XGS Series next-gen firewall appliances

Enterprise and campus edge: 2U models

Distributed and growing enterprises in need of maximum throughput for the most complex networks get the ultimate in protection, performance, and business continuity with these next-gen firewalls. Sophos Xstream Flow processors in XGS 2U appliances provide dedicated hardware acceleration to easily handle full-on protection for today’s encrypted, cloud-hosted applications and traffic.

XGS 2U firewalls strike the perfect balance between port density and modularity, with a range of high-speed, built-in ports. Additional high-density Flexi Port modules are available to extend connectivity even further. All 2U rackmount models are powered by a high-speed CPU plus an Xstream Flow processor for traffic acceleration.

Download brochure

Discover more firewall models

Enterprise and Campus Edge: 2U Models - Hero Banner Image

Compare XGS 2U models

XGS 5500

Performance

FIREWALL	TLS INSPECTION
100 Gbps	13.5 Gbps

FIREWALL IMIX	IPS
52 Gbps	40 Gbps

IPSEC VPN	NGFW
92.5 Gbps	38 Gbps

THREAT PROTECTION	LATENCY (64 BYTE UDP)
46 Gbps	5 µs

Connectivity

ETHERNET INTERFACES (FIXED)

8 x GE copper

8 x SFP+ 10 GE fiber*

MANAGEMENT INTERFACES

1 x RJ45 MGMT

1 x COM RJ45

1 x COM Micro-USB

BYPASS PORT PAIRS (FIXED)

OTHER I/O INTERFACES

2 x USB 3.0 (front)

MAX. PORT DENSITY (INCL. MODULES)

Modularity

FLEXI PORT SLOTS

2 + 1 for high-density modules

FLEXI PORT MODULES (OPTIONAL)

8-port GE copper

8-port GE SFP fiber*

4-port 10 GE SFP+ fiber*

4-port GE copper bypass (2 pairs)

2-port 40 GE QSFP+ fiber*

8-port 10 GE SFP+ fiber*

2-port GE fiber (LC) bypass + 4-port GE SFP fiber

2-port 10 GE fiber (LC) bypass + 4-port 10 GE SFP+ fiber

High-density module: 12-port GE copper + 4-port 2.5 GE copper

OTHER OPTIONAL ADD-ON MODULES

Transceivers

Redundancy

POWER SUPPLY

2 x hot-swap internal

DUAL SSD

Included

HW RAID

built into CPU

* Transceivers sold separately

XGS 6500

Performance

FIREWALL	TLS INSPECTION
120 Gbps	16 Gbps

FIREWALL IMIX	IPS
60 Gbps	50.75 Gbps

IPSEC VPN	NGFW
109.8 Gbps	46.5 Gbps

THREAT PROTECTION	LATENCY (64 BYTE UDP)
53.5 Gbps	5 µs

Connectivity

ETHERNET INTERFACES (FIXED)

8 x GE copper

12 x SFP+ 10 GE fiber*

MANAGEMENT INTERFACES

1 x RJ45 MGMT

1 x COM RJ45

1 x COM Micro-USB

BYPASS PORT PAIRS (FIXED)

OTHER I/O INTERFACES

2 x USB 3.0 (front)

MAX. PORT DENSITY (INCL. MODULES)

Modularity

FLEXI PORT SLOTS

2 + 2 for high-density modules

FLEXI PORT MODULES (OPTIONAL)

8-port GE copper

8-port GE SFP fiber*

4-port 10 GE SFP+ fiber*

4-port GE copper bypass (2 pairs)

