XG Series Firewall Appliances

Our XG Series hardware appliances are purpose-built with the latest multi-core Intel technology, generous RAM provisioning, and solid-state storage. Whether you’re protecting a small business or a large datacenter, you’re getting industry leading price:performance, and the ultimate in flexibility, connectivity and reliability in every form factor.

Desktop: SMB and Branch Office

Price:performance and connectivity for branch offices, retail and small businesses.

XG 86 Rev.1
XG 106 Rev.1
XG 115 Rev.3
XG 125 Rev.3
XG 135 Rev.3
Compare Models

1U: Distributed Edge

Flexibility to adapt to the needs of mid-sized and distributed organizations.

XG 210 Rev.3
XG 230 Rev.2
XG 310 Rev.2
XG 330 Rev.2
XG 430 Rev.2
XG 450 Rev.2
Compare Models

2U: Performance and Data Center

Optimal performance and redundancy for the distributed enterprise.

XG 550 Rev.2
XG 650 Rev.2
XG 750 Rev.2
Compare Models

SD-WAN and Wi-Fi Hardware

Sophos offers add-on devices to flexibly connect your branch offices, remote sites and users.

SD-RED Remote Ethernet Devices

Plug and Play Remote Ethernet Devices to connect branch offices and remote sites.

SD-RED 20
SD-RED 60
Compare Models

APX Series Access Points

Manage, secure and control your Wi-Fi networks from your XG .

APX 120
APX 320
APX 530
APX 740
Compare Models

XG Desktop Models:
SMB and Branch Office

Our Desktop firewall appliances support all the security features of our larger appliances but in a compact form factor and at a fraction of the cost. Whether you’re looking for an all-in-one security solution for your branch office, or need next-gen firewall security for your growing business, our range of models can offer you many features not available anywhere else.

- Select up to 3 to compare -

XG 86 / 86w Rev.1

Performance

3.1 GBPS

350 MBPS

225 MBPS

480 MBPS

145 MBPS

75 MBPS

connectivity

4 x GE copper

802.11ac, 2x2 MIMO, 2 external antennas, single radio 2.4 or 5 GHz

modularity

n/a

n/a

redundancy

n/a

See More Specs

XG 86 / 86w Rev.1

XG 106 / 106w Rev.1

Performance

3.55 GBPS

480 MBPS

330 MBPS

490 MBPS

150 MBPS

75 MBPS

connectivity

4 x GE copper
1 x SFP* (shared)

802.11ac, 2x2 MIMO,
2 external antennas, single radio
2.4 or 5 GHz

modularity

n/a

SFP DSL Modem
SFP transceivers

redundancy

Optional 2nd power supply

See More Specs

XG 106 / 106w Rev.1

XG 115 / 115w Rev.3

Performance

4 GBPS

1 GBPS

560 MBPS

950 MBPS

375 MBPS

130 MBPS

connectivity

4 x GE copper
1 x SFP* (shared)

802.11ac, 2x2 MIMO,
2 external antennas, single radio
2.4 or 5 GHz

modularity

n/a

SFP DSL Modem
SFP transceivers

redundancy

Optional 2nd power supply

See More Specs

XG 115 / 115w Rev.3

XG 125 / 125w Rev.3

Performance

7 GBPS

1.1 GBPS

1.5 GBPS

1.53 GBPS

400 MBPS

170 MBPS

connectivity

8 x GE copper
1 x SFP*

802.11ac, 3x3 MIMO, 3 external antennas, single radio 2.4 or 5 GHz

modularity

1

SFP DSL Modem
3G/4G Module
SFP transceivers

redundancy

Optional 2nd power supply

See More Specs

XG 125 / 125w Rev.3

XG 135 / 135w Rev.3

Performance

7.5 GBPS

1.2 GBPS

1.7 GBPS

1.9 GBPS

600 MBPS

210 MBPS

connectivity

8 x GE copper
1 x SFP*

802.11ac, 3x3 MIMO, 3 external antennas, single radio 2.4 or 5 GHz
(Add-on Module also available for 135w only)

modularity

1

SFP DSL Modem
3G/4G Module
2nd Wi-Fi Module (135w only)
SFP transceivers

redundancy

Optional 2nd power supply

See More Specs

XG 135 / 135w Rev.3

Product Highlights

  • All features supported on every XG 1xx model and most on XG 86
  • Every model available with optional integrated 802.11ac Wi-Fi
  • 2nd power supply option for all XG 1xx models
  • Expansion bay on all XG 125/135 models for 3G/4G module
  • Optional 2nd Wi-Fi radio module on 135w model
  • SFP port, e.g. for optional DSL modem, on all XG 1xx appliances

Like what you see?

