Sophos Firewall
Get a QuoteDownload Brochure

XGS Series

Next-Gen Firewall Appliances

Get a QuoteDownload Brochure
Powered by Xstream

Sophos XGS Series firewalls combine the best of two worlds: the flexibility of a high-performance, multi-core CPU for deep-packet inspection, plus the performance benefits of a dedicated Xstream Flow Processor for intelligent application acceleration.

Powerful Protection at Every Price Point

Sophos Firewall and the XGS Series deliver the industry’s best visibility, protection, and performance. From the small branch office to the distributed enterprise, no compromise protection is guaranteed.

We’ve Got the Edge

Sophos Firewall can take your network anywhere it needs to go with an extensive range of modular hardware appliances, cloud and virtual platform support, and secure access edge devices like our SD-RED and APX wireless access points.

XGS Series Appliances

SMB and Branch Office

XGS Series Desktop

Excellent value and all-in-one connectivity for all your branch office, retail outlet, and small business needs.

Models 87/87w, 107/107w, 116/116w, 126/126w, 136/136w

Compare Models

Distributed Edge

XGS Series 1U Rackmount

Performance and versatile connectivity options to meet the security infrastructure needs of larger SMB and mid-sized organizations.

Models 2100, 2300, 3100, 3300, 4300, 4500

Compare Models

Enterprise Edge

XGS Series 2U Rackmount

No-compromise performance, connectivity, and redundancy to power the most demanding distributed enterprise networks.

Models 5500, 6500

Compare Models
SD-WAN and Wi-Fi

Remote Ethernet Devices

SD-RED Series

Plug-and-play Remote Ethernet Devices to provide edge connectivity for branch office and remote sites.

Models 20, 60

Compare Models

Wi-Fi Access Points

APX Series

Manage, secure, and control your Wi-Fi networks from your Sophos Firewall.

Models 120, 320, 530, 740

Compare Models

Looking for the XG Series firewall appliances?

XG Series

Cloud and Virtual

Sophos Firewall protects your public, private, and hybrid cloud and virtual environments.

As an AWS Advanced Technology Partner, Sophos is a validated AWS Security Competency vendor, AWS marketplace seller, and AWS Public Section Partner.

Sophos Firewall is available in the AWS marketplace with a Pay-As-You-Go (PAYG) license model or Bring Your Own License (BYOL) to best fit your needs.

Sophos Firewall is certified and optimized for Azure and is available in the Microsoft Azure Marketplace.

Take advantage of the free test drive or the flexible PYG or BYOL licensing options.

Sophos Firewall is Nutanix AHV and Nutanix Flow Ready bringing next-gen protection to the industry’s leading Hyper Convergence Infrastructure (HCI) platform.

Take advantage of a 30-day free trial using our KVM image and flexible licensing.

Learn More

Sophos Firewall is also available on all popular virtualization platforms, including VMWare ESXi, Microsoft Hyper-V 2008 and 2012, KVM, and Citrix Xen App platforms.

You can also install Sophos Firewall as a software appliance on your own x86 hardware.

XGS Series Next-Gen Firewall Appliances

SMB and Branch Office: Desktop Models

Customers looking for an all-in-one network security solution will appreciate the seamless connectivity options available for our desktop appliances. With the modularity that smaller businesses, retail outlets, and branch offices need to grow and adapt to changing circumstances, they offer the perfect balance between price and performance. All desktop models are optionally available with built-in Wi-Fi.

All models are powered by a high-speed CPU plus a dedicated Xstream Flow Processor for hardware acceleration.

