Sophos · XGS 1U rackmount models
Sophos XGS 4300
The Sophos XGS 4300 is a rackmount firewall that runs Sophos Firewall OS. Sophos publishes a firewall throughput of 75 Gbps and a threat protection throughput of 25.2 Gbps for it. It has 4 x GE copper, 4 x 2.5 GE copper, 4 x SFP+ 10 GE, 2 bypass port pairs.
- Firewall throughput
- 75 Gbps
- Threat protection
- 25.2 Gbps
- IPsec VPN
- 62.5 Gbps
- Form
- Rackmount
Who it suits
As a rackmount unit it suits a head office, campus or data centre with a server rack. With protection switched on, plan for an internet line of no more than about two-thirds of the threat protection throughput figure. For the XGS 4300 that means a line of up to about 16 Gbps.
Sophos XGS 4300 specifications
| Performance | |
|---|---|
| Firewall throughput | 75 Gbps |
| Firewall throughput (IMIX) | 33 Gbps |
| IPS throughput | 29.5 Gbps |
| NGFW throughput | 23 Gbps |
| Threat protection throughput | 25.2 Gbps |
| IPsec VPN throughput | 62.5 Gbps |
| TLS inspection throughput | 8 Gbps |
| Hardware | |
| Form factor | 1U rackmount, sliding rails included |
| Ports | 4 x GE copper, 4 x 2.5 GE copper, 4 x SFP+ 10 GE, 2 bypass port pairs, 1 x RJ45 management, 1 x COM RJ45, 1 x COM Micro-USB |
| Expansion | 2 Flexi Port slots (up to 28 ports in total). Modules: 8-port GE copper, 8-port GE SFP, 4-port 10 GE SFP+, 4-port GE copper bypass, 4-port GE PoE + 4-port GE copper, 2-port GE fibre bypass + 4-port GE SFP, 2-port 10 GE NBASE-T + 2-port 10 GE SFP+ |
| Power supply | Optional external second power supply |
Specifications from Sophos's published data, checked October 2026. See Sophos's firewall pages. Throughput figures are each manufacturer's own published numbers. Manufacturers test in different ways, so compare across brands with care. Confirm details before ordering.
What we do with it
- Supply
Firewall supply and installation
The right-sized firewall from any of the five brands, with its licence, installed and configured at your site.
- Audit
Firewall configuration and audit
A review of your rules, firmware, admin access and VPNs, with the weak points fixed and written down.
- Renewal
Firewall licence renewal
Renewals for FortiGuard, Sophos, Palo Alto Networks, SonicWall and Juniper subscriptions, quoted from your serial number.
- Migrate
Firewall migration
Move from an old firewall to a new one, same brand or another, with the rules and VPNs carried over.
Questions about the XGS 4300
What internet speed can the XGS 4300 handle?
Sophos publishes a threat protection throughput of 25.2 Gbps for the XGS 4300. Leaving headroom for busy hours, that suits an internet line of up to about 16 Gbps with protection switched on. With inspection off, its firewall throughput is 75 Gbps.
What ports does the XGS 4300 have?
4 x GE copper, 4 x 2.5 GE copper, 4 x SFP+ 10 GE, 2 bypass port pairs, 1 x RJ45 management, 1 x COM RJ45, 1 x COM Micro-USB. Expansion: 2 Flexi Port slots (up to 28 ports in total). Modules: 8-port GE copper, 8-port GE SFP, 4-port 10 GE SFP+, 4-port GE copper bypass, 4-port GE PoE + 4-port GE copper, 2-port GE fibre bypass + 4-port GE SFP, 2-port 10 GE NBASE-T + 2-port 10 GE SFP+.
Does the XGS 4300 need a licence?
The hardware works as a basic firewall on its own. Protection features such as intrusion prevention, web filtering and anti-malware need an active Sophos subscription, and so do firmware updates and support. We quote the firewall with the licence term you choose.
Do you supply the XGS 4300 with installation?
Yes. We supply it with its licence registered, install and configure it at your site, and hand over the logins and documentation. Ask for a quote on this page.
Similar Sophos models
- Rackmount
Sophos XGS 4500
Firewall 80 Gbps, threat protection 31.85 Gbps
- Rackmount
Sophos XGS 5500
Firewall 100 Gbps, threat protection 46 Gbps
- Rackmount
Sophos XGS 6500
Firewall 120 Gbps, threat protection 53.5 Gbps
- Rackmount
Sophos XGS 3300
Firewall 58 Gbps, threat protection 10 Gbps
Closest models from other brands
Throughput figures are each manufacturer's own published numbers. Manufacturers test in different ways, so compare across brands with care.
- Rackmount
Fortinet FortiGate 2600F
Firewall 198 / 196 / 140 Gbps, threat protection 25 Gbps
- Rackmount
Palo Alto Networks PA-3530
Firewall 45 Gbps, threat protection 25 Gbps
- Rackmount
SonicWall NSa 5800
Firewall 30 Gbps, threat protection 24 Gbps
- Rackmount
Juniper SRX4300
Firewall 98 Gbps, threat protection 24 Gbps (NGFW)