Get Pricing

Accessories

3G/4G Connectivity

For 125/135(w) Rev.3 models only

Our Desktop appliances are often deployed in remote locations where flexible connectivity options are essential. The expansion bay on our XG 125 and 135 models provides the option to add a 3G/4G module to your appliance. The module can be securely mounted and is then managed from your XG Firewall console.

  • Better performance with the latest standards supported (LTE cat-6, up to 300 Mbps download/50Mbps upload)
  • Fully protected from theft or damage
  • Our optional 3G/4G module comes in two different versions – Europe/Americas and Asia-Pacific

DSL Modem

For 1xx Rev.3 and 106 Rev.1 models only

Use the SFP port on all of our XG 1xx models to add DSL connectivity to your appliance. Get rid of your router and connect your appliance directly to the DSL socket on your wall. This means one less piece of equipment to manage and a fully integrated solution. Our optional DSL modem supports most VDSL2 standards with download/upload speeds up to 100 Mbps.

2nd Wi-Fi Radio

For 135w Rev.3 models only

Improve the Wi-Fi coverage and performance in your office by adding a 2nd Wi-Fi radio to your XG 135w appliance. Adding a second radio to our models with built-in Wi-Fi, allows you to broadcast the 2.4 and 5 GHz bands simultaneously and adds two additional antennas for an overall better Wi-Fi experience.

Rackmount Kits

For all Desktop models

We offer optional rackmount kits for all of our Desktop models, giving you the possibility to mount even the smallest Sophos XG Series appliance in your existing rack. The appliance can be mounted facing forwards or backwards for easier acces to the Ethernet ports.

Redundancy

For 1xx(w) Rev.3 and 106(w) Rev.1 only

Redundancy features on Desktop appliances are rare but at Sophos, we know how important it is to keep things running, no matter what size of business you have. The second power supply option provides you with additional peace of mind, should the first one fail.

* Transceivers sold separately

XG 1U Models: Distributed Edge

Our XG Series 1U mid-range firewall appliances are the ideal solution for many medium-sized and distributed organizations. With their flexible connectivity options, they are designed to adapt as your environment changes. All models come with a range of copper and fibre ports on-board and offer a broad range of accessories to provide power redundancy and options to connect external devices.

- Select up to 3 to compare -

XG 210 Rev.3

Performance

29 GBPS

3.2 GBPS

1.92 GBPS

4.2 GBPS

800 MBPS

230 MBPS

connectivity

6x GbE copper
2x GbE SFP

modularity

1

8 port GE copper
8 port GE SFP
2 port 10 GE SFP+
4 port 10 GE SFP+
2 port 40 GE QSFP+
4 port GE copper
LAN bypass
4 port GE PoE
8 port GE PoE

redundancy

Optional External

See More Specs

XG 210 Rev.3

XG 230 Rev.2

Performance

32 GBPS

4.5 GBPS

2.1 GBPS

4.9 GBPS

1 GBPS

280 MBPS

connectivity

6x GbE copper
2x GbE SFP

modularity

1

8 port GE copper
8 port GE SFP
2 port 10 GE SFP+
4 port 10 GE SFP+
2 port 40 GE QSFP+
4 port GE copper
LAN bypass
4 port GE PoE
8 port GE PoE

redundancy

Optional External

See More Specs

XG 230 Rev.2

XG 310 Rev.2

Performance

35 GBPS

5.3 GBPS

3.05 GBPS

7.2 GBPS

1.55 GBPS

370 MBPS

connectivity

8x GbE copper
2x GbE SFP
2x 10 GbE SFP+

modularity

1

8 port GE copper
8 port GE SFP
2 port 10 GE SFP+
4 port 10 GE SFP+
2 port 40 GE QSFP+
4 port GE copper
LAN bypass
4 port GE PoE
8 port GE PoE

redundancy

Optional External

See More Specs

XG 310 Rev.2

XG 330 Rev.2

Performance

38 GBPS

9.3 GBPS

3.94 GBPS

10 GBPS

2.1 GBPS

560 MBPS

connectivity

8x GbE copper
2x GbE SFP
2x 10 GbE SFP+

modularity

1

8 port GE copper
8 port GE SFP
2 port 10 GE SFP+
4 port 10 GE SFP+
2 port 40 GE QSFP+
4 port GE copper
LAN bypass
4 port GE PoE
8 port GE PoE

