SonicWall offers a comprehensive suite of network security products including next-generation firewalls, wireless access points, web application firewalls, and endpoint security solutions. Their product lines include network security appliances, access security gateways, email security, and security management/analytics tools. Key products highlighted are the high-performance SuperMassive 9000 next-generation firewall series, the NSv and TZ unified threat management firewall series, Capture Client endpoint security software, and the SMA secure access gateway for mobility and cloud environments. SonicWall provides security for over 500,000 organizations across more than 150 countries.
This document provides information about Sophos, a security software company founded in 1985 in Oxford, UK. It summarizes that Sophos has approximately 2,600 employees, over 200,000 customers, and protects over 100 million users. It offers a variety of security products, including next-generation firewalls, endpoint protection, encryption, email security, and mobile security. Sophos is recognized as a leader in the Gartner Magic Quadrants for endpoint protection, unified threat management, and mobile data protection. The document promotes Sophos' security solutions as providing complete protection across networks, endpoints, and mobile devices through a unified and simple cloud-based approach.
I’m happy to announce to you that the two new wi-fi models, the Stormshield SN160W and Stormshield SN210W are now ready for ordering and are shipping as of today.
LiveSquare provides proactive security solutions that work across an organization's network and applications as a single system. When an attacker targets one part of the network, they are instantly blocked from all other parts. LiveSquare uses collaborative security where all customer sites work together to identify and block attackers in real-time. Their global system senses attacks from around the world and proactively defends customers by completely blocking attackers from accessing networks or clients.
What are the Different Types of Firewall and its Architectures.pdf
Firewalls can be used to separate network nodes from external traffic sources, internal traffic sources, or even specific applications. Firewalls are divided based on their general structure and method of operation. Techno Edge Systems LLC offers reliable Firewall solutions in Dubai to protect the entire network system and computers. For Any Queries Contact us: 971-54-4653108 Visit us: https://www.itamcsupport.ae/blog/what-are-the-different-types-of-firewall-and-its-architectures/
A Guide to Secure Remote Access with Splashtop.pdf
In the rapidly evolving landscape of modern work, the ability to access your computer or network remotely is no longer a luxury but a necessity. Whether you're working from home, on the road, or managing a distributed team, secure remote access is crucial for maintaining productivity and efficiency. In this guide, we'll explore how Splashtop, a leading remote access solution, not only facilitates seamless connectivity but also prioritizes security to empower your productivity.
Sophos firewall solutions in dubai are one of the versatile security products with next-generation features and high-graded functionalities which are very easy to install, configure, and manage. Techno Edge Systems LLC has become the prime partner in distributing the potential protective firewalls from Sophos in Dubai. For any queries Contact us: +971-54-4653108 Visit Us: support@technoedge.ae
A firewall monitors incoming and outgoing network traffic and blocks or permits data packets based on security rules. There are several types of firewalls including packet-filtering firewalls, circuit-level gateways, stateful inspection firewalls, application-level gateways, next-gen firewalls, software firewalls, and hardware firewalls. Cloud firewalls provide firewall services through a cloud-based solution and are easy to scale with organizational needs.
Connect security to your business with mc afee epo software
McAfee ePO software allows users to centrally manage enterprise security through an open framework that unifies security management across systems, applications, networks, data, and compliance solutions. It provides comprehensive views and insights to proactively address security issues, and helps identify unknown assets on the network. The software also aims to reduce complexity and streamline processes through guided configuration, automated workflows, and predefined dashboards. Additionally, it is designed to scale for large enterprise deployments supporting hundreds of thousands of devices on a single server.
The Cloud and Mobility revolution, intensified by the quickly evolving threat landscape, heightens the
challenge for businesses to secure their IT infrastructure. Now they must fight security threats that target
their employees, applications, and other assets - not just on-premises, but throughout all of cyberspace.
Get the best Palo Alto training from our real-time experts. Enroll for best Palo Alto corporate and online training from our experienced real-time trainers.
https://www.idestrainings.com/palo-alto-training/
Get the best Palo Alto training from our real-time experts. Enroll for best Palo Alto corporate and online training from our experienced real-time trainers.
https://www.idestrainings.com/palo-alto-training/
The document discusses session layer and firewalls.
For session layer:
1. It establishes and manages connections between applications to allow data transfer and synchronization.
2. It uses services from the transport layer to open and close sessions, and ensure proper data transmission.
3. Common functions include session establishment, dialog management, data transfer, and synchronization.
For firewalls:
1. Firewalls filter traffic between internal and external networks based on security rules.
2. They have evolved from packet filtering to include stateful inspection, application proxies, and next-generation capabilities.
3. Firewalls can be hardware appliances or software installed on hosts and networks.
A web application firewall (WAF) protects web applications from common attacks like SQL injection, command injection, and DDoS attacks. It monitors HTTP/HTTPS traffic between clients and servers, blocking any traffic that violates predefined security policies. WAFs are available as software, appliances, or services and provide an extra layer of defense for organizations involved in e-commerce, online banking, and other web-based businesses to defend against data theft and fraud.
Firewalls monitor and filter network traffic based on security policies. There are different types of firewalls that use various methods like packet filtering, application-level gateways, stateful inspection, and more. Firewalls are necessary to protect networks from threats and work by allowing approved traffic while blocking dangerous traffic according to pre-set policies. They defend networks by detecting and responding to malware and other attacks across the entire system.
The advent of social media has revolutionized communication, transforming the way people connect, share, and interact globally. At the forefront of this digital revolution are visionary entrepreneurs who recognized the potential of the internet to foster social connections and create communities. This essay explores the founders of some of the most influential social media platforms, their journeys, and the lasting impact they have made on society.
Mark Zuckerberg, along with his college roommates Eduardo Saverin, Andrew McCollum, Dustin Moskovitz, and Chris Hughes, founded Facebook in 2004. Initially created as a social networking site for Harvard University students, Facebook rapidly expanded to other universities and eventually to the general public. Zuckerberg's vision was to create an online directory that connected people through their real-life social networks.
Twitter, founded in 2006 by Jack Dorsey, Biz Stone, and Evan Williams, brought a new dimension to social media with its microblogging platform. Dorsey envisioned a service that allowed users to share short, real-time updates, limited to 140 characters (now 280). This concise format encouraged rapid sharing of information and fostered a culture of brevity and immediacy.
Kevin Systrom and Mike Krieger co-founded Instagram in 2010, focusing on photo and video sharing. Systrom, who studied photography, wanted to create an app that made mobile photos look professional. The app's unique filters and easy-to-use interface quickly gained popularity, amassing over a million users within two months of its launch.
Instagram's emphasis on visual content has had a significant cultural impact. It has popularized the concept of influencers, giving rise to a new industry where individuals can monetize their popularity and reach. The platform has also revolutionized digital marketing, enabling brands to connect with consumers in more authentic and engaging ways. Acquired by Facebook in 2012, Instagram continues to be a dominant force in social media, shaping trends and cultural norms.
