Sophos- XGS 128/128w

Next Generation Firewalls Model

SOPHOS NEXT GENERATION FIREWALL XGS 128/128W

FEATURES

Advanced Multi-Gig Throughput with Virtual FastPath
This model employs a single-CPU architecture paired with Sophos’s “virtual FastPath” to accelerate traffic and deliver high performance even with deep packet inspection enabled.
Comprehensive Security & Threat Protection
Built to deliver next-gen firewall capabilities including TLS/SSL inspection, intrusion prevention (IPS), application control, web filtering, and integrated threat protection under one platform.
Flexible Connectivity & Expandability
Offers nine fixed 2.5 GbE copper ports, one SFP fiber interface, and an expansion bay for an optional 5G module.
Quiet & Efficient Design
Thanks to thermal optimization, the firewall operates with low noise (especially in the “w” version with Wi-Fi) and reduced power consumption compared to previous generations.
Wi-Fi Option in “w” Variant
The 128w model includes integrated Wi-Fi 6 (802.11ax) with dual external antennas, enabling concurrent 2.4 GHz / 5 GHz operation.
License & Central Management Integration
Supports deployment with Sophos Central for cloud orchestration, reporting, and centralized control across multiple firewalls.

SPECIFICATIONS

Firewall Throughput: 19,100 Mbps
Firewall IMIX Throughput: 14,500 Mbps
IPS Throughput: 4,650 Mbps
Threat Protection / NGFW Throughput: 4,000 Mbps / 4,350 Mbps
IPSec VPN Throughput: 15,050 Mbps
Concurrent Connections: 6,000,000
Xstream SSL/TLS Inspection: 1,450 Mbps (18,432 concurrent SSL/TLS)
Ethernet Interfaces (Fixed): 9 × 2.5 GbE copper, 1 × SFP fiber
Management Ports / I/O: 1 × COM RJ45, 1 × Micro USB, 1 × USB 2.0 (front), 1 × USB 3.0 (rear)
Expansion Slots: 1 (for optional 5G module)
Power Supply: 100–240 VAC, auto-ranging; 12 VDC, 5.42 A, 65 W; optional second redundant PSU
Noise Levels: ~ 17.3 dBA (typical / XGS 128) / ~ 19.5 dBA (typical / 128w)
Operating Temperature: 0 °C to 40 °C
Dimensions (W × H × D): 320 × 44 × 212 mm

SOPHOS NEXT GENERATION FIREWALL XGS 138

FEATURES

Dedicated Hardware Acceleration via Xstream Flow Processor
Unlike the single-CPU models, the XGS 138 includes a dedicated processor (Xstream Flow) to offload and accelerate encryption, TLS inspection, and high-traffic flows.
High Throughput with Rich Protection Enabled
Able to deliver high firewall, IPS, and NGFW performance even when deep inspection and protection features are active, thanks to its high bandwidth capabilities.
Flexible and High-Speed Interfaces
Includes multiple 2.5 GE copper ports, standard GE ports, and two 10 GE SFP+ fiber ports for demanding backhaul or fiber connections.
PoE Support on 2.5 GE Ports
The XGS 138 offers Power-over-Ethernet (802.3at) on two 2.5 GE ports (up to 30 W each) to power downstream devices.
Modular Expansion & Optional 5G Connectivity
Features an expansion bay for optional Gen 2 5G modules, enabling redundant cellular connectivity or fixed wireless access (FWA) integration.
Optional Redundant Power Supply
Supports a second, optional power supply for added reliability in mission-critical deployments.
Broad Protection Stack Integration
Full support for all Sophos next-gen firewall protection features: TLS/SSL inspection, IPS, application control, web filtering, threat protection, and more.

SPECIFICATIONS

Firewall Throughput: 19,100 Mbps
Firewall IMIX Throughput: 10,500 Mbps
IPS Throughput: 5,850 Mbps
Threat Protection / NGFW Throughput: 4,750 Mbps / 5,100 Mbps
Concurrent Connections: ~6,550,000
New Connections per Second: ~105,000
PoE Support: 2 ports at 2.5 GE with 30 W per port (802.3at)
Management / I/O Ports: 1 × COM RJ45, 1 × Micro-USB, 1 × USB 2.0 (front), 1 × USB 3.0 (rear)
Physical Dimensions (W × H × D): 320 × 44 × 212 mm

SOPHOS NEXT GENERATION FIREWALL XGS 2100

FEATURES

High-performance 1U rackmount appliance
Built for distributed edge or mid-size sites with strong throughput and enterprise features.
Dual-processor architecture
Uses both a high-speed CPU and a dedicated Xstream Flow processor to maintain full feature sets while preserving throughput.
Modular Flexi Port slot
Includes a flexible port bay to add optional modules (e.g. fiber, PoE, 10G) for adapting to evolving needs.
Optional redundant power supply
Allows addition of a second external power supply for uptime in critical deployments.
Bypass port pair
Includes fixed bypass ports for high availability and failover in deployments requiring traffic continuity.

SPECIFICATIONS