redundancy

Optional External

See More Specs

XG 330 Rev.2

XG 430 Rev.2

Performance

55 GBPS

10 GBPS

5 GBPS

10.8 GBPS

2.2 GBPS

600 MBPS

connectivity

8x GbE copper
2x 10 GbE SFP+

modularity

2

8 port GE copper
8 port GE SFP
2 port 10 GE SFP+
4 port 10 GE SFP+
2 port 40 GE QSFP+
4 port GE copper
LAN bypass
4 port GE PoE
8 port GE PoE

redundancy

Optional External

See More Specs

XG 430 Rev.2

XG 450 Rev.2

Performance

65 GBPS

13.9 GBPS

6.1 GBPS

14.7 GBPS

3.4 GBPS

770 MBPS

connectivity

8x GbE copper
2x 10 GbE SFP+

modularity

2

8 port GE copper
8 port GE SFP
2 port 10 GE SFP+
4 port 10 GE SFP+
2 port 40 GE QSFP+
4 port GE copper
LAN bypass
4 port GE PoE
8 port GE PoE

redundancy

Optional internal

See More Specs

XG 450 Rev.2

Product Highlights

  • All software features supported on every XG 2xx, 3xx and 4xx model
  • Copper and fiber ports on-board
  • LAN bypass ports on every model
  • Modular Flexi Port expansion bay(s) on every model to adapt connectivity
  • 2nd power supply option for all models

Like what you see?

Get Pricing

Accessories

Our optional accessories allow you to enhance your appliance and make it the perfect fit for your individual environment and connectivity requirements.

FleXi Port Modules

Our 1U appliances come with one or two expansion bays to flexibly add to your built-in connectivity. If there are changes in your environment, and you require additional fiber ports or a change in your connectivity, you can easily add a flexi port module as a very cost-effective way of adapting your appliance, rather than having to purchase new hardware mid-term.

The following Flexi Port modules are available for our current 1U appliances

  XG 210 Rev. 3 XG 230 Rev. 2 XG 310 Rev. 2 XG 330 Rev. 2 XG 430 Rev. 2 XG 450 Rev. 2 Previous
XG 1U Models
8 Port 1GE Copper
8 Port 1GE Fiber SFP
2 Port 10GE Fiber SFP+
4 Port 10GE Fiber SFP+
2 Port 40GE QSFP+
4 Port PoE
8 Port PoE
4 Port copper LAN Bypass

A list of compatible third-party transceivers can be found in our knowledgebase article

Redundancy

External Redundant Power Supply

For 210 Rev.3 and 230, 3xx and 430 Rev.2 models only

All of our 1U models offer an optional 2nd power supply for redundancy. For the XG 2xx, 3xx and the 430 models, it is an external power supply which can be connected to the rear of the appliance.

When using this power supply with either the XG 210 or 230, we suggest that you use rackmount rails for a more stable deployment in your datacenter.

Rackmount Kits

All of our 1U rackmount appliances come with either rackmount ears (210/230) or rackmount sliding rails (3xx and 4xx) out of the box. If you’re using the external 2nd power supply with your XG 2xx unit, we would recommend that you purchase rackmount rails for a more stable implementation in your rack.

Internal Redundant Power Supply

For 450 Rev.1 and Rev.2

The second power supply for the XG 450 provides a simple way to add redundancy to our most powerful 1U unit.

For added peace of mind, the XG 450 also offers a second integrated SSD (RAID).

* Transceivers/Mini GBICs for all SFP, SFP+ and QSFP+ interfaces need to be purchased separately.

XG 2U Models:
Performance and Data Center

Our 2U high-end firewall appliances come equipped to provide protection for larger distributed organizations and data center environments. They offer the latest high-performance technology and the ultimate in flexibility to meet the most demanding networking requirements.