Reid Hoffman founded LinkedIn in 2002 with the goal of creating a professional networking platform. Unlike other social media sites focused on personal connections, LinkedIn was designed to connect professionals, facilitate job searches, and foster business relationships. The platform allows users to create professional profiles, network with colleagues, and share industry insights.
LinkedIn has become an indispensable tool for job seekers, recruiters, and businesses. It has transformed the job market by making it easier to find and connect with potential employers and employees. LinkedIn's influence extends beyond job searches; it has become a hub for professional development, thought leadership, and industry news. Hoffman's vision has significantly impacted how professionals manage their careers and build their networks.
Jan Koum and Brian Acton co-founded WhatsApp in 2009, aiming to create a simple, reliable..
Crafting a compelling SEO proposal? Learn how to structure a winning SEO proposal template with essential elements and tips for client engagement. Elevate your SEO strategy with expert insights and examples
The document discusses Palo Alto Networks' next-generation security platform. It protects organizations from cyber threats by identifying applications, users, and content across networks to prevent threats. Key capabilities include identifying encrypted and disguised application traffic, examining files for unknown threats using the WildFire sandbox analysis service, and automatically updating protections when new threats are found.
Sangfor SSL VPN is an integrated, full-featured secure remote access platform for easy-to-use, anytime, anywhere connectivity. Remote and mobile users can quickly and easily access internal resources, applications and files - using any device with a web browser. Multi-layered security protection includes authentication, endpoint security, transmitting security and resource authorization policies.
SonicWall offers a comprehensive suite of network security products including next-generation firewalls, wireless access points, web application firewalls, and endpoint security solutions. Their product lines include network security appliances, access security gateways, email security, and security management/analytics tools. Key products highlighted are the high-performance SuperMassive 9000 next-generation firewall series, the NSv and TZ unified threat management firewall series, Capture Client endpoint security software, and the SMA secure access gateway for mobility and cloud environments. SonicWall provides security for over 500,000 organizations across more than 150 countries.
This document provides information about Sophos, a security software company founded in 1985 in Oxford, UK. It summarizes that Sophos has approximately 2,600 employees, over 200,000 customers, and protects over 100 million users. It offers a variety of security products, including next-generation firewalls, endpoint protection, encryption, email security, and mobile security. Sophos is recognized as a leader in the Gartner Magic Quadrants for endpoint protection, unified threat management, and mobile data protection. The document promotes Sophos' security solutions as providing complete protection across networks, endpoints, and mobile devices through a unified and simple cloud-based approach.
I’m happy to announce to you that the two new wi-fi models, the Stormshield SN160W and Stormshield SN210W are now ready for ordering and are shipping as of today.
LiveSquare provides proactive security solutions that work across an organization's network and applications as a single system. When an attacker targets one part of the network, they are instantly blocked from all other parts. LiveSquare uses collaborative security where all customer sites work together to identify and block attackers in real-time. Their global system senses attacks from around the world and proactively defends customers by completely blocking attackers from accessing networks or clients.
Firewalls can be used to separate network nodes from external traffic sources, internal traffic sources, or even specific applications. Firewalls are divided based on their general structure and method of operation. Techno Edge Systems LLC offers reliable Firewall solutions in Dubai to protect the entire network system and computers. For Any Queries Contact us: 971-54-4653108 Visit us: https://www.itamcsupport.ae/blog/what-are-the-different-types-of-firewall-and-its-architectures/
A Guide to Secure Remote Access with Splashtop.pdfsplashtop
In the rapidly evolving landscape of modern work, the ability to access your computer or network remotely is no longer a luxury but a necessity. Whether you're working from home, on the road, or managing a distributed team, secure remote access is crucial for maintaining productivity and efficiency. In this guide, we'll explore how Splashtop, a leading remote access solution, not only facilitates seamless connectivity but also prioritizes security to empower your productivity.
Sophos firewall solutions in dubai are one of the versatile security products with next-generation features and high-graded functionalities which are very easy to install, configure, and manage. Techno Edge Systems LLC has become the prime partner in distributing the potential protective firewalls from Sophos in Dubai. For any queries Contact us: +971-54-4653108 Visit Us: support@technoedge.ae
A firewall monitors incoming and outgoing network traffic and blocks or permits data packets based on security rules. There are several types of firewalls including packet-filtering firewalls, circuit-level gateways, stateful inspection firewalls, application-level gateways, next-gen firewalls, software firewalls, and hardware firewalls. Cloud firewalls provide firewall services through a cloud-based solution and are easy to scale with organizational needs.
Connect security to your business with mc afee epo softwarewardell henley
McAfee ePO software allows users to centrally manage enterprise security through an open framework that unifies security management across systems, applications, networks, data, and compliance solutions. It provides comprehensive views and insights to proactively address security issues, and helps identify unknown assets on the network. The software also aims to reduce complexity and streamline processes through guided configuration, automated workflows, and predefined dashboards. Additionally, it is designed to scale for large enterprise deployments supporting hundreds of thousands of devices on a single server.
The Cloud and Mobility revolution, intensified by the quickly evolving threat landscape, heightens the
challenge for businesses to secure their IT infrastructure. Now they must fight security threats that target
their employees, applications, and other assets - not just on-premises, but throughout all of cyberspace.
Get the best Palo Alto training from our real-time experts. Enroll for best Palo Alto corporate and online training from our experienced real-time trainers.
https://www.idestrainings.com/palo-alto-training/
Get the best Palo Alto training from our real-time experts. Enroll for best Palo Alto corporate and online training from our experienced real-time trainers.
https://www.idestrainings.com/palo-alto-training/
CN. Presentation for submitting project term pptxsaad504633
The document discusses session layer and firewalls.
For session layer:
1. It establishes and manages connections between applications to allow data transfer and synchronization.
2. It uses services from the transport layer to open and close sessions, and ensure proper data transmission.
3. Common functions include session establishment, dialog management, data transfer, and synchronization.
For firewalls:
1. Firewalls filter traffic between internal and external networks based on security rules.
2. They have evolved from packet filtering to include stateful inspection, application proxies, and next-generation capabilities.
3. Firewalls can be hardware appliances or software installed on hosts and networks.
A web application firewall (WAF) protects web applications from common attacks like SQL injection, command injection, and DDoS attacks. It monitors HTTP/HTTPS traffic between clients and servers, blocking any traffic that violates predefined security policies. WAFs are available as software, appliances, or services and provide an extra layer of defense for organizations involved in e-commerce, online banking, and other web-based businesses to defend against data theft and fraud.
Firewalls monitor and filter network traffic based on security policies. There are different types of firewalls that use various methods like packet filtering, application-level gateways, stateful inspection, and more. Firewalls are necessary to protect networks from threats and work by allowing approved traffic while blocking dangerous traffic according to pre-set policies. They defend networks by detecting and responding to malware and other attacks across the entire system.