Compare XGS Desktop Models

Scroll
XGS 87 / 87w XGS 107 / 107w XGS 116 / 116w 126/126w 136/136w
Performance
FIREWALL
3,700 Mbps
TLS INSPECTION
375 Mbps
FIREWALL IMIX
2,500 Mbps
IPS
1,015 Mbps
IPSEC VPN
750 Mbps
NGFW
700 Mbps
THREAT
PROTECTION
240 Mbps
LATENCY
(64 BYTE UDP)
6 µs
Performance
FIREWALL
7,000 Mbps
TLS INSPECTION
420 Mbps
FIREWALL IMIX
2,900 Mbps
IPS
1,355 Mbps
IPSEC VPN
900 Mbps
NGFW
1,050 Mbps
THREAT
PROTECTION
330 Mbps
LATENCY
(64 BYTE UDP)
6 µs
Performance
FIREWALL
7,700 Mbps
TLS INSPECTION
650 Mbps
FIREWALL IMIX
3,500 Mbps
IPS
2,000 Mbps
IPSEC VPN
1,100 Mbps
NGFW
2,000 Mbps
THREAT
PROTECTION
685 Mbps
LATENCY
(64 BYTE UDP)
8 µs
Performance
FIREWALL
10,500 Mbps
TLS INSPECTION
800 Mbps
FIREWALL IMIX
4,000 Mbps
IPS
2,600 Mbps
IPSEC VPN
1,800 Mbps
NGFW
2,500 Mbps
THREAT
PROTECTION
900 Mbps
LATENCY
(64 BYTE UDP)
8 µs
Performance
FIREWALL
11,500 Mbps
TLS INSPECTION
950 Mbps
FIREWALL IMIX
4,700 Mbps
IPS
3,300 Mbps
IPSEC VPN
2,500 Mbps
NGFW
3,000 Mbps
THREAT
PROTECTION
1,000 Mbps
LATENCY
(64 BYTE UDP)
8 µs
Connectivity
ETHERNET INTERFACES (FIXED)
4 X GE copper
1 X SFP Fiber*
POWER-OVER-ETHERNET (FIXED)
n/a
MANAGEMENT INTERFACES
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
WI-FI OPTION (W-MODEL ONLY)
Wi-Fi 5 (802.11ac)
2X2:2 MIMO
2 external antennas
single radio, 2.4 or 5 GHz
Connectivity
ETHERNET INTERFACES (FIXED)
8 x GE copper
1 x SFP Fiber*
POWER-OVER-ETHERNET (FIXED)
n/a
MANAGEMENT INTERFACES
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
WI-FI OPTION (W-MODEL ONLY)
Wi-Fi 5 (802.11ac)
2X2:2 MIMO
2 external antennas
single radio, 2.4 or 5 GHz
Connectivity
ETHERNET INTERFACES (FIXED)
8 x GE copper
1 x SFP Fiber*
POWER-OVER-ETHERNET (FIXED)
1 x GE
802.3at (30W max.)
MANAGEMENT INTERFACES
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
WI-FI OPTION (W-MODEL ONLY)
Wi-Fi 5 (802.11ac)
2X2:2 MIMO
2 external antennas
single radio, 2.4 or 5 GHz
Connectivity
ETHERNET INTERFACES (FIXED)
10 x GE copper
2 x SFP Fiber*
POWER-OVER-ETHERNET (FIXED)
2 x GE
802.3at (30W max. per port)
MANAGEMENT INTERFACES
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
WI-FI OPTION (W-MODEL ONLY)
Wi-Fi 5 (802.11ac)
3X3:3 MIMO
3 external antennas
single radio, 2.4 or 5 GHz
Connectivity
ETHERNET INTERFACES (FIXED)
10 x GE copper
2 x SFP Fiber*
POWER-OVER-ETHERNET (FIXED)
2 x 2.5 GE
802.3at (30W max. per port)
MANAGEMENT INTERFACES
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
WI-FI OPTION (W-MODEL ONLY)
Wi-Fi 5 (802.11ac)
3X3:3 MIMO
3 external antennas
single radio, 2.4 or 5 GHz
Modularity
EXPANSION SLOTS
n/a
OPTIONAL ADD-ON MODULES
SFP VDSL modem
SFP transceivers
Modularity
EXPANSION SLOTS
n/a
OPTIONAL ADD-ON MODULES
SFP VDSL modem
SFP transceivers
Modularity
EXPANSION SLOTS
1
OPTIONAL ADD-ON MODULES
3G/4G module
2nd Wi-Fi 5/802.11ac module (for w-model only)
SFP VDSL modem
SFP transceivers
Modularity
EXPANSION SLOTS
1
OPTIONAL ADD-ON MODULES
3G/4G module
2nd Wi-Fi 5/802.11ac module (for w-model only)
SFP VDSL modem
SFP transceivers
Modularity
EXPANSION SLOTS
1
OPTIONAL ADD-ON MODULES
3G/4G module
2nd Wi-Fi 5/802.11ac module (for w-model only)
SFP VDSL modem
SFP transceivers
Redundancy
SWAPPABLE COMPONENTS
n/a
Redundancy
SWAPPABLE COMPONENTS
optional 2nd power supply
Redundancy
SWAPPABLE COMPONENTS
optional 2nd power supply
Redundancy
SWAPPABLE COMPONENTS
optional 2nd power supply
Redundancy
SWAPPABLE COMPONENTS
optional 2nd power supply
Notes:* Transceivers sold separately
Notes:* Transceivers sold separately
Notes:* Transceivers sold separately
Notes:* Transceivers sold separately
Notes:* Transceivers sold separately
Specs and Images Specs and Images Specs and Images Specs and Images Specs and Images
Performance Test Methodology
General Maximum throughput measured under ideal test conditions using industry standard Keysight-Ixia BreakingPoint test tools. Actual performance may vary depending on network conditions and activated services.
Firewall Measured using HTTP traffic and 512 KB response size
Firewall IMIX UDP throughput based on a combination of 66 byte, 570 byte and 1518 byte packet sizes
IPS Measured with IPS with HTTP traffic using default IPS ruleset and 512 KB object size.      
IPsec VPN HTTP throughput using multiple tunnels and 512 KB HTTP response size
TLS inspection Performance measured with IPS with HTTPS sessions and different cipher suites.
Threat Protection Measured with Firewall, IPS, Application Control, and malware prevention enabled using HTTP 200 KB response size