- Select up to 3 to compare -

XG 550 Rev.2

Performance

75 GBPS

15.3 GBPS

8.4 GBPS

17 GBPS

6 GBPS

1 GBPS

connectivity

All models supplied with one 8x 1 GE copper module

modularity

4

8 port GE copper
8 port GE SFP
2 port 10 GE SFP+
4 port 10 GE SFP+
2 port 40 GE QSFP+
4 port SFP plus 4
port GE copper
LAN bypass

redundancy

Dual SSDs and Power Supplies, swappable fans

See More Specs

XG 550 Rev.2

XG 650 Rev.2

Performance

85 GBPS

18 GBPS

9 GBPS

20.25 GBPS

7.7 GBPS

1.35 GBPS

connectivity

All models supplied with one 8x 1 GE copper module

modularity

6

8 port GE copper
8 port GE SFP
2 port 10 GE SFP+
4 port 10 GE SFP+
2 port 40 GE QSFP+
4 port SFP plus 4
port GE copper
LAN bypass

redundancy

Dual SSDs and Power Supplies, swappable fans

See More Specs

XG 650 Rev.2

XG 750 Rev.2

Performance

100 GBPS

19.2 GBPS

11 GBPS

23 GBPS

9.4 GBPS

1.4 GBPS

connectivity

All models supplied with one 8x 1 GE copper module

modularity

8

8 port GE copper
8 port GE SFP
2 port 10 GE SFP+
4 port 10 GE SFP+
2 port 40 GE QSFP+
4 port SFP plus 4
port GE copper
LAN bypass

redundancy

Dual SSDs and Power Supplies, swappable fans

See More Specs

XG 750 Rev.2

Product Highlights

  • Proven best price-performance for XG 750 in NSS Labs test
  • Every XG 550, 650 and 750 model supplied with one default Flexi Port module
  • A range of Flexi Port expansion bays available to adapt connectivity
  • Hot-swappable redundancy features on all models ensure business continuity

Like what you see?

Get Pricing

Accessories

Our optional accessories allow you to enhance your appliance and make it the perfect fit for your individual environment and connectivity requirements.

FleXi Port Modules

Our 2U appliances come with four (XG 550), six (XG 650) or eight (XG 750) Flexi Port expansion bays allowing you to tailor your connectivity to your environment over time. If there are changes in your environment, and you require additional fiber ports or a change in your connectivity, you can easily add a flexi port module as a very cost-effective way of adapting your appliance, rather than having to purchase new hardware mid-term.

The following Flexi Port modules are available for our current 2U appliances

  XG 550Rev. 2 XG 650 Rev. 2 XG 750 Rev. 2 XG 750 Rev. 1 XG 550/650 Rev. 1
8 Port 1GE Copper
8 Port 1GE Fiber SFP
2 Port 10GE Fiber SFP+
4 Port 10GE Fiber SFP+
2 Port 40GE Fiber QSPF+
4 Port SFP / 4 Port Copper LAN Bypass

A list of compatible third-party transceivers can be found in our knowledgebase article

Redundancy

All of our 2U appliances come equipped with hot-swappable components for redundancy:

  • Dual SSDs
  • Dual Power supplies
  • Swappable fans

Rackmount Kits

All 2U rackmount appliances are supplied with rackmount sliding rails.

* Transceivers/Mini GBICs for all SFP, SFP+ and QSFP+ interfaces need to be purchased separately.

XG Series Firewall Appliances

Our XG Series hardware appliances are purpose-built with the latest multi-core Intel technology, generous RAM provisioning, and solid-state storage. Whether you’re protecting a small business or a large datacenter, you’re getting industry leading price:performance, and the ultimate in flexibility, connectivity and reliability in every form factor.

NSS Labs Recommended
Learn More  

XG Desktop Models: SMB and Branch Office

Desktop Models Firewall
Throughput
NGFW
Throughput
IPSEC VPN
Throughput
IPS
Throughput
Threat Protection
Throughput
Ethernet
Interfaces
Wi-Fi Option
XG 86/86w
Rev.1
3.1 GBPS 350 MBPS 225 MBPS 480 MBPS 145 MBPS 4 x GE copper 802.11ac, 2x2 MIMO,
2 external antennas,
single radio 2.4 or 5 GHz
XG 106/106w
Rev.1
3.55 GBPS 400 MBPS 330 MBPS 490 MBPS 150 MBPS 4 x GE copper
1 x SFP* (shared)
802.11ac, 2x2 MIMO,
2 external antennas,
single radio 2.4 or 5 GHz
XG 115/115w
Rev.3
4 GBPS 1 GBPS 560 MBPS 950 MBPS 375 MBPS 4 x GE copper
1 x SFP* (shared)
802.11ac, 2x2 MIMO,
2 external antennas,
single radio 2.4 or 5 GHz
XG 125/125w
Rev.3
7 GBPS 1.275 GBPS 1.5 GBPS 1.53 GBPS 400 MBPS 8 x GE copper
1 x SFP*
802.11ac, 3x3 MIMO,
3 external antennas,
single radio 2.4 or 5 GHz
XG 135/135w
Rev.3
7.5 GBPS 1.8 GBPS 1.7 GBPS 1.9 GBPS 600 MBPS 8 x GE copper
1 x SFP*
802.11ac, 3x3 MIMO,
3 external antennas,
single radio 2.4 or 5 GHz
(Add-on Module also
available for 135w only)

