.svg?width=185&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "Home"){kind=logo}
.svg?width=13&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "Top Navigation - Sign in - Icon")
Accelerate investigation and response with optimized workflows 123
Respond to threats in the shortest time.
Collaborative case management
Automatic case creation enables rapid investigation, with comprehensive case management tools for collaboration.
Product highlights
- All protection features are supported on every XGS 1xx desktop model and most are available on XGS 88 and XGS 88w.
- Accelerated performance: Up to double the throughput of Gen.1 models plus Xstream virtual FastPath acceleration for IPsec VPN (XGS 88 to XGS 128) in combination with SFOS v21 and higher.
- High-speed connectivity built in: 2.5 GE interfaces on everymodel,two built-in 10 GE SFP+ interfaces on the XGS 138, and Wi-Fi 6 (802.11ax) integrated on all w-models with concurrent use of the 2.4 and 5 GHz bands for better performance.
- Power and environment: Up to 50% lower power consumption, fanless XGS 88 and 108 models for whisper-quiet operation, optimized thermal design for XGS 118 and above, and redundant power option for all XGS 1xx models.
- Optional connectivity: New 5G module available exclusively for Gen.2 models for more cost-effective redundant connectivity.
- Streamlined hardware architecture: The XGS 88 to XGS 128 models boast a new single-CPU architecture while the XGS 138 has a refreshed dual-processor architecture.
Accessories
5G connectivity
For XGS 118, XGS 128, and XGS 138 models only
For many business locations, a 5G cellular network can be deployed to support traffic peaks or provide an important redundant/fallback connectivity option for SD-WAN. 5G fixed wireless access (FWA) may sound like a contradiction in terms, but as a technology, it allows network operators to deliver cost-effective, high-speed broadband connectivity to both suburban and rural areas. Using 5G, operators can now meet the high-speed internet access demands of cloud services in business and consumer requirements for latency-free, high-definition streaming services.
The optional Gen.2 5G module can be securely mounted in the XGS device and then managed from your Sophos Firewall.
- Better performance with the latest standards supported.
- Highly cost-effective solution.
- Full protection from theft and damage.
- Gen.2 5G module data rates (max.):
5G SA sub-6: downlink 2.4 Gbps; uplink 900 Mbps.
5G NSA sub-6: downlink 3.4 Gbps; uplink 550 Mbps.
LTE: downlink 1.6 Gbps; uplink 200 Mbps.
WCDMA: downlink 42 Mbps; uplink 5.76 Mbps.
- One 5G module (Gen.2) version for all regions.
The optional Gen.2 5G module can be securely mounted in the XGS device and then managed from your Sophos Firewall.
- Better performance with the latest standards supported.
- Highly cost-effective solution.
- Full protection from theft and damage.
- Gen.2 5G module data rates (max.):
5G SA sub-6: downlink 2.4 Gbps; uplink 900 Mbps.
5G NSA sub-6: downlink 3.4 Gbps; uplink 550 Mbps.
LTE: downlink 1.6 Gbps; uplink 200 Mbps.
WCDMA: downlink 42 Mbps; uplink 5.76 Mbps.
- One 5G module (Gen.2) version for all regions.
The optional Gen.2 5G module can be securely mounted in the XGS device and then managed from your Sophos Firewall.
- Better performance with the latest standards supported.
- Highly cost-effective solution.
- Full protection from theft and damage.
- Gen.2 5G module data rates (max.):
5G SA sub-6: downlink 2.4 Gbps; uplink 900 Mbps.
5G NSA sub-6: downlink 3.4 Gbps; uplink 550 Mbps.
LTE: downlink 1.6 Gbps; uplink 200 Mbps.
WCDMA: downlink 42 Mbps; uplink 5.76 Mbps.
- One 5G module (Gen.2) version for all regions.
The optional Gen.2 5G module can be securely mounted in the XGS device and then managed from your Sophos Firewall.
- Better performance with the latest standards supported.
- Highly cost-effective solution.
- Full protection from theft and damage.
- Gen.2 5G module data rates (max.):
5G SA sub-6: downlink 2.4 Gbps; uplink 900 Mbps.
5G NSA sub-6: downlink 3.4 Gbps; uplink 550 Mbps.
LTE: downlink 1.6 Gbps; uplink 200 Mbps.
WCDMA: downlink 42 Mbps; uplink 5.76 Mbps.
- One 5G module (Gen.2) version for all regions.