Similar to sophos-xgs-series-firewall-datasheet.pdf (20)
The advent of social media has revolutionized communication, transforming the way people connect, share, and interact globally. At the forefront of this digital revolution are visionary entrepreneurs who recognized the potential of the internet to foster social connections and create communities. This essay explores the founders of some of the most influential social media platforms, their journeys, and the lasting impact they have made on society.
Mark Zuckerberg, along with his college roommates Eduardo Saverin, Andrew McCollum, Dustin Moskovitz, and Chris Hughes, founded Facebook in 2004. Initially created as a social networking site for Harvard University students, Facebook rapidly expanded to other universities and eventually to the general public. Zuckerberg's vision was to create an online directory that connected people through their real-life social networks.
Twitter, founded in 2006 by Jack Dorsey, Biz Stone, and Evan Williams, brought a new dimension to social media with its microblogging platform. Dorsey envisioned a service that allowed users to share short, real-time updates, limited to 140 characters (now 280). This concise format encouraged rapid sharing of information and fostered a culture of brevity and immediacy.
Kevin Systrom and Mike Krieger co-founded Instagram in 2010, focusing on photo and video sharing. Systrom, who studied photography, wanted to create an app that made mobile photos look professional. The app's unique filters and easy-to-use interface quickly gained popularity, amassing over a million users within two months of its launch.
Instagram's emphasis on visual content has had a significant cultural impact. It has popularized the concept of influencers, giving rise to a new industry where individuals can monetize their popularity and reach. The platform has also revolutionized digital marketing, enabling brands to connect with consumers in more authentic and engaging ways. Acquired by Facebook in 2012, Instagram continues to be a dominant force in social media, shaping trends and cultural norms.
Reid Hoffman founded LinkedIn in 2002 with the goal of creating a professional networking platform. Unlike other social media sites focused on personal connections, LinkedIn was designed to connect professionals, facilitate job searches, and foster business relationships. The platform allows users to create professional profiles, network with colleagues, and share industry insights.
LinkedIn has become an indispensable tool for job seekers, recruiters, and businesses. It has transformed the job market by making it easier to find and connect with potential employers and employees. LinkedIn's influence extends beyond job searches; it has become a hub for professional development, thought leadership, and industry news. Hoffman's vision has significantly impacted how professionals manage their careers and build their networks.
Jan Koum and Brian Acton co-founded WhatsApp in 2009, aiming to create a simple, reliable..
seo proposal | Kiyado Innovations LLP pdfdiyakiyado
Crafting a compelling SEO proposal? Learn how to structure a winning SEO proposal template with essential elements and tips for client engagement. Elevate your SEO strategy with expert insights and examples
10th International Conference on Networks, Mobile Communications and Telema...ijp2p
10th International Conference on Networks, Mobile Communications and
Telematics (NMOCT 2024)
Scope
10th International Conference on Networks, Mobile Communications and Telematics (NMOCT 2024) is a forum for presenting new advances and research results in the fields of Network, Mobile communications, and Telematics. The aim of the conference is to provide a platform to the researchers and practitioners from both academia as well as industry to meet and share cutting-edge development in the field.
Authors are solicited to contribute to the conference by submitting articles that illustrate research results, projects, surveying works, and industrial experiences that describe significant advances in the following areas but are not limited to.
Topics of interest include, but are not limited to, the following:
Mobile Communications and Telematics Mobile Network Management and Service Infrastructure Mobile Computing Integrated Mobile Marketing Communications Efficacy of Mobile Communications Mobile Communication Applications Critical Success Factors for Mobile Communication Diffusion Metric Mobile Business Enterprise Mobile Communication Security Issues and Requirements Mobile and Handheld Devices in the Education Telematics Tele-Learning Privacy and Security in Mobile Computing and Wireless Systems Cross-Cultural Mobile Communication Issues Integration and Interworking of Wired and Wireless Networks Location Management for Mobile Communications Distributed Systems Aspects of Mobile Computing Next Generation Internet Next Generation Web Architectures Network Operations and Management Adhoc and Sensor Networks Internet and Web Applications Ubiquitous Networks Wireless Multimedia Systems Wireless Communications
Heterogeneous Wireless Networks Operating System and Middleware Support for Mobile Computing Interaction and Integration in Mobile Communications Business Models for Mobile Communications E-Commerce & E-Governance
Nomadic and Portable Communication Wireless Information Assurance Mobile Multimedia Architecture and Network Management Mobile Multimedia Network Traffic Engineering & Optimization Mobile Multimedia Infrastructure Developments Mobile Multimedia Markets & Business Models Personalization, Privacy and Security in Mobile Multimedia Mobile Computing Software Architectures Network & Communications Network Protocols & Wireless Networks Network Architectures High Speed Networks Routing, Switching and Addressing Techniques Measurement and Performance Analysis Peer To Peer and Overlay Networks QOS and Resource Management Network-Based Applications Network Security Self-organizing networks and Networked Systems Mobile & Broadband Wireless Internet Recent Trends & Developments in Computer Networks
Paper Submission
Authors are invited to submit papers through the conference Submission System by July 06, 2024. Submissions must be original and
1. Sophos Firewall
Powerful Protection and Performance
Sophos Firewall and XGS Series appliances with dedicated Xstream Flow
Processors enable the ultimate in application acceleration, high-performance
TLS inspection, and powerful threat protection.
2. Sophos Firewall
1
Powerful Protection and Performance
The Sophos Firewall Xstream architecture is engineered to deliver high levels of
visibility, protection, and performance to address some of the greatest challenges
facing network administrators today.
TLS 1.3 Inspection
Approximately 99% of web traffic is now encrypted, making
it invisible to most firewalls. Many organizations find
themselves powerless to protect their networks from an
increasing amount of ransomware, threats, and potentially
unwanted apps that are exploiting this blind spot.
Sophos Firewall makes efficient and effective TLS
inspection possible without compromising on performance.
Our XGS Series appliances with integrated Xstream Flow
Processors put TLS traffic on the FastPath for accelerated
inspection. Our high-performance TLS inspection engine
supports TLS 1.3 without downgrading, the latest cipher
suites for maximum compatibility, and enhanced visibility
into encrypted traffic flows right on the dashboard.
Deep Packet Inspection
We believe you should never have to decide between
security and performance. Sophos Firewall includes a
high-speed deep packet inspection (DPI) engine to scan
your traffic for threats without a proxy slowing down the
process. The firewall stack can completely offload the
processing to the DPI engine, significantly reducing latency
and improving overall efficiency.
Sophos Firewall blocks the latest ransomware and
breaches with high-performance streaming DPI, including
next-gen IPS, web protection, and app control, as well as
deep learning and sandboxing powered by SophosLabs
Intelix.