2-port 40 GE QSFP+ fiber*

8-port 10 GE SFP+ fiber*

2-port GE fiber (LC) bypass + 4-port GE SFP fiber

2-port 10 GE fiber (LC) bypass + 4-port 10 GE SFP+ fiber

High-density module: 12-port GE copper + 4-port 2.5 GE copper

OTHER OPTIONAL ADD-ON MODULES

Transceivers

Redundancy

POWER SUPPLY

2 x hot-swap internal

DUAL SSD

Included

HW RAID

built into CPU

* Transceivers sold separately

XGS 7500

Performance

FIREWALL	TLS INSPECTION
160 Gbps	19.5 Gbps

FIREWALL IMIX	IPS
70.5 Gbps	71.5 Gbps

IPSEC VPN	NGFW
117 Gbps	58 Gbps

THREAT PROTECTION	LATENCY (64 BYTE UDP)
70 Gbps	5.4 µs

Connectivity

ETHERNET INTERFACES (FIXED)

8 x GE copper

12 x SFP+ 10 GE fiber*

2 x QSFP28 10/25/40 Gbps

MANAGEMENT INTERFACES

1 x RJ45 MGMT

1 x COM RJ45

1 x COM Micro-USB

BYPASS PORT PAIRS (FIXED)

OTHER I/O INTERFACES

2 x USB 3.0 (front)

MAX. PORT DENSITY (INCL. MODULES)

Modularity

FLEXI PORT SLOTS

2 + 2 for high-density modules

FLEXI PORT MODULES (OPTIONAL)

8-port GE copper

8-port GE SFP fiber*

4-port 10 GE SFP+ fiber*

4-port GE copper bypass (2 pairs)

2-port 40 GE QSFP+ fiber*

8-port 10 GE SFP+ fiber*

2-port GE fiber (LC) bypass + 4-port GE SFP fiber

2-port 10 GE fiber (LC) bypass + 4-port 10 GE SFP+ fiber

High-density module: 12-port GE copper + 4-port 2.5 GE copper

OTHER OPTIONAL ADD-ON MODULES

Transceivers

Redundancy

POWER SUPPLY

2 x hot-swap internal

DUAL SSD

Included

HW RAID

built into CPU

* Transceivers sold separately

XGS 8500

Performance

FIREWALL	TLS INSPECTION
190 Gbps	24 Gbps

FIREWALL IMIX	IPS
81 Gbps	93 Gbps

IPSEC VPN	NGFW
141 Gbps	76 Gbps

THREAT PROTECTION	LATENCY (64 BYTE UDP)
92.5 Gbps	5.5 µs

Connectivity

ETHERNET INTERFACES (FIXED)

8 x GE copper

12 x SFP+ 10 GE fiber*

2 x QSFP28 10/25/40/50/100 GE

MANAGEMENT INTERFACES

1 x RJ45 MGMT

1 x COM RJ45

1 x COM Micro-USB

BYPASS PORT PAIRS (FIXED)

OTHER I/O INTERFACES

2 x USB 3.0 (front)

MAX. PORT DENSITY (INCL. MODULES)

Modularity

FLEXI PORT SLOTS

2 + 2 for high-density modules

FLEXI PORT MODULES (OPTIONAL)

8-port GE copper

8-port GE SFP fiber*

4-port 10 GE SFP+ fiber*

4-port GE copper bypass (2 pairs)

2-port 40 GE QSFP+ fiber*

8-port 10 GE SFP+ fiber*

2-port GE fiber (LC) bypass + 4-port GE SFP fiber

2-port 10 GE fiber (LC) bypass + 4-port 10 GE SFP+ fiber

High-density module: 12-port GE copper + 4-port 2.5 GE copper

OTHER OPTIONAL ADD-ON MODULES

Transceivers

Redundancy

POWER SUPPLY

2 x hot-swap internal

DUAL SSD

Included

HW RAID

built into CPU

* Transceivers sold separately

Performance test methodology

General	Maximum throughput measured under ideal test conditions using industry-standard Keysight-Ixia BreakingPoint test tools. Actual performance may vary depending on network conditions and activated services.
Firewall	Measured using HTTP traffic and 512 KB response size.
Firewall IMIX	UDP throughput based on a combination of 66 byte, 570 byte, and 1518 byte packet sizes.
IPS	Measured using HTTP traffic, default IPS ruleset, and 512 KB object size.
IPsec VPN	HTTP throughput measured using multiple tunnels and 512 KB HTTP response size.
TLS inspection	Measured with IPS enabled on HTTPS sessions and different cipher suites.
Threat protection	Measured with firewall, IPS, application control, and malware prevention enabled using Enterprise Mix traffic.

