Sophos Enterprise Firewall

Experience enhanced desktop performance, superior energy efficiency, and a wide range of advanced high-speed connectivity options.

Request a Free Trial

Sophos - Small Business Firewall Models

FIREWALL9,900 Mbps

TLS INSPECTION600 Mbps

FIREWALL IMIX6,500 Mbps

IPS2,000 Mbps

IPSEC VPN6,000 Mbps

NGFW2,000 Mbps

THREAT PROTECTION2,000 Mbps

ETHERNET INTERFACES (FIXED)4 X 2.5 GE copper

POWER-OVER-ETHERNET (FIXED)N/A

MANAGEMENT INTERFACES1 x COM RJ45
1 x COM Micro-USB

OTHER I/O INTERFACES1 x USB 2.0 (front)
1 x USB 3.0 (rear)

WI-FI OPTION (W-MODEL ONLY)Wi-Fi 6 (802.11ax)
2X2:2 MIMO
2 external antennas
Dual-band concurrent, 2.4 GHz and 5 GHz

EXPANSION SLOTSN/A

OPTIONAL ADD-ON MODULESN/A

SWAPPABLE COMPONENTSN/A

FIREWALL12,500 Mbps

TLS INSPECTION800 Mbps

FIREWALL IMIX8,100 Mbps

IPS2,500 Mbps

IPSEC VPN8,250 Mbps

NGFW2,600 Mbps

THREAT PROTECTION2,500 Mbps

ETHERNET INTERFACES (FIXED)6 x 2.5 GE copper
1 x SFP fiber*

POWER-OVER-ETHERNET (FIXED)N/A

MANAGEMENT INTERFACES1 x COM RJ45
1 x COM Micro-USB

OTHER I/O INTERFACES1 x USB 2.0 (front)
1 x USB 3.0 (rear)

WI-FI OPTION (W-MODEL ONLY)Wi-Fi 6 (802.11ax)
2X2:2 MIMO
2 external antennas
Dual-band concurrent, 2.4 GHz and 5 GHz

EXPANSION SLOTSN/A

OPTIONAL ADD-ON MODULESSFP transceivers

SWAPPABLE COMPONENTSOptional 2nd power supply

FIREWALL15,500 Mbps

TLS INSPECTION1,100 Mbps

FIREWALL IMIX11,000 Mbps

IPS3,500 Mbps

IPSEC VPN13,000 Mbps

NGFW3,950 Mbps

THREAT PROTECTION3,250 Mbps

ETHERNET INTERFACES (FIXED)9 x 2.5 GE copper
1 x SFP fiber*

POWER-OVER-ETHERNET (FIXED)N/A

MANAGEMENT INTERFACES1 x COM RJ45
1 x COM Micro-USB

OTHER I/O INTERFACES1 x USB 2.0 (front)
1 x USB 3.0 (rear)

WI-FI OPTION (W-MODEL ONLY)Wi-Fi 6 (802.11ax)
2X2:2 MIMO
2 external antennas
Dual-band concurrent, 2.4 GHz and 5 GHz

EXPANSION SLOTS1

OPTIONAL ADD-ON MODULES5G module (Gen.2)**
SFP transceivers

SWAPPABLE COMPONENTSOptional 2nd power supply

FIREWALL19,100 Mbps

TLS INSPECTION1,450 Mbps

FIREWALL IMIX14,500 Mbps

IPS4,650 Mbps

IPSEC VPN15,050 Mbps

NGFW4,350 Mbps

THREAT PROTECTION4,000 Mbps

ETHERNET INTERFACES (FIXED)9 x 2.5 GE copper
1 x SFP fiber*

POWER-OVER-ETHERNET (FIXED)N/A

MANAGEMENT INTERFACES1 x COM RJ45
1 x COM Micro-USB

OTHER I/O INTERFACES1 x USB 2.0 (front)
1 x USB 3.0 (rear)

WI-FI OPTION (W-MODEL ONLY)Wi-Fi 6 (802.11ax)
2X2:2 MIMO
2 external antennas
Dual-band concurrent, 2.4 GHz and 5 GHz