Application Acceleration
A significant portion of your network traffic is trusted
business application traffic destined for branch offices,
remote users, or cloud application servers. As such,
no additional security scanning for threats or malware
is needed, and traffic can be intelligently directed to
the FastPath. This reduces latency, optimizes overall
performance, and frees up capacity for traffic that does
need deep packet inspection.
Sophos Firewall accelerates your SaaS, SD-WAN, and cloud
traffic such as VoIP, video, and other trusted applications
automatically or via your policies – putting them on the
FastPath through the Xstream Flow Processor.
SD-WAN
Managing application traffic routing over multiple WAN links
and interconnecting a distributed network are essential
elements of any SD-WAN solution. Oftentimes, these tasks
are much more challenging than they should be.
Sophos Firewall with Xstream SD-WAN provides a powerful,
integrated SD-WAN solution, with performance-based
link selection and routing, load balancing, zero-impact
transitions between links in the event of a disruption,
central cloud-managed orchestration, and Xstream
FastPath acceleration of VPN tunnel traffic. Sophos Firewall
with Xstream SD-WAN is one of the best, most flexible
SD-WAN solutions available in any firewall today.
3. Sophos Central
Sophos Central is the ultimate cybersecurity cloud management platform to
manage your firewalls and your full portfolio of Sophos security solutions.
Central Management
Simply Manage Multiple Firewalls
Sophos Central makes day-to-day setup, monitoring, and
management of your Sophos Firewall easy. It also provides
helpful features such as alerting, backup management,
one-click firmware updates, and rapid provisioning of new
firewalls.
Ì Manage all of your Sophos Firewalls and other
Sophos products from a single console
Ì Configure changes and apply them to a group of
firewalls or manage each firewall individually
Ì Create a backup schedule and store
up to five backups in the cloud
Ì Schedule firmware updates across your
entire network with just a few clicks
Central Management is available at no extra cost.
Central Reporting
Firewall Reporting in the Cloud
Sophos Central includes powerful reporting tools that
enable you to visualize your network, web, application
activity, and security over time. You get flexible reporting
that combines a variety of built-in reports with powerful
tools that you can use to create your own custom reports,
enabling you to report what you want, how you want.
Ì Increase your visibility into network activity through
analytics
Ì Analyze data to identify security gaps, suspicious user
behavior, or other events requiring policy changes
Ì Use the pre-defined modules or customize
each report for specific use cases
Central Reporting is available at no extra cost for the storage of up to seve days of
report data. Premium options with longer data retention and additional features are
available for optional purchase, either individually or as part of other subscriptions/
bundles.
Zero-Touch Deployment
Zero-touch deployment enables the initial
configuration to be performed in Sophos Central
and exported for loading onto the device from a
flash drive at startup, automatically connecting
the device back to Sophos Central.
Learn more about the Sophos Central Ecosystem at sophos.com/firewall-central.
SD-WAN Orchestration
Sophos Central makes interconnecting SD-WAN overlay
networks between multiple Sophos Firewalls quick
and easy. With just a few clicks, you can setup a full
mesh network, hub-and-spoke topology, or something
in-between, and Sophos Central will automatically
configure all of the necessary VPN tunnel and firewall
access rules to enable your SD-WAN network.
Sophos Firewall
2
4. Synchronized SD-WAN: Powerful, Reliable Application Routing
Synchronized SD-WAN harnesses the power of Synchronized Security to optimize
WAN path selection for your important business applications.
With Synchronized Application Control, discovered applications, that would otherwise be
unknown, can be used for traffic-matching criteria in SD-WAN routing policies. This is yet
another way that Synchronized Security can improve the efficiency of your network.
Sophos Firewall
3
Synchronized Security
Active Threat Response
Sophos Firewall is uniquely integrated with other Sophos
products and services to constantly share threat,
application, and user information across products to
provide enhanced detection and automatic response to
active threats. When a threat or indicator of compromise
is detected, Sophos Firewall automatically coordinates
a response with endpoints, wireless, ZTNA, email, and
other Sophos solutions to stop threats dead in their tracks.
Dynamic firewall rules ensure that compromised devices
are unable to communicate with command-and-control
servers or move around the network.
Sophos Synchronized Security also integrates with Sophos
MDR and XDR, enabling analysts to provide real-time
active threat feed information to the firewall for automatic
response to active threats, dramatically reducing response
time.
Lateral Movement Protection
Lateral Movement Protection automatically isolates
compromised systems at every point in a network to stop
attacks. Healthy endpoints assist by ignoring all traffic from
unhealthy endpoints, enabling complete isolation, even on
the same network segment, to prevent threats and active
adversaries from spreading or stealing data.
Synchronized Application Control
Synchronized Application Control utilizes Security
Heartbeat connections with Sophos endpoints to
automatically identify, classify, and control application
traffic. All encrypted, custom, evasive, and generic HTTP or
HTTPS applications that are currently unidentified will be
revealed.
Synchronized User ID
User authentication is critically important in a next-
generation firewall but often challenging to implement
in a seamless and transparent way. Synchronized User
ID eliminates the need for client or server authentication
agents by sharing the user identity between an endpoint
and the firewall through Security Heartbeat.
What Next-Gen Firewalls See Today
You can’t control what you can’t see. All firewalls today
depend on static application signatures to identify apps.
But those don’t work for most custom, obscure, and
evasive apps or any apps using generic HTTP or HTTPS.
What Sophos Firewall Sees
Sophos Firewall uses Synchronized Security to
automatically identify, classify, and control all unknown
applications, easily blocking the apps you don’t want and
prioritizing the ones you do.
5. Powerful Protection
See it. Stop it. Secure it.
Our comprehensive next-generation firewall protection has been built to expose hidden risks, block both known and
unknown threats, and automatically respond to incidents.
Exposes hidden risks Automatically responds to incidents
Blocks unknown threats
Superior visibility into unknown
applications, risky activity, suspicious
traffic, and advanced threats
helps you regain control of your
network and get deep insights.
Powerful next-gen protection
technologies like deep learning
and intrusion prevention keep
your organization safe from the
latest hacks and attacks.
Synchronized Security's automatic
threat response instantly identifies
and isolates compromised systems
on your network to prevent
breaches and lateral movement.
Sophos offers the full network stack managed from a single console: firewalls, switches, and access points.
Sophos Managed Detection and Response
More customers trust Sophos for MDR than any other vendor. Using your Sophos Firewall in combination with
Sophos MDR and Sophos Endpoint Protection gives you unmatched protection and more efficient remediation.
Find out more at: sophos.com/mdr
Sophos Firewall
4
6. Xstream Protection: A Single Bundle for Ultimate Protection
All the next-gen protection, performance, and value you need to power even the
most demanding networks. Also available with the XGS Series model of your
choice included.