Looking for the XG Series firewall appliances?

XG Series

Showing XGS 116w Model

Product Highlights

  • Dual processor architecture for an excellent price to performance ratio

  • Every model is available with optional integrated Wi-Fi for all-in-one connectivity

  • An expansion bay on all XGS 116/126/136 models improves compatibility for 3G/4G when used with our optional module

  • An optional second Wi-Fi radio module can be added to w-models with an expansion bay

  • A second power supply option for all XGS 1xx models offers a redundancy option not always seen in this form factor

  • Power-over-Ethernet ports are built-in on 116, 126 (1 GE) and 136 (2.5 GE) models to power your external devices

  • The SFP port on all models can be used for FTTH/FTTP or with the optional VDSL modem

  • Note: All protection features are supported on every XGS 1xx model and most on XGS 87 and 87w

Accessories

3G/4G Connectivity

For XGS 116, 126, and 136 models only

Our desktop appliances are often deployed in remote locations where flexible connectivity is essential. The expansion bay on the XGS 116, 126, and 136 models provides the option to add a 3G/4G module to your appliance. The module can be securely mounted and is then managed from your Sophos Firewall console. 

  • Better performance with the latest standards supported (LTE cat-6, up to 300 Mbps download/50Mbps upload)

  • Full protection from theft or damage

Two different versions – Europe/Americas and Asia-Pacific

SFP VDSL Modem

For use with all XG and XGS Series models

Use the SFP port to add VDSL connectivity to your appliance. Get rid of your router and connect your appliance directly to the DSL socket on your wall. This means one less piece of equipment to manage and a fully integrated solution. Our optional DSL modem supports most VDSL2 standards with download/upload speeds up to 100 Mbps.

2nd Wi-Fi Radio Module

For XGS 116w, 126w, and 136w only

Improve the Wi-Fi coverage and performance in your office by adding a second Wi-Fi radio to selected XGS models. Adding a second radio to a model which already has built-in Wi-Fi, allows you to broadcast the 2.4 and 5 GHz bands simultaneously and adds two additional antennas for an overall better Wi-Fi experience.