XG 1U Models: Distributed Edge

XG 1U Models Firewall
Throughput
NGFW
Throughput
IPSEC VPN
Throughput
IPS
Throughput
Threat Protection
Throughput
Ethernet
Interfaces
Flexi Port
Slots
XG 210
Rev.3
29 GBPS 3.2 GBPS 1.92 GBPS 4.2 GBPS 800 MBPS (6) GbE Copper
(2) GbE SFP
1
XG 230
Rev.2
32 GBPS 4.5 GBPS 2.1 GBPS 4.9 GBPS 1 GBPS (6) GbE Copper
(2) GbE SFP
1
XG 310
Rev.2
35 GBPS 5.3 GBPS 3.05 GBPS 7.2 GBPS 1.55 GBPS (8) GbE Copper
(2) GbE SFP
(2) 10 GbE SFP+
1
XG 330
Rev.2
38 GBPS 9.3 GBPS 3.94 GBPS 10 GBPS 2.1 GBPS (8) GbE Copper
(2) GbE SFP
(2) 10 GbE SFP+
1
XG 430
Rev.2
55 GBPS 10 GBPS 5 GBPS 10.8 GBPS 2.2 GBPS (8) GbE Copper
(2) 10 GbE SFP+
2
XG 450
Rev.2
65 GBPS 13.9 GBPS 6.1 GBPS 14.7 GBPS 3.4 GBPS (8) GbE Copper
(2) 10 GbE SFP+
2
Flexi Port Modules for All 1U Models (optional) 8 Port GE Copper
8 Port GE SFP
2 Port 10 GE SFP+
4 Port 10 GE SFP+
2 Port 40 GE QSFP+
4 Port GE Copper LAN bypass
4 Port GE PoE
8 Port GE PoE

XG 2U Models: Performance and Data Center

XG 2U Models Firewall
Throughput
NGFW
Throughput
IPSEC VPN
Throughput
IPS
Throughput
Threat Protection
Throughput
Ethernet
Interfaces
Flexi Port
Slots
XG 550
Rev.2
75 GBPS 15.3 GBPS 8.5 GBPS 17 GBPS 6 GBPS (8) GbE Copper
(default module)
4
XG 650
Rev.2
85 GBPS 18 GBPS 9 GBPS 20.25 GBPS 7.7 GBPS (8) GbE Copper
(default module)
6
XG 750
Rev.2
100 GBPS 19.2 GBPS 12.5 GBPS 23 GBPS 9.4 GBPS (8) GbE Copper
(default module)
8
Flexi Port Modules for All 2U Models (optional) 8 Port GE Copper
8 Port GE SFP
2 Port 10 GE SFP+
4 Port 10 GE SFP+
2 Port 40 GE QSFP+

* SFP, SFP+ and QSFP+ transceivers must be purchased separately

Test Methodology

General: Max. throughput measured using SFOS v18 under ideal test conditions using industry standard Keysight-Ixia Breaking point test tools. Actual performance may vary depending on network conditions and activated services.

FW: Measured using HTTP traffic and 512KB response size.

FW IMIX: UDP throughput based on a combination of 66 byte, 570 byte and 1518 byte packet sizes.

NGFW: Measured with IPS and Application Control enabled with HTTP traffic using default IPS ruleset and 512KB object size.

IPS: Measured with IPS with HTTP traffic using default IPS ruleset and 512KB object size.

IPSEC VPN: HTTP throughput using multiple tunnels and 512KB HTTP response size.

Threat Protection: Measured with Firewall, IPS, Application Control, and Malware prevention enabled using HTTP 200KB response size.

Xstream SSL decryption: Measured with IPS and Threat Protection enabled using HTTP traffic with 192KB response size.