Product highlights
- All protection features are supported on every XGS 1xx desktop model and most are available on XGS 88 and XGS 88w.
- Accelerated performance: Up to double the throughput of Gen.1 models plus Xstream virtual FastPath acceleration for IPsec VPN (XGS 88 to XGS 128) in combination with SFOS v21 and higher.
- High-speed connectivity built in: 2.5 GE interfaces on everymodel,two built-in 10 GE SFP+ interfaces on the XGS 138, and Wi-Fi 6 (802.11ax) integrated on all w-models with concurrent use of the 2.4 and 5 GHz bands for better performance.
- Power and environment: Up to 50% lower power consumption, fanless XGS 88 and 108 models for whisper-quiet operation, optimized thermal design for XGS 118 and above, and redundant power option for all XGS 1xx models.
- Optional connectivity: New 5G module available exclusively for Gen.2 models for more cost-effective redundant connectivity.
- Streamlined hardware architecture: The XGS 88 to XGS 128 models boast a new single-CPU architecture while the XGS 138 has a refreshed dual-processor architecture.
Accessories
5G connectivity
For XGS 118, XGS 128, and XGS 138 models only
For many business locations, a 5G cellular network can be deployed to support traffic peaks or provide an important redundant/fallback connectivity option for SD-WAN. 5G fixed wireless access (FWA) may sound like a contradiction in terms, but as a technology, it allows network operators to deliver cost-effective, high-speed broadband connectivity to both suburban and rural areas. Using 5G, operators can now meet the high-speed internet access demands of cloud services in business and consumer requirements for latency-free, high-definition streaming services.
The optional Gen.2 5G module can be securely mounted in the XGS device and then managed from your Sophos Firewall.
- Better performance with the latest standards supported.
- Highly cost-effective solution.
- Full protection from theft and damage.
- Gen.2 5G module data rates (max.):
5G SA sub-6: downlink 2.4 Gbps; uplink 900 Mbps.
5G NSA sub-6: downlink 3.4 Gbps; uplink 550 Mbps.
LTE: downlink 1.6 Gbps; uplink 200 Mbps.
WCDMA: downlink 42 Mbps; uplink 5.76 Mbps.
- One 5G module (Gen.2) version for all regions.
Sophos MDR service tiers
| Sophos Email | Sophos Email Monitoring System | |
|---|---|---|
| EMAIL PROTECTION | ||
| Anti-Spam Filters | ||
| Malware Scanning | ||
| QR Code Scanning | ||
| Message Subject and Body Scanning with Natural Language Processing (NLP) | ||
| AI-Powered Cloud Sandbox (Location Selection; Static and Dynamic Analysis) | ||
| Malicious URL Detection | ||
| Reputation Analysis | ||
| Domain Anomaly Detection | ||
| Header Anomaly Detection | ||
| SPF (Inbound) | ||
| DMARC (Inbound) | ||
| DKIM (Inbound) | ||
| DKIM (Outbound) | ||
| BATV protection | ||
| Time-of-click URL Rewriting | ||
| IMPERSONATION PROTECTION | ||
| Phishing and BEC Detection with NLP | ||
| Phishing and BEC Protection with NLP | ||
| Display Name Analysis (VIPs and Brands) | ||
| Look-a-like Domain Checks | ||
| DATA LOSS PREVENTION | ||
| Multi-rule DLP Policies for Groups and Individual Users | ||
| Content Control Lists (Financials, Confidential Contents, Health Information, and PII) | ||
| Custom Content Control Lists | ||
| Keyword (Including Regular Expression) | ||
| Attachment file type (True File Type and File Extension) | ||
| ADVANCED INTEGRATIONS – SOPHOS MDR AND XDR* | ||
| Event Reporting (Account Compromise, Spam, Data Control, Post-delivery Protection) | ||
| MDR Action - Manual Clawback | ||
| MDR Action - Block Senders, Domains, and Ips | ||
| MDR Action - Tweak Policies | ||
| MDR Action - Modify Other Configurations | ||
| MICROSOFT 365 INTEGRATION | ||
| Microsoft 365 Mailflow Rules API Integration | ||
| API Integration for Post-delivery Message Clawback (URLs and Messages) | Manual-only | |
| MFR Tamper Alert | ||
| MESSAGE ENCRYPTION | ||
| TLS Encryption | ||
| S/MIME | ||
| Push-based Attachment and Message Encryption | ||
| Pull-based Full Portal Encryption | Add-on available | |
| MESSAGE HANDLING | ||
| On-Demand Clawback | ||