XGS Series Desktop Accessories Matrix

Model Power Redundancy Expansion Bay 3G/4G Module Wi-Fi
Options		 VDSL SFP Modem Rackmount Kit
XGS 87 N/A N/A N/A N/A Optional Optional
XGS 87w N/A N/A N/A N/A Optional Optional
XGS 107 Optional 2nd
Power Supply		 N/A N/A N/A Optional Optional
XGS 107w Optional 2nd
Power Supply		 N/A N/A Built In Optional Optional
XGS 116 Optional 2nd
Power Supply		 1 Optional N/A Optional Optional
XGS 116w Optional 2nd
Power Supply		 1 Optional Built In
Optional 2nd Module		 Optional Optional
XGS 126 Optional 2nd
Power Supply		 1 Optional N/A Optional Optional
XGS 126w Optional 2nd
Power Supply		 1 Optional Built In
Optional 2nd Module		 Optional Optional
XGS 136 Optional 2nd
Power Supply		 1 Optional N/A Optional Optional
XGS 136w Optional 2nd
Power Supply		 1 Optional Built In
Optional 2nd Module		 Optional Optional

XGS Series Next-Gen Firewall Appliances

Distributed Edge: 1U Models

Mid-sized and distributed organizations who need a versatile solution to power and protect their network will be well-served with our 1U models. These rackmount firewalls offer excellent performance, a diverse range of high-speed interfaces built-in, and a choice of add-on connectivity modules. Whether your priority is ensuring maximum uptime for your SD-WAN links, securely connecting your remote users, or protecting the network in a growing organization, you can tailor them to your dynamic environment.

All models are powered by a high-speed CPU plus a dedicated Xstream Flow Processor for hardware acceleration.