SD-RED

Model Name
Capacity
Maximum Throughput 250 Mbps 850 Mbps
Physical Interfaces (Built-in)
LAN Interfaces 4 x 10/100/1000 Base-TX (1 GbE Copper) 4 x 10/100/1000 Base-TX (1 GbE Copper)
WAN Interfaces 1 x 10/100/1000 Base-TX (shared with SFP) 2 x 10/100/1000 Base-TX (WAN1 shared port with SFP)
SFP Interfaces 1x SFP Fiber (shared port with WAN) 1x SFP Fiber (shared port with WAN1)
Power-over Ethernet Ports None 2 PoE Ports (total power 30W)
USB Ports 2 x USB 3.0 (front and rear) 2 x USB 3.0 (front and rear)
COM Ports 1 x Micro-USB 1 x Micro-USB
Optional Connectivity
Modular Bay 1 (for use with optional Wi-Fi OR 4G/LTE Card) 1 (for use with optional Wi-Fi OR 4G/LTE Card)
Optional Wi-Fi Module 802.11 a/b/g/n/ac Wave 1 (Wi-Fi 5) dual-band capable
2x2 MIMO 2 antennas
802.11 a/b/g/n/ac Wave 1 (Wi-Fi 5) dual-band capable
2x2 MIMO 2 antennas
Optional 3G/4G LTE Module  MC7430/MC7455 Sierra Wireless Card MC7430/MC7455 Sierra Wireless Card
Optional VDSL Modem Optional SFP Modem (not yet supported) Optional SFP Modem (not yet supported)
Physical Specifications
Dimensions 225 x 44 x 150 (w*h*d) mm
8.86 x 1.73 x 5.91 (w*h*d) inches
225 x 44 x 150 (w*h*d) mm
8.86 x 1.73 x 5.91 (w*h*d) inches
Weight 0.9 kg/1.8 kg (1.98 lbs/3.97 lbs) Unpacked/Packed 1.0 kg/2.2 kg (2.2 lbs/4.85 lbs) Unpacked/Packed
Power Supply Adapter AC Input: 110-240VAC @50-60 Hz
DC Output:  12V +/- 10%, 3.7A, 40W"
AC Input: 110-240VAC @50-60 Hz
DC Output:  12V +/- 10%, 6.95A, 75W
Power Redundancy Support Yes, optional 2nd power supply Yes, optional 2nd power supply
Power Consumption Idle: 6.1Watt/20.814 BTU
Full Load: 22.6Watt/77.114 BTU
Idle: 11.88 Watt/40.536 BTU
Full Load without PoE: 25.33 Watt/86.429 BTU
Full Load with PoE: 62.48 Watt/213.190 BTU
Noise level (average) Fanless Fanless
Temperature (operational) 0°C to 40°C (32°F to 104°F) 0°C to 40°C
Temperature (storage) -20°C to 70°C (-4°F to 158°F) -20°C to 70°C (-4°F to 158°F)
Humidity 10-90% RH, non-condensing 10-90% RH, non-condensing
Safety Regulations
Certifications (Safety, EMC, Radio) CE/FCC/IC/RCM/VCCI/CB/UL/CCC/KC/ANATEL CE/FCC/IC/RCM/VCCI/CB/UL/CCC/KC/ANATEL