Ì Xstream TLS Inspection:
TLS 1.3 inspection with pre-
packaged exceptions
Ì Xstream DPI engine: Streaming
deep packet inspection
Ì Zero-Day Threat Protection:
Analyze all unknown files
using AI, ML, and sandboxing
Ì Powered by SophosLabs
Intelix: Cloud-based
intelligence and analysis
Ì Machine Learning: Using
multiple deep learning models
Ì Cloud Sandboxing: Dynamic run-
time analysis of unknown files
Ì Reporting: Extensive threat
intelligence analysis reporting
Zero-Day Protection
Enhanced Support
Ì Xstream TLS Inspection:
TLS 1.3 inspection with pre-
packaged exceptions
Ì Xstream DPI engine: Streaming
deep packet inspection
Ì IPS: Next-gen Intrusion
Prevention
Ì ATP: Advanced Threat Protection
Ì Synchronized Security
Heartbeat: Integration
with Sophos endpoints to
identify and isolate threats
Ì Clientless VPN: HTML5
Ì SD-RED VPN: Manage
SD-RED devices
Ì Reporting: Extensive network
and threat reporting
Network Protection
Ì Networking and SD-WAN: Wireless, SD-WAN, application-aware routing, traffic shaping
Ì Protection and Performance: Xstream Architecture with Network Flow FastPath, TLS 1.3 inspection, Deep-Packet
Inspection
Ì SD-WAN and VPN: Xstream SD-WAN, IPsec/SSL site-to-site and remote access VPN (unlimited), SD-RED site-to-site
Ì Reporting: Historical on-box logging and reporting, Sophos Central cloud reporting (seven-day data retention)
Base Firewall Features
Ì Xstream TLS Inspection:
TLS 1.3 inspection with pre-
packaged exceptions
Ì Xstream DPI engine: Streaming
deep packet inspection
Ì Web Control: By user, group,
category, URL, keyword
Ì Web Threat Protection:
Malware, PUA, malicious
JavaScript, pharming
Ì App Control: By user, group,
category, risk, and more
Ì Synchronized App
Control: Integration with
Sophos endpoints to
identify unknown apps
Ì Synchronized SD-WAN: Utilizing
Synchronized App Control
to route unknown apps
Ì Reporting: Extensive web
and app reporting
Web Protection
Ì Group Firewall Management: Synchronized
policy across firewall groups
Ì Backup and firmware updates:
Storage and scheduling
Ì Zero-touch deployment: For new
firewalls from the cloud
Sophos Central Management
Ì SD-WAN Orchestration: Point-and click
site-to-site VPN orchestration
Ì Cloud Firewall Reporting: Multi-firewall reporting, save,
schedule and export reports (30-day data retention)
Ì XDR and MDR Connector: Support
for XDR and MDR services
Sophos Central Orchestration
Sophos Firewall
5
7. All Licensing Options
We recommend the Xstream Protection bundle for the ultimate in security. If
you prefer to customize your protection, all subscriptions are also available for
individual purchase.
Xstream Protection Bundle:
Base License Networking, wireless, Xstream Architecture, unlimited remote access VPN, site-to-site VPN, reporting
Network Protection Xstream TLS and DPI engine, IPS, ATP, Security Heartbeat, manage SD-RED, reporting
Web Protection Xstream TLS and DPI engine, web security and control, application control, reporting
Zero-Day Protection Machine learning and sandboxing file analysis, reporting
Central Orchestration SD-WAN VPN orchestration, Central Firewall Advanced Reporting (30-days), MDR/XDR connector
Enhanced Support 24/7 support, feature updates, advanced replacement hardware warranty for term
Custom Protection: You can choose the Standard
Protection bundle or purchase any of the protection
modules separately.
Standard Protection Bundle:
Base License
Networking, wireless, Xstream Architecture,
Xstream SD-WAN, unlimited remote
access VPN, site-to-site VPN
Network Protection
Xstream TLS and DPI engine, IPS, ATP, Security
Heartbeat, manage SD-RED, reporting
Web Protection
Xstream TLS and DPI engine, web security
and control, application control, reporting
Enhanced Support
24/7 support, feature updates, advanced
replacement hardware warranty for term
Additional Protection Modules:
Email Protection On-box antispam, AV, DLP, encryption
Web Server
Protection
Web Application Firewall
Sophos Central Management and Reporting:
Sophos Central Management and Reporting (included at no charge):
Sophos Central
Management
Group firewall management, backup
management, firmware update scheduling
Sophos Central
Firewall Reporting
Pre-packaged and custom report tools,
with seven days cloud storage for no
extra charge (see other options)
Additional Protection:
Additional Protection Services, Products, and Modules:
Managed Detection
and Response
24/7 threat hunting, detection, and response
delivered by an expert team (more info)
Sophos Intercept X
Endpoint with XDR
Sophos Central managed next-gen endpoint
protection with EDR (more info)
Zero Trust
Network Access
A ZTNA gateway is integrated into
your firewall. (more info)
Central Email
Advanced
Sophos Central managed antispam,
AV, DLP, encryption (more info)
Sophos Switch Cloud-managed access layer switches (more info)
Sophos Wireless Scalable, cloud-managed Wi-Fi (more info)
Support: A support subscription is required to receive
firmware upgrades. Enhanced support is included in all
protection bundles, but you can upgrade to enhance your
support experience further.
Additional Support Options:
Enhanced Plus
Support Upgrade
Upgrade your support with VIP support, HW
warranty for add-ons, TAM option (extra cost)
Cloud, Virtual, and Software Appliance Licensing Options:
If you’re deploying Sophos Firewall in the cloud, in a virtual
environment, or as software on your own hardware, the
licensing guide below can help you find the right option.
Model
Equivalent AWS
instance
Equivalent
Azure VM
Software/
Virtual License*
XGS 87(w) t3.medium - 2C4
XGS 107(w) c5.large
Standard_
F2s_v2
-
XGS 116(w) - - 4C6
XGS 2100 c5.xlarge - -
XGS 2300 m5.xlarge
Standard_
F4s_v2
6C8
XGS 3100 c5.2xlarge
Standard_
F8s_v2
8C16
XGS 4300 c5.4xlarge
Standard_
F16s_v2
16C24
XGS 5500 c5.9xlarge
Standard_
F32s_v2
Unlimited
* Based upon CPU cores and RAM
For a complete list of features included in each protection
subscription, see the Sophos Firewall Feature List.
Sophos Firewall
6
8. Sophos Firewall
7
Deployment Options
Purpose-built devices
to provide the ultimate
in performance.
Install the Sophos Firewall
OS image on your own
Intel hardware or server.
Software
Protect your network
infrastructure in the
AWS or Azure cloud.
Install on VMware,
Citrix, Microsoft
Hyper-V, and KVM.
Virtual
XGS Series AWS/Azure
Cloud
Sophos Firewall offers the best network visibility, protection,
and response capabilities to secure your public, private, and
hybrid cloud environments.
As an AWS Advanced Technology Partner, Sophos is
a validated AWS Security Competency vendor, AWS
Marketplace seller, and AWS Public Sector Partner.