Compare XGS 1U Models

Scroll
XGS 2100 XGS 2300 XGS 3100 XGS 3300 XGS 4300 XGS 4500
Performance
FIREWALL
30,000 Mbps
TLS INSPECTION
1,100 Mbps
FIREWALL IMIX
15,900 Mbps
IPS
5,800 Mbps
IPSEC VPN
3,000 Mbps
NGFW
5,200 Mbps
THREAT
PROTECTION
1,250 Mbps
LATENCY
(64 BYTE UDP)
6 µs
Performance
FIREWALL
35,000 Mbps
TLS INSPECTION
1,450 Mbps
FIREWALL IMIX
20,000 Mbps
IPS
7,000 Mbps
IPSEC VPN
3,500 Mbps
NGFW
6,300 Mbps
THREAT
PROTECTION
1,400 Mbps
LATENCY
(64 BYTE UDP)
4 µs
Performance
FIREWALL
38,000 Mbps
TLS INSPECTION
2,470 Mbps
FIREWALL IMIX
22,000 Mbps
IPS
9,820 Mbps
IPSEC VPN
5,200 Mbps
NGFW
9,000 Mbps
THREAT
PROTECTION
2,000 Mbps
LATENCY
(64 BYTE UDP)
4 µs
Performance
FIREWALL
40,000 Mbps
TLS INSPECTION
3,130 Mbps
FIREWALL IMIX
24,500 Mbps
IPS
13,440 Mbps
IPSEC VPN
6,500 Mbps
NGFW
12,500 Mbps
THREAT
PROTECTION
2,770 Mbps
LATENCY
(64 BYTE UDP)
4 µs
Performance
FIREWALL
75,000 Mbps
TLS INSPECTION
8,000 Mbps
FIREWALL IMIX
33,000 Mbps
IPS
25,000 Mbps
IPSEC VPN
9,800 Mbps
NGFW
23,000 Mbps
THREAT
PROTECTION
4,800 Mbps
LATENCY
(64 BYTE UDP)
3 µs
Performance
FIREWALL
80,000 Mbps
TLS INSPECTION
10,600 Mbps
FIREWALL IMIX
37,000 Mbps
IPS
35,690 Mbps
IPSEC VPN
16,000 Mbps
NGFW
30,000 Mbps
THREAT
PROTECTION
8,390 Mbps
LATENCY
(64 BYTE UDP)
4 µs
Connectivity
ETHERNET INTERFACES (FIXED)
8 x GE copper
2 x SFP Fiber*
BYPASS PORT PAIRS (FIXED)
1
MAX. PORT DENSITY (INCL. MODULES)
18
MANAGEMENT INTERFACES
1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
2 x USB 3.0 (front)
1 x USB 2.0 (rear)
MAX. POE (USING FLEXI PORT MODULE)
1 Module: 4 Ports, 60W max.
Connectivity
ETHERNET INTERFACES (FIXED)
8 x GE copper
2 x SFP Fiber*
BYPASS PORT PAIRS (FIXED)
1
MAX. PORT DENSITY (INCL. MODULES)
18
MANAGEMENT INTERFACES
1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
2 x USB 3.0 (front)
1 x USB 2.0 (rear)
MAX. POE (USING FLEXI PORT MODULE)
1 Module: 4 Ports, 60W max.
Connectivity
ETHERNET INTERFACES (FIXED)
8 x GE copper
2 x SFP Fiber*
2 x SFP+ 10 GE Fiber*
BYPASS PORT PAIRS (FIXED)
1
MAX. PORT DENSITY (INCL. MODULES)
20
MANAGEMENT INTERFACES
1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
2 x USB 3.0 (front)
1 x USB 2.0 (rear)
MAX. POE (USING FLEXI PORT MODULE)
1 Module: 4 Ports, 60W max.
Connectivity
ETHERNET INTERFACES (FIXED)
8 x GE copper
2 x SFP Fiber*
2 x SFP+ 10 GE Fiber*
BYPASS PORT PAIRS (FIXED)
1
MAX. PORT DENSITY (INCL. MODULES)
20
MANAGEMENT INTERFACES
1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
2 x USB 3.0 (front)
1 x USB 2.0 (rear)
MAX. POE (USING FLEXI PORT MODULE)
1 Module: 4 Ports, 60W max.
Connectivity
ETHERNET INTERFACES (FIXED)
4 x GE copper
4 x 2.5 GE copper
4 x SFP+ 10 GE Fiber*
BYPASS PORT PAIRS (FIXED)
2
MAX. PORT DENSITY (INCL. MODULES)
28
MANAGEMENT INTERFACES
1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
2 x USB 3.0 (front)
MAX. POE (USING FLEXI PORT MODULE)
2 Modules: 4 Ports, 60W max. per module
Connectivity
ETHERNET INTERFACES (FIXED)
4 x GE copper
4 x 2.5 GE copper
4 x SFP+ 10 GE Fiber*
BYPASS PORT PAIRS (FIXED)
2
MAX. PORT DENSITY (INCL. MODULES)
28
MANAGEMENT INTERFACES
1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
2 x USB 3.0 (front)
MAX. POE (USING FLEXI PORT MODULE)
2 Modules: 4 Ports, 60W max. per module
