Sophos · XGS desktop models
Sophos XGS 128
The Sophos XGS 128 is a desktop firewall that runs Sophos Firewall OS. Sophos publishes a firewall throughput of 19.1 Gbps and a threat protection throughput of 4 Gbps for it. It has 9 x 2.5 GE copper, 1 x SFP. Versions: XGS 128w adds Wi-Fi 6 (802.11ax), 2x2 MIMO, dual-band concurrent 2.4 GHz and 5 GHz.
- Firewall throughput
- 19.1 Gbps
- Threat protection
- 4 Gbps
- IPsec VPN
- 15.05 Gbps
- Form
- Desktop
Who it suits
As a desktop unit it suits a small office, a shop or a branch that has no server rack. With protection switched on, plan for an internet line of no more than about two-thirds of the threat protection throughput figure. For the XGS 128 that means a line of up to about 2.6 Gbps.
Sophos XGS 128 specifications
| Performance | |
|---|---|
| Firewall throughput | 19.1 Gbps |
| Firewall throughput (IMIX) | 14.5 Gbps |
| IPS throughput | 4.65 Gbps |
| NGFW throughput | 4.35 Gbps |
| Threat protection throughput | 4 Gbps |
| IPsec VPN throughput | 15.05 Gbps |
| TLS inspection throughput | 1.45 Gbps |
| Hardware | |
| Form factor | Desktop (rackmount kit optional) |
| Ports | 9 x 2.5 GE copper, 1 x SFP, 1 x COM RJ45, 1 x COM Micro-USB, 1 x USB 2.0, 1 x USB 3.0 |
| Expansion | 1 slot for a 5G module or SFP transceivers |
| Power supply | Optional second power supply |
| Versions sold | XGS 128w adds Wi-Fi 6 (802.11ax), 2x2 MIMO, dual-band concurrent 2.4 GHz and 5 GHz |
Specifications from Sophos's published data, checked October 2026. See Sophos's firewall pages. Throughput figures are each manufacturer's own published numbers. Manufacturers test in different ways, so compare across brands with care. Confirm details before ordering.
What we do with it
- Supply
Firewall supply and installation
The right-sized firewall from any of the five brands, with its licence, installed and configured at your site.
- Audit
Firewall configuration and audit
A review of your rules, firmware, admin access and VPNs, with the weak points fixed and written down.
- Renewal
Firewall licence renewal
Renewals for FortiGuard, Sophos, Palo Alto Networks, SonicWall and Juniper subscriptions, quoted from your serial number.
- Migrate
Firewall migration
Move from an old firewall to a new one, same brand or another, with the rules and VPNs carried over.
Questions about the XGS 128
What internet speed can the XGS 128 handle?
Sophos publishes a threat protection throughput of 4 Gbps for the XGS 128. Leaving headroom for busy hours, that suits an internet line of up to about 2.6 Gbps with protection switched on. With inspection off, its firewall throughput is 19.1 Gbps.
What ports does the XGS 128 have?
9 x 2.5 GE copper, 1 x SFP, 1 x COM RJ45, 1 x COM Micro-USB, 1 x USB 2.0, 1 x USB 3.0. Expansion: 1 slot for a 5G module or SFP transceivers.
Does the XGS 128 have Wi-Fi?
The base model does not. A wireless version is sold: XGS 128w adds Wi-Fi 6 (802.11ax), 2x2 MIMO, dual-band concurrent 2.4 GHz and 5 GHz.
Does the XGS 128 need a licence?
The hardware works as a basic firewall on its own. Protection features such as intrusion prevention, web filtering and anti-malware need an active Sophos subscription, and so do firmware updates and support. We quote the firewall with the licence term you choose.
Do you supply the XGS 128 with installation?
Yes. We supply it with its licence registered, install and configure it at your site, and hand over the logins and documentation. Ask for a quote on this page.
Similar Sophos models
- Desktop
Sophos XGS 138
Firewall 19.1 Gbps, threat protection 4.75 Gbps
- Desktop
Sophos XGS 118
Firewall 15.5 Gbps, threat protection 3.25 Gbps
- Desktop
Sophos XGS 108
Firewall 12.5 Gbps, threat protection 2.5 Gbps
- Desktop
Sophos XGS 88
Firewall 9.9 Gbps, threat protection 2 Gbps
Closest models from other brands
Throughput figures are each manufacturer's own published numbers. Manufacturers test in different ways, so compare across brands with care.
- Desktop
Fortinet FortiGate 90G
Firewall 28 / 28 / 27.9 Gbps, threat protection 2.2 Gbps
- Desktop
Palo Alto Networks PA-550
Firewall 6.5 Gbps, threat protection 4.5 Gbps
- Desktop
SonicWall TZ670
Firewall 5 Gbps, threat protection 2.5 Gbps
- Desktop
Juniper SRX300
Firewall 1.9 Gbps, threat protection 200 Mbps (IPS)