FIREWALL
Powerful Protection and Performance
Powerful Protection at Every Price Point
Sophos Firewall and the XGS Series deliver the industry’s best visibility, protection, and performance. From the small branch office to the distributed enterprise, no compromise protection is guaranteed.
Powered by Xstream
Sophos XGS Series firewalls combine the best of two worlds: the flexibility of a high-performance, multi-core CPU for deep-packet inspection, plus the performance benefits of a dedicated Xstream Flow Processor for intelligent application acceleration.
We’ve Got the Edge
Sophos Firewall can take your network anywhere it needs to go with an extensive range of modular hardware appliances, cloud and virtual platform support, and secure access edge devices like our SD-RED and APX wireless access points.
XGS Models for SMB and Branch Office
XGS 107 / 107w
Performance
FIREWALL
7,000 Mbps
FIREWALL IMIX
2,900 Mbps
IPSEC VPN
900 Mbps
THREAT
PROTECTION
330 Mbps
TLS INSPECTION
420 Mbps
IPS
1,355 Mbps
NGFW
1,050 Mbps
LATENCY
(64 BYTE UDP)
6 µs
Connectivity
ETHERNET INTERFACES (FIXED)
8 X GE copper
1 X SFP Fiber*
POWER-OVER-ETHERNET (FIXED)
n/a
MANAGEMENT INTERFACES
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
WI-FI OPTION (W-MODEL ONLY)
Wi-Fi 5 (802.11ac)
2X2:2 MIMO
2 external antennas
single radio, 2.4 or 5 GHz
Modularity
EXPANSION SLOTS
n/a
OPTIONAL ADD-ON MODULES
SFP VDSL modem
SFP transceivers
Redundancy
SWAPPABLE COMPONENTS
n/a
NOTES:* Transceivers sold separately
XGS 116 / 116w
Performance
FIREWALL
7,700 Mbps
FIREWALL IMIX
3,500 Mbps
IPSEC VPN
1,100 Mbps
THREAT
PROTECTION
685 Mbps
TLS INSPECTION
650 Mbps
IPS
2,000 Mbps
NGFW
2,000 Mbps
LATENCY
(64 BYTE UDP)
8 µs
Connectivity
ETHERNET INTERFACES (FIXED)
8 X GE copper
1 X SFP Fiber*
POWER-OVER-ETHERNET (FIXED)
1 x GE
802.3at (30W max.)
MANAGEMENT INTERFACES
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
WI-FI OPTION (W-MODEL ONLY)
Wi-Fi 5 (802.11ac)
2X2:2 MIMO
2 external antennas
single radio, 2.4 or 5 GHz
Modularity
EXPANSION SLOTS
1
OPTIONAL ADD-ON MODULES
3G/4G module
2nd Wi-Fi 5/802.11ac module (for w-model only)
SFP VDSL modem
SFP transceivers
Redundancy
SWAPPABLE COMPONENTS
optional 2nd power supply
NOTES:* Transceivers sold separately
126/126w
Performance
FIREWALL
10,500 Mbps
FIREWALL IMIX
4,000 Mbps
IPSEC VPN
1,800 Mbps
THREAT
PROTECTION
900 Mbps
TLS INSPECTION
800 Mbps
IPS
2,600 Mbps
NGFW
2,500 Mbps
LATENCY
(64 BYTE UDP)
8 µs
Connectivity
ETHERNET INTERFACES (FIXED)
10 X GE copper
1 X SFP Fiber*
POWER-OVER-ETHERNET (FIXED)
2 x GE
802.3at (30W max.)
MANAGEMENT INTERFACES
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
WI-FI OPTION (W-MODEL ONLY)
Wi-Fi 5 (802.11ac)
3X3:3 MIMO
3 external antennas
single radio, 2.4 or 5 GHz
Modularity
EXPANSION SLOTS
1
OPTIONAL ADD-ON MODULES
3G/4G module
2nd Wi-Fi 5/802.11ac module (for w-model only)
SFP VDSL modem
SFP transceivers
Redundancy
SWAPPABLE COMPONENTS
optional 2nd power supply
NOTES:* Transceivers sold separately
XGS 87 / 87w
Performance
FIREWALL
3,700 Mbps
FIREWALL IMIX
2,500 Mbps
IPSEC VPN
750 Mbps
THREAT
PROTECTION
240 Mbps
TLS INSPECTION
375 Mbps
IPS
1,015 Mbps
NGFW
700 Mbps
LATENCY
(64 BYTE UDP)
6 µs
Connectivity
ETHERNET INTERFACES (FIXED)
4 X GE copper
1 X SFP Fiber*
POWER-OVER-ETHERNET (FIXED)
n/a
MANAGEMENT INTERFACES
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
WI-FI OPTION (W-MODEL ONLY)
Wi-Fi 5 (802.11ac)
2X2:2 MIMO
2 external antennas
single radio, 2.4 or 5 GHz
Modularity
EXPANSION SLOTS
n/a
OPTIONAL ADD-ON MODULES
SFP VDSL modem
SFP transceivers
Redundancy
SWAPPABLE COMPONENTS
n/a
NOTES:* Transceivers sold separately
XGS Models Distributed Edge: 1U
XGS 2100
Performance
FIREWALL
30,000 Mbps
FIREWALL IMIX
15,900 Mbps
IPSEC VPN
3,000 Mbps
THREAT
PROTECTION
1,250 Mbps
TLS INSPECTION
1,100 Mbps
IPS
5,800 Mbps
NGFW
5,200 Mbps
LATENCY
(64 BYTE UDP)
6 µs
Connectivity
ETHERNET INTERFACES (FIXED)
8 x GE copper
2 x SFP Fiber*
BYPASS PORT PAIRS (FIXED)
1
MAX. PORT DENSITY (INCL. MODULES)
18
MANAGEMENT INTERFACES
1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
2 x USB 3.0 (front)
1 x USB 2.0 (rear)
MAX. POE (USING FLEXI PORT MODULE)