EXPANSION SLOTS1

OPTIONAL ADD-ON MODULES5G module (Gen.2)**
SFP transceivers

SWAPPABLE COMPONENTSOptional 2nd power supply

FIREWALL19,100 Mbps

TLS INSPECTION1,700 Mbps

FIREWALL IMIX10,500 Mbps

IPS5,850 Mbps

IPSEC VPN6,600 Mbps

NGFW5,100 Mbps

THREAT PROTECTION4,750 Mbps

ETHERNET INTERFACES (FIXED)4 x GE copper
2 x SFP+ fiber*

POWER-OVER-ETHERNET (FIXED)2 x 2.5 GE
802.3at (30W max. per port)

MANAGEMENT INTERFACES1 x COM RJ45
1 x COM Micro-USB

OTHER I/O INTERFACES1 x USB 2.0 (front)
1 x USB 3.0 (rear)

WI-FI OPTION (W-MODEL ONLY)N/A

EXPANSION SLOTS1

OPTIONAL ADD-ON MODULES5G module (Gen.2)**
SFP transceivers

SWAPPABLE COMPONENTSOptional 2nd power supply

* Transceivers sold separately

** 5G module (Gen.2) not sold in Japan

Performance test methodology

General

Firewall

Firewall IMIX

IPS

IPsec VPN

TLS inspection

Threat protection

Maximum throughput measured under ideal test conditions using industry-standard Keysight-Ixia BreakingPoint test tools. Actual performance may vary depending on network conditions and activated services.

Measured using HTTP traffic and 512 KB response size.

UDP throughput based on a combination of 66 byte, 570 byte, and 1518 byte packet sizes.

Measured using HTTP traffic, default IPS ruleset, and 512 KB object size.

HTTP throughput measured using multiple tunnels and 512 KB HTTP response size.

Measured with IPS enabled on HTTPS sessions and different cipher suites.

Measured with firewall, IPS, application control, and malware prevention enabled using Enterprise Mix traffic.

Product Highlights

All protection features are supported on every XGS 1xx desktop model and most are available on XGS 88 and XGS 88w.
Accelerated performance: Up to double the throughput of Gen.1 models plus Xstream virtual FastPath acceleration for IPsec VPN (XGS 88 to XGS 128) in combination with SFOS v21 and higher
High-speed connectivity built in: 2.5 GE interfaces on everymodel,two built-in 10 GE SFP+ interfaces on the XGS 138, and Wi-Fi 6 (802.11ax) integrated on all w-models with concurrent use of the 2.4 and 5 GHz bands for better performance
Power and environment: Up to 50% lower power consumption, fanless XGS 88 and 108 models for whisper-quiet operation, optimized thermal design for XGS 118 and above, and redundant power option for all XGS 1xx models
Optional connectivity: New 5G module available exclusively for Gen.2 models for more cost-effective redundant connectivity
Streamlined hardware architecture: The XGS 88 to XGS 128 models boast a new single-CPU architecture while the XGS 138 has a refreshed dual-processor architecture

Accessories

5G connectivity

For XGS 118, XGS 128, and XGS 138 models only

For many business locations, a 5G cellular network can be deployed to support traffic peaks or provide an important redundant/fallback connectivity option for SD-WAN. 5G fixed wireless access (FWA) may sound like a contradiction in terms, but as a technology, it allows network operators to deliver cost-effective, high-speed broadband connectivity to both suburban and rural areas. Using 5G, operators can now meet the high-speed internet access demands of cloud services in business and consumer requirements for latency-free, high-definition streaming services.

The optional Gen.2 5G module can be securely mounted in the XGS device and then managed from your Sophos Firewall.

Better performance with the latest standards supported
Highly cost-effective solution
Full protection from theft and damage
Gen.2 5G module data rates (max.):
- 5G SA sub-6: downlink 2.4 Gbps; uplink 900 Mbps
- 5G NSA sub-6: downlink 3.4 Gbps; uplink 550 Mbps
- LTE: downlink 1.6 Gbps; uplink 200 Mbps
- WCDMA: downlink 42 Mbps; uplink 5.76 Mbps
One 5G module (Gen.2) version for all regions