (2 pairs)
4 port GE copper PoE + 4 port GE copper
4 port 2.5 GE copper PoE

Redundancy

2ND POWER SUPPLY

optional external

DUAL SSD / RAID

n/a

NOTES:* Transceivers sold separately