Product highlights

Engineered for no-compromise performance
Dual-processor architecture with dedicated co-processor for enterprise-grade hardware acceleration
High-performance Non-Volatile Memory Express (NVMe) SSDs for better compatibility and storage (XGS 7500/8500 only)
Sufficient headroom to power all key threat protection features, such as TLS inspection, sandboxing, and AI-driven threat analysis
Extremely competitive ROI per protected Mbps
A range of standard 1 GE copper interfaces plus 8 to 12 SFP+ 10 GE fiber interfaces on every model
QSFP28 interfaces on high-end models support port speeds of up to 40 Gbps (XGS 7500) and 100 Gbps (XGS 8500)
Maximum port density of 48 (XGS 5500), 68 (XGS 6500), or 70 (XGS 7500/8500) using optional modules
Redundancy features on all models to ensure business continuity

Accessories

Flexi Port modules

For all XGS 2U models

All 2U appliances come with two standard Flexi Port expansion bays plus one or two bays for the larger, high-density modules. These allow you to flexibly adapt your appliance to changes in your environment, workforce, or edge infrastructure that may require additional fiber ports or other connectivity adjustments. Flexi Port modules offer a cost-effective way to adapt your appliance rather than having to purchase new hardware mid-term, guaranteeing the best value over the lifetime of your firewall.

Redundancy

All of our 2U appliances come equipped with components to ensure maximum uptime:

Dual SSDs
Dual power supplies (hot-swappable)

Transceivers

A list of compatible third-party transceivers can be found in our knowledge base article.

Rackmount kits

All 2U rackmount appliances are supplied with rackmount sliding rails.

XGS Series 2U accessories matrix

Model	Redundant power	Redundant SSD	Flexi Port bays	Flexi Port modules	Rackmount kit
XGS 5500	Included	Included	2 + 1 for high-density module	8-port 1 GE copper 8-port 1 GE SFP 4-port 10 GE SFP+ 4-port 1 GE copper bypass 2-port 40 GE QSFP+ 8-port 10 GE SFP+ 2-port GE fiber (LC) bypass + 4-port GE SFP fiber 2-port 10 GE fiber (LC) bypass + 4-port 10 GE SFP+ fiber High-density Flexi Port module: 12-port 1 GE copper + 4-port 2.5 GE copper	Sliding rails included
XGS 6500	Included	Included	2 + 2 for high-density modules		Sliding rails included
XGS 7500	Included	Included	2 + 2 for high-density modules		Sliding rails included
XGS 8500	Included	Included	2 + 2 for high-density modules		Sliding rails included

XGS Series next-gen firewall appliances

Enterprise and campus edge: 2U models

Compare XGS 2U models

XGS 5500

XGS 6500

XGS 7500

XGS 8500

Performance test methodology

Product highlights

Accessories

Flexi Port modules

Redundancy

Transceivers

Rackmount kits

XGS Series 2U accessories matrix

XGS 2U Rackmount

XGS 1U Rackmount

XGS Desktop (Gen.2)

XGS Desktop (Gen.1)

Sophos SD-RED

Sophos Wireless

Sophos Switch

Sophos ZTNA

XGS Series next-gen firewall appliances

Enterprise and campus edge: 2U models

Compare XGS 2U models

Performance test methodology

Product highlights

Accessories

Flexi Port modules

Redundancy

Transceivers

Rackmount kits

XGS Series 2U accessories matrix

Related products