APX Access Points

 
Deployment Indoor; desktop, wall, or ceiling mount.
Mounting Kits Included: Bracket for wall- and/or 15/16” T-bar or flat ceiling mount.
Included: Bracket for wall- and/or 15/16", 9/16", 3/8" T-bar ceiling-mount.
Optional: Kits for flat ceiling, plenum and suspend mount.
WLAN Standards
802.11 a/b/g/n/ac Wave 2
Radios 1x 2.4 GHz single band
1x 5 GHz single band
1x 2.4 GHz/5 GHz dual-band
1x 5 GHz single band
1x Bluetooth low energy (BLE)
1x 2.4 GHz single band
1x 5 GHz single band
1x Bluetooth low energy (BLE)
Antennas 2x internal dual-band antenna for Radio-1 and 2 2x internal dual-band antenna for Radio-1
2x internal 5 GHz antenna for Radio-2
1x internal 2.4 GHz antenna for BLE (for future use)
3x internal 2.4 GHz antenna for Radio-1
3x internal 5 GHz antenna for Radio-2
1x internal 2.4 GHz antenna for BLE (for future use)
4x internal 2.4 GHz antenna for Radio-1
4x internal 5 GHz antenna for Radio-2
1x internal 2.4 GHz antenna for BLE (for future use)
DFS
Performance 2x2:2 MU-MIMO 2x2:2 MU-MIMO 3x3:3 MU-MIMO 4x4:4 MU-MIMO
Max. Throughput (up to) 867 Mbps (5 GHz) + 300 Mbps (2.4 GHz) 867 Mbps (5 GHz) + 867 Mbps (5 GHz) 1300 Mbps (5 GHz) + 450 Mbps (2.4 GHz) 1733 Mbps (5 GHz) + 600 Mbps (2.4 GHz)
Interfaces 1x 12V DC-in
1x RJ45 10/100/1000 Ethernet w/PoE
1x RJ45 connector console serial port
1x RJ45 10/100/1000 Ethernet w/PoE
1x RJ45 connector console serial port
1x RJ45 10/100/1000 Ethernet port
1x RJ45 10/100/1000 Ethernet w/PoE
Power (Max.) 11.8 W 11.5 W 16.7 W 22.4 W
Power-over-Ethernet
(Min.)
PoE 802.3af PoE+ 802.3at
Dimensions 144x144x33.5 mm 155x155x38 mm 183x183x39 mm 195x195x43 mm
Weight 0.256 kg 0.474 kg 0.922 kg 1.012 kg
Certifications & Compliance** CB, UL, CE, FCC, ISED (IC), RCM, MIC, Anatel,
EN 60601-1-2 (Medical Equipment Directive)
CB, UL, CE, FCC, ISED (IC), RCM, MIC, NCC, Anatel (planned),
EN 60601-1-2 (Medical Equipment Directive)
Plenum-rated (UL2043)
CB, UL, CE, FCC, ISED (IC), RCM, Anatel (planned),
EN 60601-1-2 (Medical Equipment Directive)
Plenum-rated (UL2043)
CB, UL, CE, FCC, ISED (IC), RCM, Anatel (planned),
EN 60601-1-2 (Medical Equipment Directive)
Plenum-rated (UL2043)
Warranty
All APX models have a standard 5-year warranty included in the purchase price

** Not all models may be available in all regions, please check with your local supplier for details. APX models are currently not sold in China.

Wireless LAN and XG Firewall

XG Firewall provides several options for wireless LAN connectivity. As Wireless Protection is included in the Base License purchased with every appliance, there are no additional subscription costs to consider.

Desktop XG Series appliances are optionally available with Wi-Fi built-in. These are ideal as a low-cost, all-in-one solution for smaller offices and retail environments where network coverage is only required in a relatively limited space. See the XG Desktop section for further details.

Your XG Firewall can be used as a wireless controller to manage APX Series access points. These models are designed for a range of deployment scenarios and with 2x2, 3x3 and 4x4 models available at different price points, they can suit even the tightest budget.

- Select up to 3 to compare -

APX 120

STANDARD

802.11ac Wave 2
(Wi-Fi 5)

Performance

2x2:2 MU-MIMO

Dual-band Mode:
867 Mbps (5 GHz) + 300 Mbps (2.4 GHz)

DEPLOYMENT

Indoor

Basic wireless, low density, e.g. small retail

Desktop, wall or ceiling mount

POWER-OVER-ETHERNET

PoE 802.3af

RADIOS

1x 2.4 GHz single band
1x 5 GHz single band

ANTENNAS

2x internal dual-band antenna for Radio-1 and 2

See More Specs

APX 320

STANDARD

802.11ac Wave 2
(Wi-Fi 5)

Performance

2x2:2 MU-MIMO

Dual 5 GHz Mode:
867 Mbps (5 GHz) + 867 Mbps (5 GHz)

867 Mbps (5 GHz) + 300 Mbps (2.4 GHz)

DEPLOYMENT

Indoor

All-purpose, medium density, higher in dual 5 GHz mode, e.g. education

Desktop, wall or ceiling mount

POWER-OVER-ETHERNET

PoE 802.3af

RADIOS

1x 2.4 GHz/5 GHz dual-band
1x 5 GHz single band
1x Bluetooth low energy (BLE) – future use

ANTENNAS

2x internal dual-band antenna for Radio-1
2x internal 5 GHz antenna for Radio-2
1x internal 2.4 GHz antenna for BLE (for future use)

See More Specs

APX 530

STANDARD

802.11ac Wave 2
(Wi-Fi 5)

Performance

3x3:3 MU-MIMO

Dual-band Mode:
1300 Mbps (5 GHz) + 450 Mbps (2.4 GHz)

DEPLOYMENT

Indoor

General purpose, medium to high density, e.g. standard mid-sized office

Desktop, wall or ceiling mount

POWER-OVER-ETHERNET

PoE+ 802.3at

RADIOS

1x 2.4 GHz single band
1x 5 GHz single band
1x Bluetooth low energy (BLE) – future use