1 Module: 4 Ports, 60W max.
Modularity
FLEXI PORT SLOTS
1
OPTIONAL ADD-ON MODULES
SFP VDSL modem
Transceivers
FLEXI PORT MODULES (OPTIONAL)
8 port GE copper
8 port GE SFP Fiber*
4 port 10GE SFP+ Fiber*
4 port GE copper bypass (2 pairs)
4 port GE copper PoE + 4 port GE copper
4 port 2.5 GE copper PoE
Redundancy
2ND POWER SUPPLY
optional external
DUAL SSD / RAID
n/a
NOTES:* Transceivers sold separately
XGS 2300
Performance
FIREWALL
35,000 Mbps
FIREWALL IMIX
20,000 Mbps
IPSEC VPN
3,500 Mbps
THREAT
PROTECTION
1,400 Mbps
TLS INSPECTION
1,450 Mbps
IPS
7,000 Mbps
NGFW
6,300 Mbps
LATENCY
(64 BYTE UDP)
4 µs
Connectivity
ETHERNET INTERFACES (FIXED)
8 x GE copper
2 x SFP Fiber*
BYPASS PORT PAIRS (FIXED)
1
MAX. PORT DENSITY (INCL. MODULES)
18
MANAGEMENT INTERFACES
1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
2 x USB 3.0 (front)
1 x USB 2.0 (rear)
MAX. POE (USING FLEXI PORT MODULE)
1 Module: 4 Ports, 60W max.
Modularity
FLEXI PORT SLOTS
1
OPTIONAL ADD-ON MODULES
SFP VDSL modem
Transceivers
FLEXI PORT MODULES (OPTIONAL)
8 port GE copper
8 port GE SFP Fiber*
4 port 10GE SFP+ Fiber*
4 port GE copper bypass (2 pairs)
4 port GE copper PoE + 4 port GE copper
4 port 2.5 GE copper PoE
Redundancy
2ND POWER SUPPLY
optional external
DUAL SSD / RAID
n/a
NOTES:* Transceivers sold separately
XGS 3100
Performance
FIREWALL
38,000 Mbps
FIREWALL IMIX
22,000 Mbps
IPSEC VPN
5,200 Mbps
THREAT
PROTECTION
2,000 Mbps
TLS INSPECTION
2,470 Mbps
IPS
9,820 Mbps
NGFW
9,000 Mbps
LATENCY
(64 BYTE UDP)
4 µs
Connectivity
ETHERNET INTERFACES (FIXED)
8 x GE copper
2 x SFP Fiber*
2 x SFP+ 10 GE Fiber*
BYPASS PORT PAIRS (FIXED)
1
MAX. PORT DENSITY (INCL. MODULES)
20
MANAGEMENT INTERFACES
1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
2 x USB 3.0 (front)
1 x USB 2.0 (rear)
MAX. POE (USING FLEXI PORT MODULE)
1 Module: 4 Ports, 60W max.
Modularity
FLEXI PORT SLOTS
1
OPTIONAL ADD-ON MODULES
SFP VDSL modem
Transceivers
FLEXI PORT MODULES (OPTIONAL)
8 port GE copper
8 port GE SFP Fiber*
4 port 10GE SFP+ Fiber*
4 port GE copper bypass (2 pairs)
4 port GE copper PoE + 4 port GE copper
4 port 2.5 GE copper PoE
Redundancy
2ND POWER SUPPLY
optional external
DUAL SSD / RAID
n/a
NOTES:* Transceivers sold separately
XGS 3300
Performance
FIREWALL
40,000 Mbps
FIREWALL IMIX
24,500 Mbps
IPSEC VPN
6,500 Mbps
THREAT
PROTECTION
2,770 Mbps
TLS INSPECTION
3,130 Mbps
IPS
13,440 Mbps
NGFW
12,500 Mbps
LATENCY
(64 BYTE UDP)
4 µs
Connectivity
ETHERNET INTERFACES (FIXED)
8 x GE copper
2 x SFP Fiber*
2 x SFP+ 10 GE Fiber*
BYPASS PORT PAIRS (FIXED)
1
MAX. PORT DENSITY (INCL. MODULES)
20
MANAGEMENT INTERFACES
1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
2 x USB 3.0 (front)
1 x USB 2.0 (rear)
MAX. POE (USING FLEXI PORT MODULE)
1 Module: 4 Ports, 60W max.
Modularity
FLEXI PORT SLOTS
1
OPTIONAL ADD-ON MODULES
SFP VDSL modem
Transceivers
FLEXI PORT MODULES (OPTIONAL)
8 port GE copper
8 port GE SFP Fiber*
4 port 10GE SFP+ Fiber*
4 port GE copper bypass (2 pairs)
4 port GE copper PoE + 4 port GE copper
4 port 2.5 GE copper PoE
Redundancy
2ND POWER SUPPLY
optional external
DUAL SSD / RAID
n/a
NOTES:* Transceivers sold separately