Sophos Firewall is now available in the AWS Marketplace,
with auto-scaling support with either a pay-as-you-go
(PAYG) license model or bring your own license (BYOL) to
best fit your needs.
Sophos Firewall is certified and optimized for Azure and
is available in the Microsoft Azure Marketplace. Take
advantage of the free test drive or the flexible PAYG or BYOL
licensing options.
Sophos Firewall is Nutanix AHV and Nutanix Flow Ready,
bringing the world’s best next-gen firewall visibility,
protection, and response to the industry’s leading hyper-
converged infrastructure (HCI) platform. Take advantage
of a 30-day free trial using our KVM image and flexible
licensing.
Virtual and Software
Sophos Firewall supports a broad range of virtualization
platforms and can also be deployed as a software appliance
on your own x86 Intel hardware.
See the Licensing section for available licensing options.
9. Protection Modules
You can choose from a number of modules to customize the protection offered by
your firewall to your individual needs and deployment scenario.
Base Firewall
The Sophos Firewall Base License includes the Xstream
Architecture, networking, wireless, SD-WAN, VPN, and
reporting.
Xstream Architecture
Enables high-performance TLS 1.3 inspection, deep packet
inspection, and network flow FastPath to accelerate trusted
SaaS, SD-WAN, and cloud application traffic. Note that
Network and Web Protection are required to get the full
benefits of the Xstream Architecture.
Xstream SD-WAN and Networking
Includes all networking, routing, and SD-WAN capabilities,
including zone-based stateful firewall, NAT, VLAN, SD-
WAN profiles, performance-based WAN link selection
and monitoring, load balancing, zero-impact WAN link
transitions, and Xstream FastPath acceleration of trusted
application traffic, IPsec VPN traffic, and TLS encrypted
traffic flows.
Secure Wireless
Built-in wireless controller for Sophos APX Wi-Fi 5 access
points. Plug-and-play access point discovery makes setup
easy. Support for multiple SSIDs, hotspots, guest networks,
and diverse encryption and security standards.
Wi-Fi 6 support is available using our separate, cloud-
managed Wi-Fi solution.
VPN
Provides standards-based site-to-site and remote access
VPN (free up to the capacity of the firewall), with support
for IPsec and SSL. Sophos Connect remote access VPN
client for Windows and Macs offers seamless and easy
deployment and configuration options. SD-RED layer 2 site-
to-site tunnels offer a lightweight robust VPN alternative.
Reporting
Extensive on-box reporting provides valuable insights into
threats, users, applications, web activity, and much more.
Note that specific reporting functionality may be dependent
on other protection modules to get the full benefits (for
example, Web Protection or web and app reports).
The Base Firewall is included with every appliance.
Network Protection
All the protection you need to stop sophisticated attacks
and advanced threats while providing secure network
access to those you trust.
Next-Gen Intrusion Prevention System
Provides advanced protection from all types of modern
attacks. It goes beyond traditional server and network
resources to protect users and apps on the network as well.
Security Heartbeat
Creates a link between your Sophos Central protected
endpoints and your firewall to identify threats faster,
simplify investigation, and minimize the impact of attacks.
Easily incorporate the Security Heartbeat status into firewall
policies to automatically isolate compromised systems.
Advanced Threat Protection
Instant identification and immediate response to today’s
most sophisticated attacks. Multi-layered protection
identifies threats instantly, and Security Heartbeat provides
an emergency response.
Advanced VPN Technologies
Adds unique and simple VPN technologies, including our
clientless HTML5 self-service portal that makes remote
access incredibly simple, plus management for our
exclusive lightweight and secure SD-RED VPN technology.
Network Protection is included in the Xstream and Standard Protection bundles and is
also available for separate purchase.
Sophos Firewall
8
10. Web Protection
Unmatched visibility and control over all of your users web
and application activity.
Powerful User and Group Web Policy
Provides enterprise-level Secure Web Gateway policy
controls to easily manage sophisticated user and group
web controls. Apply policies based on uploaded web
keywords indicating inappropriate use or behavior.
Application Control and QoS
Enables user-aware visibility and control over thousands
of applications with granular policy and traffic-shaping
(QoS) options based on application category, risk, and
other characteristics. Synchronized Application Control
automatically identifies all unknown, evasive, and custom
applications on your network.
Advanced Web Threat Protection
Backed by SophosLabs, our advanced engine provides
the ultimate protection from today’s polymorphic and
obfuscated web threats. Innovative techniques like
JavaScript emulation, behavioral analysis, and origin
reputation help keep your network safe.
High-Performance Traffic Scanning
Optimized for top performance, our Xstream SSL inspection
provides ultra-low latency inspection and HTTPS scanning
while maintaining performance.
Web Protection is included in the Xstream and Standard Protection bundles and is also
available for separate purchase.
Zero-Day Protection
AI-driven static and dynamic file analysis techniques
combine to bring unprecedented threat intelligence to your
firewall and effectively identify and block ransomware and
other known and unknown threats.
Powered by SophosLabs
Powered by the industry-leading SophosLabs, the Zero-Day
Protection subscription includes a fully cloud-based threat
intelligence and threat analysis platform. This provides deep
learning-based file analysis, detailed analysis reporting, and
a threat meter to show the risk summary for a file.
We use layers of analytics to identify known and potential
threats, reduce unknowns, and derive verdicts and
intelligence reports for the most commonly used file types.
Static File Analysis
By harnessing the power of multiple machine learning
models, global reputation, deep file scanning, and more,
you can quickly identify threats without the need to execute
files in real time.
Dynamic File Analysis
Execute a file in a secure cloud-based sandbox to observe
its behavior and intent. Screenshots provide added insights
into any key events during the analysis.
Threat Intelligence Analysis Reporting
Rich intelligence reports provide you with more than just
a "good," "bad," or "unknown" verdict. Full insight into the
nature and capabilities of a threat is delivered through the
use of data science and SophosLabs research.
Zero-Day Protection is included in the Xstream Protection bundle and is also available
for separate purchase.
Sophos Firewall
9
11. Central Orchestration
Sophos Central cloud-managed VPN orchestration, firewall
reporting, and MDR/XDR integration.
Sophos Central SD-WAN Orchestration
Makes VPN orchestration easy. Wizard-based tunnel
configuration helps create full mesh networks, hub-and-
spoke models, or complex tunnel setups between multiple
firewalls a quick point-and-click exercise. Seamlessly
integrates multiple WAN link and SD-WAN functionality and
routing optimizations to improve resilience performance.
Also integrates with user authentication and Synchronized
Security Heartbeat to control access.
Central Firewall Reporting Advanced (30 Days)
Cloud-based reporting with several pre-packaged common
reports for threats, compliance, and user activity. Includes
advanced options for creating custom reports and views
with the option to save, schedule, or export your custom
reports. Includes 30 days of log data retention with the
option to add additional storage for more comprehensive
historical reporting requirements.
