Sophos Enterprise Firewall
Experience enhanced desktop performance, superior energy efficiency, and a wide range of advanced high-speed connectivity options.
Request a Free Trial
Sophos - Enterprise Firewall Models
XGS 5500
Performance
FIREWALL100,000 Mbps
TLS INSPECTION13,500 Mbps
FIREWALL IMIX52,000 Mbps
IPS40,000 Mbps
IPSEC VPN92,500 Mbps
NGFW38,000 Mbps
THREAT PROTECTION46,000 Mbps
LATENCY (64 BYTE UDP)5 µs
Connectivity
ETHERNET INTERFACES (FIXED)8 x GE copper
8 x SFP+ 10 GE fiber*
MANAGEMENT INTERFACES1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB
BYPASS PORT PAIRS (FIXED)2
OTHER I/O INTERFACES2 x USB 3.0 (front)
MAX. PORT DENSITY (INCL. MODULES)48
Modularity
FLEXI PORT SLOTS2 + 1 for high-density module
FLEXI PORT MODULES (OPTIONAL)8-port GE copper
8-port GE SFP fiber*
4-port 10 GE SFP+ fiber*
4-port GE copper bypass (2 pairs)
2-port 40 GE QSFP+ fiber*
8-port 10 GE SFP+ fiber*
2-port GE fiber (LC) bypass + 4-port GE SFP fiber
2-port 10 GE fiber (LC) bypass + 4-port 10 GE SFP+ fiber
High-density module: 12-port GE copper + 4-port 2.5 GE copper
OTHER OPTIONAL ADD-ON MODULESTransceivers
Redundancy
POWER SUPPLY2 x hot-swap internal
DUAL SSDIncluded
HW RAIDBuilt into CPU
XGS 6500
Performance
FIREWALL120,000 Mbps
TLS INSPECTION16,000 Mbps
FIREWALL IMIX60,000 Mbps
IPS50,750 Mbps
IPSEC VPN109,800 Mbps
NGFW46,500 Mbps
THREAT PROTECTION53,500 Mbps
LATENCY (64 BYTE UDP)5 µs
Connectivity
ETHERNET INTERFACES (FIXED)8 x GE copper
12 x SFP+ 10 GE fiber*
MANAGEMENT INTERFACES1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB
BYPASS PORT PAIRS (FIXED)2
OTHER I/O INTERFACES2 x USB 3.0 (front)
MAX. PORT DENSITY (INCL. MODULES)68
Modularity
FLEXI PORT SLOTS2 + 2 for high-density modules
FLEXI PORT MODULES (OPTIONAL)8-port GE copper
8-port GE SFP fiber*
4-port 10 GE SFP+ fiber*
4-port GE copper bypass (2 pairs)
2-port 40 GE QSFP+ fiber*
8-port 10 GE SFP+ fiber*
2-port GE fiber (LC) bypass + 4-port GE SFP fiber
2-port 10 GE fiber (LC) bypass + 4-port 10 GE SFP+ fiber
High-density module: 12-port GE copper + 4-port 2.5 GE copper
OTHER OPTIONAL ADD-ON MODULESTransceivers
Redundancy
POWER SUPPLY2 x hot-swap internal
DUAL SSDIncluded
HW RAIDbuilt into CPU
XGS 7500
Performance
FIREWALL160,000 Mbps
TLS INSPECTION19,500 Mbps
FIREWALL IMIX70,500 Mbps
IPS71,500 Mbps
IPSEC VPN117,000 Mbps
NGFW58,000 Mbps
THREAT PROTECTION70,000 Mbps
LATENCY (64 BYTE UDP)5.4 µs
Connectivity
ETHERNET INTERFACES (FIXED)8 x GE copper
12 x SFP+ 10 GE fiber*
2 x QSFP28 10/25/40 Gbps
MANAGEMENT INTERFACES1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB
BYPASS PORT PAIRS (FIXED)2
OTHER I/O INTERFACES2 x USB 3.0 (front)
MAX. PORT DENSITY (INCL. MODULES)70
Modularity
FLEXI PORT SLOTS2 + 2 for high-density modules
FLEXI PORT MODULES (OPTIONAL)8-port GE copper
8-port GE SFP fiber*
4-port 10 GE SFP+ fiber*
4-port GE copper bypass (2 pairs)
2-port 40 GE QSFP+ fiber*
8-port 10 GE SFP+ fiber*
2-port GE fiber (LC) bypass + 4-port GE SFP fiber
2-port 10 GE fiber (LC) bypass + 4-port 10 GE SFP+ fiber
High-density module: 12-port GE copper + 4-port 2.5 GE copper
OTHER OPTIONAL ADD-ON MODULESTransceivers
Redundancy
POWER SUPPLY2 x hot-swap internal
DUAL SSDIncluded
HW RAIDbuilt into CPU
XGS 8500
Performance
FIREWALL190,000 Mbps
TLS INSPECTION24,000 Mbps
FIREWALL IMIX81,000 Mbps
IPS93,000 Mbps
IPSEC VPN141,000 Mbps
NGFW76,000 Mbps