Modularity
FLEXI PORT SLOTS
1
OTHER OPTIONAL ADD-ON MODULES
SFP VDSL modem
Transceivers
FLEXI PORT MODULES (OPTIONAL)
8 port GE copper
8 port GE SFP Fiber*
4 port 10GE SFP+ Fiber*
4 port GE copper bypass (2 pairs)
4 port GE copper PoE + 4 port GE copper
4 port 2.5 GE copper PoE
Modularity
FLEXI PORT SLOTS
1
OTHER OPTIONAL ADD-ON MODULES
SFP VDSL modem
Transceivers
FLEXI PORT MODULES (OPTIONAL)
8 port GE copper
8 port GE SFP Fiber*
4 port 10GE SFP+ Fiber*
4 port GE copper bypass (2 pairs)
4 port GE copper PoE + 4 port GE copper
4 port 2.5 GE copper PoE
Modularity
FLEXI PORT SLOTS
1
OTHER OPTIONAL ADD-ON MODULES
SFP VDSL modem
Transceivers
FLEXI PORT MODULES (OPTIONAL)
8 port GE copper
8 port GE SFP Fiber*
4 port 10GE SFP+ Fiber*
4 port GE copper bypass (2 pairs)
4 port GE copper PoE + 4 port GE copper
4 port 2.5 GE copper PoE
Modularity
FLEXI PORT SLOTS
1
OTHER OPTIONAL ADD-ON MODULES
SFP VDSL modem
Transceivers
FLEXI PORT MODULES (OPTIONAL)
8 port GE copper
8 port GE SFP Fiber*
4 port 10GE SFP+ Fiber*
4 port GE copper bypass (2 pairs)
4 port GE copper PoE + 4 port GE copper
4 port 2.5 GE copper PoE
Modularity
FLEXI PORT SLOTS
2
OTHER OPTIONAL ADD-ON MODULES
SFP VDSL modem
Transceivers
FLEXI PORT MODULES (OPTIONAL)
8 port GE copper
8 port GE SFP Fiber*
4 port 10GE SFP+ Fiber*
4 port GE copper bypass (2 pairs)
4 port GE copper PoE + 4 port GE copper
4 port 2.5 GE copper PoE
Modularity
FLEXI PORT SLOTS
2
OTHER OPTIONAL ADD-ON MODULES
SFP VDSL modem
Transceivers
FLEXI PORT MODULES (OPTIONAL)
8 port GE copper
8 port GE SFP Fiber*
4 port 10GE SFP+ Fiber*
4 port GE copper bypass (2 pairs)
4 port GE copper PoE + 4 port GE copper
4 port 2.5 GE copper PoE
Redundancy
2ND POWER SUPPLY
optional external
DUAL SSD / RAID
n/a
Redundancy
2ND POWER SUPPLY
optional external
DUAL SSD / RAID
n/a
Redundancy
2ND POWER SUPPLY
optional external
DUAL SSD / RAID
n/a
Redundancy
2ND POWER SUPPLY
optional external
DUAL SSD / RAID
n/a
Redundancy
2ND POWER SUPPLY
optional external
DUAL SSD / RAID
n/a
Redundancy
2ND POWER SUPPLY
optional external
DUAL SSD / RAID
Included
SW RAID-1 support
Notes:* Transceivers sold separately
Notes:* Transceivers sold separately
Notes:* Transceivers sold separately
Notes:* Transceivers sold separately
Notes:* Transceivers sold separately
Notes:* Transceivers sold separately
Specs and Images Specs and Images Specs and Images Specs and Images Specs and Images Specs and Images
Performance Test Methodology
General Maximum throughput measured under ideal test conditions using industry standard Keysight-Ixia BreakingPoint test tools. Actual performance may vary depending on network conditions and activated services.
Firewall Measured using HTTP traffic and 512 KB response size
Firewall IMIX UDP throughput based on a combination of 66 byte, 570 byte and 1518 byte packet sizes
IPS Measured with IPS with HTTP traffic using default IPS ruleset and 512 KB object size.      
IPsec VPN HTTP throughput using multiple tunnels and 512 KB HTTP response size
TLS inspection Performance measured with IPS with HTTPS sessions and different cipher suites.
Threat Protection Measured with Firewall, IPS, Application Control, and malware prevention enabled using HTTP 200 KB response size