MDR/XDR Connector
Sophos MDR provides optional 24/7 threat hunting,
detection, and response delivered by an expert team as
a fully managed service. Sophos XDR offers extended
detection and response managed by your team.
Regardless of whether you manage it yourself or Sophos
manages it for you, your Sophos Firewall is ready to share
the necessary threat intelligence and data to the cloud.
Central Orchestration is included in the Xstream Protection bundle and is available for
separate purchase.
Zero Trust Network Access
Provide secure remote access to applications and systems
behind your firewall.
Integrated ZTNA Gateway
Sophos Firewall provides an integrated Sophos ZTNA
gateway at no extra cost. This simplifies ZTNA deployments
by eliminating the need for a separate VM gateway, making
deployments faster and easier. Sophos ZTNA is the ultimate
remote access VPN replacement, providing better security,
easier management, and a transparent user experience.
ZTNA gateways are available at no extra cost. User-based client licenses for ZTNA are
sold separately.
Email Protection
Consolidate your email protection with anti-spam, DLP,
and encryption. We recommend Sophos Central Email
Advanced for the best cloud-based email protection
solution. If you require on-box email protection, this module
offers essential anti-spam, DLP, and encryption.
Integrated Message Transfer Agent
Ensures always-on business continuity for your email,
allowing the firewall to automatically queue mail in the
event that servers become unavailable.
Live Anti-Spam
Provides protection from the latest spam campaigns,
phishing attacks, and malicious attachments.
Self-Serve Quarantine
Gives employees direct control over their spam quarantine,
saving you time and effort.
SPX Email Encryption
Unique to Sophos, SPX makes it easy to send encrypted
emails to anyone, even those without any kind of trust
infrastructure, using our patent-pending password-based
encryption technology.
Data Loss Prevention
Policy-based DLP can automatically trigger encryption or
block/notify based on the presence of sensitive data in
emails leaving the organization.
Email Protection is available for individual purchase only.
Web Server Protection
Harden your web servers and business applications against
hacking attempts and provide secure access.
Business Application Policy Templates
Pre-defined policy templates let you protect common
applications like Microsoft Exchange Outlook Anywhere or
SharePoint quickly and easily.
Protection from the Latest Hacks and Attacks
Offers a variety of advanced protection technologies,
including URL and form hardening, deep-linking and
directory traversal prevention, SQL injection and cross-site
scripting protection, cookie signing, and more.
Reverse Proxy
Authentication options, SSL offloading, and server load
balancing ensure maximum protection and performance
for your servers being accessed from the internet.
Web Server Protection is available for individual purchase only.
Sophos Firewall
10
12. Sophos Firewall
11
Sophos XGS Series Appliances
All XGS Series firewall appliances are built on a dual-processor architecture,
combining a high-performance, multi-core CPU with a dedicated Xstream Flow
Processor for targeted acceleration at the hardware level. This gives you the
flexibility and adaptability of an x86-based firewall plus a significant performance
boost over legacy firewall designs.
Product Matrix
Model Tech Specs Throughput
Form
Factor
Ports/Slots
(Max Ports)
w-model*
Swappable Components
Firewall
(Mbps)
IPsec VPN
(Mbps)
Threat
Protection
(Mbps)
Xstream
SSL/TLS
(Mbps)
XGS 87(w) Desktop 5/- (5) Wi-Fi 5 n/a 3,850 3,000 280 375
XGS 107(w) Desktop 9/- (9) Wi-Fi 5 Second power supply 7,000 4,000 370 420
XGS 116(w) Desktop 9/1 (9) Wi-Fi 5 2nd
power supply, 3G/4G, 5G, Wi-Fi**
7,700 4,800 720 650
XGS 126(w) Desktop 14/1 (14) Wi-Fi 5 2nd
power supply, 3G/4G, 5G, Wi-Fi**
10,500 5,500 900 800
XGS 136(w) Desktop 14/1 (14) Wi-Fi 5 2nd
power supply, 3G/4G, 5G, Wi-Fi**
11,500 6,350 1,000 950
XGS 2100 1U 10/1 (18) n/a Optional external power 30,000 17,000 1,250 1,100
XGS 2300 1U 10/1 (18) n/a Optional external power 39,000 20,500 1,500 1,450
XGS 3100 1U 12/1 (20) n/a Optional external power 47,000 25,000 2,000 2,470
XGS 3300 1U 12/1 (20) n/a Optional external power 58,000 31,100 3,000 3,130
XGS 4300 1U 12/2 (28) n/a Optional external power 75,000 62,500 6,500 8,000
XGS 4500 1U 12/2 (28) n/a Optional internal power 80,000 75,550 8,650 10,600
XGS 5500 2U 16/3 (48) n/a Power, SSD, Fan 100,000 92,500 14,000 13,500
XGS 6500 2U 20/4 (68) n/a Power, SSD, Fan 120,000 109,800 17,850 16,000
XGS 7500 2U 22/4 (70) n/a Power, SSD, Fan 160,000 117,000 26,000 19,500
XGS 8500 2U 22/4 (70) n/a Power, SSD, Fan 190,000 141,000 34,000 24,000
* 802.11ac
** 2nd
Wi-Fi module option for XGS 116w, 126w and 136w only
Performance Test Methodology
General: Maximum throughput measured under ideal test conditions using industry-standard Keysight-Ixia
BreakingPoint test tools. Actual performance may vary depending on network conditions and activated services.
Ì Firewall: Measured using HTTP traffic and 512 KB response size.
Ì Firewall IMIX: UDP throughput based on a combination of 66 byte, 570 byte, and 1518 byte packet sizes.
Ì IPS: Measured with IPS with HTTP traffic using default IPS ruleset and 512 KB object size.
Ì IPsec VPN: HTTP throughput using multiple tunnels and 512 KB HTTP response size.
Ì TLS Inspection: Performance measured with IPS with HTTPS sessions and different cipher suites.
Ì Threat Protection: Measured with Firewall, IPS, Application Control, and
malware prevention enabled using HTTP 200 KB response size.
Ì NGFW: Measured with IPS and Application Control enabled with HTTP
traffic using default IPS ruleset and 512KB object size.
Need Sizing Help?
For further assistance in finding the right license or appliance for your needs, speak to your local Sophos sales team
or partner. Sophos offers free sizing assistance and a Firewall Sizing Tool for partners via the Partner Portal.
13. Sophos XGS Series Desktop: SMB and Branch Office
Customers looking for an all-in-one network security solution will appreciate the
seamless connectivity options available for our Desktop appliances. With the
modularity that small businesses, retail outlets, and branch offices need to grow
and adapt to changing circumstances, these appliances offer the perfect balance
between price and performance. All Desktop models are optionally available with
built-in Wi-Fi.