THREAT PROTECTION92,500 Mbps
LATENCY (64 BYTE UDP)5.5 µs
Connectivity
ETHERNET INTERFACES (FIXED)8 x GE copper
12 x SFP+ 10 GE fiber*
2 x QSFP28 10/25/40/50/100 GE
MANAGEMENT INTERFACES1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB
BYPASS PORT PAIRS (FIXED)2
OTHER I/O INTERFACES2 x USB 3.0 (front)
MAX. PORT DENSITY (INCL. MODULES)70
Modularity
FLEXI PORT SLOTS8-port GE copper
8-port GE SFP fiber*
4-port 10 GE SFP+ fiber*
4-port GE copper bypass (2 pairs)
2-port 40 GE QSFP+ fiber*
8-port 10 GE SFP+ fiber*
2-port GE fiber (LC) bypass + 4-port GE SFP fiber
2-port 10 GE fiber (LC) bypass + 4-port 10 GE SFP+ fiber
High-density module: 12-port GE copper + 4-port 2.5 GE copper
OTHER OPTIONAL ADD-ON MODULESTransceivers
Redundancy
POWER SUPPLY2 x hot-swap internal
DUAL SSDIncluded
HW RAIDbuilt into CPU
* Transceivers sold separately.
Performance test methodology
General
Firewall
Firewall IMIX
IPS
IPsec VPN
TLS inspection
Threat protection
Maximum throughput measured under ideal test conditions using industry-standard Keysight-Ixia BreakingPoint test tools. Actual performance may vary depending on network conditions and activated services.
Measured using HTTP traffic and 512 KB response size.
UDP throughput based on a combination of 66 byte, 570 byte, and 1518 byte packet sizes.
Measured using HTTP traffic, default IPS ruleset, and 512 KB object size.
HTTP throughput measured using multiple tunnels and 512 KB HTTP response size.
Measured with IPS enabled on HTTPS sessions and different cipher suites.
Measured with firewall, IPS, application control, and malware prevention enabled using Enterprise Mix traffic.
Product Highlights
- Engineered for no-compromise performance.
- Dual-processor architecture with dedicated co-processor for enterprise-grade hardware acceleration.
- High-performance Non-Volatile Memory Express (NVMe) SSDs for better compatibility and storage (XGS 7500/8500 only).
- Sufficient headroom to power all key threat protection features, such as TLS inspection, sandboxing, and AI-driven threat analysis.
- Extremely competitive ROI per protected Mbps.
- A range of standard 1 GE copper interfaces plus 8 to 12 SFP+ 10 GE fiber interfaces on every model.
- QSFP28 interfaces on high-end models support port speeds of up to 40 Gbps (XGS 7500) and 100 Gbps (XGS 8500).
- Maximum port density of 48 (XGS 5500), 68 (XGS 6500), or 70 (XGS 7500/8500) using optional modules.
- Redundancy features on all models to ensure business continuity.
Accessories
Flexi Port modules
For all XGS 2U models
All 2U appliances come with two standard Flexi Port expansion bays plus one or two bays for the larger, high-density modules. These allow you to flexibly adapt your appliance to changes in your environment, workforce, or edge infrastructure that may require additional fiber ports or other connectivity adjustments. Flexi Port modules offer a cost-effective way to adapt your appliance rather than having to purchase new hardware mid-term, guaranteeing the best value over the lifetime of your firewall.
Transceivers
A list of compatible third-party transceivers can be found in our knowledge base article.
Redundancy
All of our 2U appliances come equipped with hot-swappable components to ensure maximum uptime:
- Dual SSDs
- Dual power supplies
Rackmount kits
All 2U rackmount appliances are supplied with rackmount sliding rails.