Looking for the XG Series firewall appliances?

XG Series

Showing model XGS 4300

Product Highlights

  • Dual processor architecture supports all key protection features without compromising performance

  • A wide selection of copper and fiber ports plus various management interfaces are built-in on every model

  • Fixed LAN bypass ports are on every model to support various deployment scenarios

  • Modular Flexi Port expansion bay(s) on every model to adapt connectivity

  • Second power supply option for all models

  • Optional Power-over-Ethernet Flexi Port modules are centrally powered and so benefit from power redundancy when using the 2nd power option

  • Rackmount kit included

Accessories

Flexi Port Modules

For all XGS 1U models

Our 1U models come with one or more expansion bays to flexibly add to the diverse range of built-in interfaces on every box. Changes in your environment, your workforce, or your edge infrastructure may require additional fiber ports or a change in your connectivity. With Flexi Port modules, you have a cost-effective way to adapt your appliance, rather than having to purchase new hardware mid-term.

Transceivers

Sophos offers a range of transceivers to use in the SFP and SFP+ interfaces on your appliance or Flexi port module.

A list of compatible third-party transceivers can be found in our knowledge base article.

External Redundant Power Supply

For XGS 2xxx, 3xxx, 4300

All of our 1U models offer an optional second power supply for redundancy. The external power supply can be connected to the rear of the appliance.

When using this power supply with either the XGS 2100 or 2300, we suggest that you purchase rackmount rails (rather than using the rackmount ears supplied) for a more stable deployment in your data center.

Internal Redundant Power Supply

For XGS 4500 only

The second power supply for the XGS 4500 provides a simple way to add redundancy to our most powerful 1U unit.

For added reliability, the XGS 4500 also offers a second integrated SSD (RAID).

XGS Series 1U Accessories Matrix

Model Redundant Power Redundant SSD VDSL SFP Modem Flexi Port Bays Flexi Port Modules Rackmount Kit
XGS 2100 optional external n/a optional 1 8 Port 1G copper

8 Port 1G SFP

4 Port 10G SFP+

4 Port 1G copper bypass

4 port 1G copper PoE + 4 port 1G copper

4 port 2.5G copper PoE		 Rackmount ears incl.
Optional sliding rails
XGS 2300 optional external n/a optional 1 Rackmount ears incl.
Optional sliding rails
XGS 3100 optional external n/a optional 1 Rackmount ears incl.
Optional sliding rails
XGS 3300 optional external n/a optional 1 Rackmount ears incl.
Optional sliding rails
XGS 4300 optional external n/a optional 2 Sliding rails included
XGS 4500 optional internal included optional 2 Sliding rails included

XGS Series Next-Gen Firewall Appliances

Enterprise Edge: 2U Models

Distributed and growing enterprises who require maximum throughput for even the most complex network get no-compromise protection, performance, and business continuity with these next-gen firewalls. The new Xstream Flow Processors provide dedicated hardware acceleration to easily handle full-on protection for today’s encrypted, cloud-hosted applications and traffic. These models strike the perfect balance between port density and modularity, with a range of high-speed, built-in ports, plus additional high-density Flexi port modules available to extend connectivity even further.

All models are powered by a high-speed CPU plus a dedicated Xstream Flow Processor for hardware acceleration.