| Post-Delivery Protections | ||
| Aggressive Mode Slider | ||
| Inbound Message Scanning | ||
| Outbound Message Scanning | ||
| Country of Origin Filtering | ||
| Language Filtering | ||
| Emergency Inbox (Read)** | ||
| Domain, Group and User Level Policies (Including External Addresses and Domains) | ||
| Admin and User Quarantine | Admin-only | |
| Admin and User Allow/Block Lists | Admin-only | |
| Inbound Email Banners (Trusted Sender, External, Untrusted) | ||
| AD, Azure AD, and Google Directory Sync | ||
| MX Redirection for Other Providers | ||
| Implementation and Management of DMARC Policy Conformance | Add-on available | Add-on available |
| End-User and Anti-Phish Training | Add-on available | |
*Sophos MDR or Sophos XDR required
**Feature not available with direct Microsoft 365 API integration
XGS Series 2nd Gen desktop accessories matrix
| Model | Power redundancy | Expansion bay | 5G module | Wi-Fi options | Rackmount kit |
|---|---|---|---|---|---|
| XGS 88 | N/A | N/A | N/A | N/A | Optional |
| XGS 88w | N/A | N/A | N/A | Wi-Fi 6 built in | Optional |
| XGS 108 | Optional 2nd power supply | N/A | N/A | N/A | Optional |
| XGS 108w | Optional 2nd power supply | N/A | N/A | Wi-Fi 6 built in | Optional |
| XGS 118 | Optional 2nd power supply | 1 | Optional | N/A | Optional |
| XGS 118w | Optional 2nd power supply | 1 | Optional | Wi-Fi 6 built in | Optional |
| XGS 128 | Optional 2nd power supply | 1 | Optional | N/A | Optional |
| XGS 128w | Optional 2nd power supply | 1 | Optional | Wi-Fi 6 built in | Optional |
| XGS 138 | Optional 2nd power supply | 1 | Optional | N/A | Optional |
Performance test methodology
| General | Maximum throughput measured under ideal test conditions using industry-standard Keysight-Ixia BreakingPoint test tools. Actual performance may vary depending on network conditions and activated services. |
| Firewall | Measured using HTTP traffic and 512 KB response size. |
| Firewall IMIX | UDP throughput based on a combination of 66 byte, 570 byte, and 1518 byte packet sizes. |
| IPS | Measured using HTTP traffic, default IPS ruleset, and 512 KB object size. |
| IPsec VPN | HTTP throughput measured using multiple tunnels and 512 KB HTTP response size. |
| TLS inspection | Measured with IPS enabled on HTTPS sessions and different cipher suites. |
| Threat protection | Measured with firewall, IPS, application control, and malware prevention enabled using Enterprise Mix traffic. |
Accelerate investigation and response with optimized workflows
Respond to threats in the shortest time.
Sophos has you covered
Eyebrow
Heading
Description
Eyebrow 1
Heading 1
Description 1
WIN-WIN
Human expertise plus
AI technologies
Our people are at the heart of our AI-powered cybersecurity solutions, bringing their expertise to every aspect of the development process.
- Sophos X-Ops, Our cross-functional cybersecurity task force, has deep knowledge of threats and adversary behaviors, helping identify how and when AI can have the greatest impact.
- The Sophos AI team applies extensive AI expertise to design, build, and maintain 50+ (and growing) AI models specific to cybersecurity
- 30+ years of cybersecurity engineering expertise ensure successful integration of AI models into Sophos products and services and safe feature rollouts.
Learnings from AI deployments advance our human expertise, enabling us to continually refine models, identify new applications, and advance our technology.
SOPHOS AI-POWERED CYBER DEFENSES
AI at every point in your defenses
More than 50 (and growing) deep learning and GenAI models in Sophos solutions deliver fast, effective protection against cyberthreats whenever and wherever they run. Our AI-powered cybersecurity reduces exposure, stops threats automatically, and empowers security analysts to make smart decisions faster. Check out some examples below.
Mitigate
risk of threats
Reduce exposure to attack
Automatically
stop threats
Prevent attacks from executing
SOPHOS FIREWALL
AI-powered zero-day threat intelligence is delivered through SophosLabs Intelix.
Automatically
stop threats
Prevent attacks from executing