Sophos XGS firewalls: every current model
Sophos XGS firewalls run Sophos Firewall OS. Each has a dedicated Xstream flow processor that takes trusted traffic off the main processor, and they are managed from Sophos Central alongside Sophos endpoint protection.
- Managed in Sophos Central, the same console as Sophos endpoint and email products.
- Synchronized Security lets the firewall and Sophos endpoints share health status, so an infected PC can be isolated automatically.
- Desktop models come with or without built-in Wi-Fi 6.
Get a price on any Sophos firewall
Tell us the model, or your line speed and number of users, and we will call you back with a quote.
15 Sophos models, by series
Each model page has the full published specifications and a price request. In the tables, "threat protection" is Sophos's threat protection throughput figure.
XGS desktop models (5)
Second-generation desktop units for small offices and branches. The two smallest are fanless.
| Model | Firewall throughput | Threat protection | IPsec VPN | Max sessions | Form | |
|---|---|---|---|---|---|---|
| Sophos XGS 88 | 9.9 Gbps | 2 Gbps | 6 Gbps | – | Desktop | Get price |
| Sophos XGS 108 | 12.5 Gbps | 2.5 Gbps | 8.25 Gbps | – | Desktop | Get price |
| Sophos XGS 118 | 15.5 Gbps | 3.25 Gbps | 13 Gbps | – | Desktop | Get price |
| Sophos XGS 128 | 19.1 Gbps | 4 Gbps | 15.05 Gbps | – | Desktop | Get price |
| Sophos XGS 138 | 19.1 Gbps | 4.75 Gbps | 6.6 Gbps | – | Desktop | Get price |
XGS 1U rackmount models (6)
Rackmount units for mid-size networks, with Flexi Port slots for extra interfaces.
| Model | Firewall throughput | Threat protection | IPsec VPN | Max sessions | Form | |
|---|---|---|---|---|---|---|
| Sophos XGS 2100 | 30 Gbps | 5 Gbps | 17 Gbps | – | Rackmount | Get price |
| Sophos XGS 2300 | 39 Gbps | 5.5 Gbps | 20.5 Gbps | – | Rackmount | Get price |
| Sophos XGS 3100 | 47 Gbps | 7.4 Gbps | 25 Gbps | – | Rackmount | Get price |
| Sophos XGS 3300 | 58 Gbps | 10 Gbps | 31.1 Gbps | – | Rackmount | Get price |
| Sophos XGS 4300 | 75 Gbps | 25.2 Gbps | 62.5 Gbps | – | Rackmount | Get price |
| Sophos XGS 4500 | 80 Gbps | 31.85 Gbps | 75.55 Gbps | – | Rackmount | Get price |
XGS 2U rackmount models (4)
Enterprise and campus firewalls with redundant power and high port density.
| Model | Firewall throughput | Threat protection | IPsec VPN | Max sessions | Form | |
|---|---|---|---|---|---|---|
| Sophos XGS 5500 | 100 Gbps | 46 Gbps | 92.5 Gbps | – | Rackmount | Get price |
| Sophos XGS 6500 | 120 Gbps | 53.5 Gbps | 109.8 Gbps | – | Rackmount | Get price |
| Sophos XGS 7500 | 160 Gbps | 70 Gbps | 117 Gbps | – | Rackmount | Get price |
| Sophos XGS 8500 | 190 Gbps | 92.5 Gbps | 141 Gbps | – | Rackmount | Get price |
Throughput figures are each manufacturer's own published numbers. Manufacturers test in different ways, so compare across brands with care.
Sophos questions
What does the w mean in a Sophos model name?
A w at the end, as in XGS 108w, means the unit has built-in Wi-Fi. The performance figures are the same as the model without it.
What is Xstream Protection?
It is Sophos's main licence bundle. It combines network protection, web protection, zero-day protection and central orchestration with enhanced support. Standard Protection is a smaller bundle without zero-day protection and orchestration.
Can you move us from an older Sophos XG or SG firewall to an XGS?
Yes. We size the replacement, carry over the rules and VPNs, and switch over at a time that suits you.