Compare XGS 2U Models

XGS 5500 XGS 6500
Performance
FIREWALL
100,000 Mbps
TLS INSPECTION
13,500 Mbps
FIREWALL IMIX
52,000 Mbps
IPS
40,000 Mbps
IPSEC VPN
21,600 Mbps
NGFW
38,000 Mbps
THREAT
PROTECTION
12,390 Mbps
LATENCY
(64 BYTE UDP)
5 µs
Performance
FIREWALL
115,000 Mbps
TLS INSPECTION
16,000 Mbps
FIREWALL IMIX
60,000 Mbps
IPS
48,000 Mbps
IPSEC VPN
26,000 Mbps
NGFW
46,500 Mbps
THREAT
PROTECTION
17,050 Mbps
LATENCY
(64 BYTE UDP)
5 µs
Connectivity
ETHERNET INTERFACES (FIXED)
8 x GE copper
8 x SFP+ 10 GE Fiber*
MANAGEMENT INTERFACES
1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB
BYPASS PORT PAIRS (FIXED)
2
OTHER I/O INTERFACES
2 x USB 3.0 (front)
MAX. PORT DENSITY (INCL. MODULES)
48
Connectivity
ETHERNET INTERFACES (FIXED)
8 x GE copper
12 x SFP+ 10 GE Fiber*
MANAGEMENT INTERFACES
1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB
BYPASS PORT PAIRS (FIXED)
2
OTHER I/O INTERFACES
2 x USB 3.0 (front)
MAX. PORT DENSITY (INCL. MODULES)
68
Modularity
FLEXI PORT SLOTS
2 + 1 for High-density module
FLEXI PORT MODULES (OPTIONAL)
8 port GE copper
8 port GE SFP Fiber*
4 port 10 GE SFP+ Fiber*
4 port GE copper bypass (2 pairs)
2 port 40 GE QSFP+ Fiber*
8 port 10 GE SFP+ Fiber*
High-density module: 12 port GE copper + 4 port 2.5 GE copper
OTHER OPTIONAL ADD-ON MODULES
SFP VDSL modem
Transceivers
Modularity
FLEXI PORT SLOTS
2 + 2 for High-density modules
FLEXI PORT MODULES (OPTIONAL)
8 port GE copper
8 port GE SFP Fiber*
4 port 10 GE SFP+ Fiber*
4 port GE copper bypass (2 pairs)
2 port 40 GE QSFP+ Fiber*
8 port 10 GE SFP+ Fiber*
High-density module: 12 port GE copper + 4 port 2.5 GE copper
OTHER OPTIONAL ADD-ON MODULES
SFP VDSL modem
Transceivers
Redundancy
POWER SUPPLY
2 x hot-swap internal
DUAL SSD
Included
HW RAID built into CPU
Redundancy
POWER SUPPLY
2 x hot-swap internal
DUAL SSD
Included
HW RAID built into CPU
Notes:* Transceivers sold separately
Notes:* Transceivers sold separately
Specs and Images Specs and Images
Performance Test Methodology
General Maximum throughput measured under ideal test conditions using industry standard Keysight-Ixia BreakingPoint test tools. Actual performance may vary depending on network conditions and activated services.
Firewall Measured using HTTP traffic and 512 KB response size
Firewall IMIX UDP throughput based on a combination of 66 byte, 570 byte and 1518 byte packet sizes
IPS Measured with IPS with HTTP traffic using default IPS ruleset and 512 KB object size.      
IPsec VPN HTTP throughput using multiple tunnels and 512 KB HTTP response size
TLS inspection Performance measured with IPS with HTTPS sessions and different cipher suites.
Threat Protection Measured with Firewall, IPS, Application Control, and malware prevention enabled using HTTP 200 KB response size

Looking for the XG Series firewall appliances?

XG Series

Showing model XGS 6500

Product Highlights

  • Dual processor architecture with dedicated co-processor for hardware acceleration

  • Built to power all key threat protection features such as TLS inspection, sandboxing and AI-driven threat analysis

  • Excellent price to performance ratio

  • A range of standard 1 GE copper plus 8 to 12 SFP+ 10GE Fiber interfaces on-board

  • Optional standard and high-density Flexi Port modules available to extend and adapt connectivity

  • Maximum port density of 48 (XGS 5500) or 68 (XGS 6500) using optional modules

  • Redundancy features on all models ensure business continuity

Accessories

Flexi Port Modules

For all XGS 2U models

Our 2U models come with two standard Flexi Port expansion bays plus one or two bays for high-density modules to flexibly add to the diverse range of built-in interfaces on every box. Changes in your environment, your workforce, or your edge infrastructure may require additional fiber ports or a change in your connectivity. With Flexi Port modules, you have a cost-effective way to adapt your appliance, rather than having to purchase new hardware mid-term.

Transceivers

A list of compatible third-party transceivers can be found in our knowledge base article.

Redundancy

All of our 2U appliances come equipped with hot-swappable components to ensure maximum uptime:

  • Dual SSDs

  • Dual Power supplies

Rackmount Kits

All 2U rackmount appliances are supplied with rackmount sliding rails.

XGS Series 2U Accessories Matrix

Model Redundant Power Redundant SSD VDSL SFP Modem Flexi Port Bays Flexi Port Modules Rackmount Kit
XGS 5500 included included optional 2 + 1 for High-density module 8 Port 1G copper

8 Port 1G SFP

4 Port 10G SFP+

4 Port 1G copper bypass

2 port 40G QSFP+

8 port 10G SFP+

High-Density Flexi Port module: 12 Port 1G copper + 4 Port 2.5G copper 		Sliding rails included
XGS 6500 included included optional 2 + 2 for High-density modules Sliding rails included

Resources

downloads
DOWNLOADS
play
VIDEOS

Sophos News

Firewall Customer Resource Center