ANTENNAS

3x internal 2.4 GHz antenna for Radio-1
3x internal 5 GHz antenna for Radio-2
1x internal 2.4 GHz antenna for BLE (for future use)

See More Specs

APX 740

STANDARD

802.11ac Wave 2
(Wi-Fi 5)

Performance

4x4:4 MU-MIMO

Dual-band Mode:
1733 Mbps (5 GHz) + 600 Mbps (2.4 GHz)

DEPLOYMENT

Indoor

High performance, high density, e.g. cloud-heavy environments

Desktop, wall or ceiling mount

POWER-OVER-ETHERNET

PoE+ 802.3at

RADIOS

1x 2.4 GHz single band
1x 5 GHz single band
1x Bluetooth low energy (BLE) – future use

ANTENNAS

4x internal 2.4 GHz antenna for Radio-1
4x internal 5 GHz antenna for Radio-2
1x internal 2.4 GHz antenna for BLE (for future use)

See More Specs

APX Series - Product Highlights

  • Use your XG appliance as an on-premises wireless controller
  • No additional subscription required (included in the Base License with every XG appliance purchase)
  • Four indoor models to choose from with 2x2:2, 3x3:3, and 4x4:4 MU-MIMO
  • Significant performance improvement over legacy 802.11ac Wave 1 and earlier models 
  • Optimized for both wall- and ceiling-mount (diverse mounting kits available)
  • Ideal to add connectivity to areas with limited cellular coverage
  • 5-year warranty as standard, support for APX is included if you have Enhanced Plus support for your XG appliance

Like what you see?

Get Pricing

Sophos Central Management

The APX Series can also be managed from Sophos Central. This option is licensed separately and offers additional features and the full scalability of a cloud-managed platform. If you’re already using Sophos Central to manage other Sophos products, your Sophos partner or sales contact can provide more information about Sophos Wireless.

SD-RED Remote Ethernet Devices

SD-RED offers a uniquely simple solution to extend network connectivity to your remote locations and branch offices – no matter where in the world they are. Replace expensive MPLS connections to reduce your costs and take advantage of other Sophos products, such as Intercept X, for added SD-WAN functionality in combination with XG Firewall.

- Select to compare -

SD-RED 20

Performance

250 MBPS

connectivity

4 x GE copper
1 x SFP (shared with WAN)
1 x WAN (shared with SFP)

modularity

1

Wi-Fi Module
3G/4G Module
SFP Transceivers

redundancy

Optional 2nd power supply

See More Specs

SD-RED 60

Performance

850 MBPS

connectivity

4 x GE copper
1 x SFP (shared with WAN1)
2 x WAN (WAN1 shared with SFP)
2 x PoE (total power 30W)

modularity

1

Wi-Fi Module
3G/4G Module
SFP Transceivers

redundancy

Optional 2nd power supply

See More Specs

Product Highlights

  • Plug and play deployment – no IT staff required on-site
  • Flexible configuration to allow many different operating modes (backhaul all traffic, split tunnel, transparent)
  • All data between the SD-RED and your firewall is securely encrypted
  • Modular concept to add connectivity such as Wi-Fi or 3G/4G cellular
  • SD-RED 60 offers two Power-over-Ethernet ports to directly power your APX Series access points or other PoE-powered devices
  • Manage your SD-RED devices from your Sophos Firewall console (Network Protection subscription required for management)
  • 5-year warranty as standard, support for SD-RED is included if you have Enhanced Plus support for your XG appliance

Like what you see?

Get Pricing

SD-RED Accessories

Both SD-RED models are equipped with a modular bay, allowing you to tailor connectivity to your needs. This provides flexible, reliable WAN connectivity without the incompatibility issues experienced with USB dongles and similar add-on solutions.

Wi-Fi Connectivity

Add an 802.11ac Wave 2 (Wi-Fi 5) module to your SD-RED device to provide Wi-Fi connectivity at your remote sites. Two external antennas ensure that the network coverage is optimized.

3G/4G Connectivity

Our 3G/4G module has been tested using numerous Internet Service Providers in many countries. Two external antennas provide superior network coverage vs. other add-on solutions.

Power Redundancy

Power redundancy is a must for network devices. A 2nd power adapter on your SD-RED ensures business continuity.

Rackmount Kit

Mount your SD-RED on a wall for easy access to all interfaces or use a rackmount kit to add it to your existing server rack.

For a complete overview of our XG Firewall product, download our brochure.