All models are powered by a high-speed CPU plus a dedicated Xstream Flow
Processor for hardware acceleration.
Product Highlights
Ì Dual processor architecture for an excellent
price-to-performance ratio
Ì Every model is available with optional integrated
Wi-Fi for all-in-one connectivity
Ì An expansion bay on all XGS 116/126/136
models improves compatibility for 3G/4G and
5G when used with our optional modules
Ì An optional second Wi-Fi radio module can be
added to w-models with an expansion bay
Ì Power-over-Ethernet ports built in on all XGS
116, 126, and 136 models (2.5GE on 136)
Ì A second power supply option for all XGS
1xx models offers a redundancy option
not always seen in this form factor
Ì The SFP port on all models can be used for FTTH/
FTTP or with the optional VDSL modem
Note: All protection features are supported on every XGS
1xx model and most on XGS 87 and 87w.
Product Highlights
XGS 87 and XGS 87w
See detailed technical specifications
XGS 107, XGS 107w
See detailed technical specifications
XGS 116, XGS 116w
See detailed technical specifications
XGS 126, XGS 126w
See detailed technical specifications
XGS 136, XGS 136w
See detailed technical specifications
Sophos Firewall
12
14. Sophos Firewall
13
Sophos XGS Series Desktop: SMB and Branch Office
XGS 87 and XGS 87w
Technical Specifications
Note: The XGS 87 and 87w do not support some advanced features like on-box reporting, dual AV scanning, WAF AV
scanning, and the email message transfer agent (MTA) functionality. If you need these capabilities, the XGS 107(w) is
recommended.
Performance XGS 87(w)
Firewall throughput 3,850 Mbps
Firewall IMIX 3,000 Mbps
Firewall Latency (64 byte UDP) 6 µs
IPS throughput 1,200 Mbps
Threat Protection throughput 280 Mbps
NGFW 700 Mbps
Concurrent connections 1,600,000
New connections/sec 35,700
IPsec VPN throughput 3,000 Mbps
IPsec VPN concurrent tunnels 500
SSL VPN concurrent tunnels 500
Xstream SSL/TLS Inspection 375 Mbps
Xstream SSL/TLS
concurrent connections
8,192
Note: For performance testing methodology, see page 11
Wireless Specification (XGS 87w only)
No. of antennas 2 external
MIMO capabilities 2 x 2:2
Wireless interface 802.11a/b/g/n/ac (2.4 GHz / 5 GHz)
Physical Interfaces
Storage 16 GB eMMC
Ethernet interfaces (fixed) 4 x GbE copper
1 x SFP fiber*
Management ports 1 x COM RJ45
1 x Micro-USB (cable incl.)
Other I/O ports 1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Number of expansion slots 0
Optional add-on connectivity SFP DSL module (VDSL2)
SFP transceivers
* SFP transceivers sold separately
Front View
Status LEDs
(w-model has
additional WiFi LED)
1 x
USB 2.0
1 x COM
Micro USB
Back View
2 x external antenna
(XGS 87w only)
4 x GbE copper port
1 x GbE SFP
1 x COM
(RJ45)
1 x USB 3.0
Power supply
Physical Specifications
Mounting Rackmount kit available
(to be ordered separately)
Dimensions
Width x Height x Depth
230 x 44 x 205.5 mm
Weight 1.36 kg/3 lbs (unpacked)
2.75 kg/6.06 lbs (packed)
(w-model minimally more)
Environment
Power supply External auto-ranging AC-DC
100-240VAC, 1.7A@50-60 Hz
12VDC, 5A, 60W
Power consumption 23.2 W / 79.16 BTU/hr (87) (idle)
27.1 W / 92.13 BTU/hr (87w) (idle)
43.4 W / 148.09 BTU/hr (87) (max.)
46.8 W / 159.69 BTU/hr (87w) (max.)
Operating temperature 0°C to 40°C (operating)
-20°C to +70°C (storage)
Humidity 10% to 90%, non-condensing
Product Certifications
Certifications CB, CE, UKCA, UL, FCC, ISED, VCCI, CCC,
KC*
, BSMI, RCM, NOM, Anatel*
, TEC
* XGS 87 only
15. Sophos Firewall
14
Sophos XGS Series Desktop: SMB and Branch Office
XGS 107, XGS 107w
Technical Specifications
Front View
Status LEDs
(w-model has
additional WiFi LED)
1 x
USB 2.0
1 x COM
Micro USB
Back View
2 x external antenna
(XGS 107w only)
8 x GbE copper port
1 x GbE SFP
Power supply
Connector for optional 2nd
redundant power supply
1 x COM
(RJ45)
1 x USB 3.0
Physical Specifications
Mounting Rackmount kit available
(to be ordered separately)
Dimensions
Width x Height x Depth
230 x 44 x 205.5 mm
Weight 1.4 kg/3.09 lbs (unpacked)
2.8 kg/6.17 lbs (packed)
(w-model minimally more)
Environment
Power supply External auto-ranging AC-DC
100-240VAC, 1.7A@50-60 Hz
12VDC, 5A, 60W
Optional second redundant power supply
Power consumption 107: 26.1 W/89.06 BTU/hr (idle)
107w: 29.8 W/101.68 BTU/hr (idle)
107: 53.9 W/183.91 BTU/hr (max.)
107w: 57.3 W/195.52 BTU/hr (max.)
Operating temperature 0°C to 40°C (operating)
-20°C to +70°C (storage)
Humidity 10% to 90%, non-condensing
Product Certifications
Certifications CB, CE, UKCA, UL, FCC, ISED, VCCI, CCC,
KC*
, BSMI, RCM, NOM, Anatel*
, TEC, SDPPI*
* XGS 107 only
Performance XGS 107(w)
Firewall throughput 7,000 Mbps
Firewall IMIX 3,750 Mbps
Firewall Latency (64 byte UDP) 6 µs
IPS throughput 1,500 Mbps
Threat Protection throughput 370 Mbps
NGFW 1,050 Mbps
Concurrent connections 1,600,000
New connections/sec 44,400
IPsec VPN throughput 4,000 Mbps
SSL VPN concurrent tunnels 1,000
IPsec VPN concurrent tunnels 1,000
Xstream SSL/TLS Inspection 420 Mbps
Xstream SSL/TLS
concurrent connections
8,192
Note: For performance testing methodology, see page 11
Wireless Specification (XGS 107w only)
No. of antennas 2 external
MIMO capabilities 2 x 2:2
Wireless interface 802.11a/b/g/n/ac (2.4 GHz / 5 GHz)
Physical Interfaces
Storage
(local quarantine/logs)
Integrated 64 GB SSD
Ethernet interfaces (fixed) 8 x GbE copper
1 x SFP fiber*
Management ports 1 x COM RJ45
1 x Micro-USB (cable incl.)
Other I/O ports 1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Number of expansion slots 0
Optional add-on connectivity SFP DSL module (VDSL2)
SFP transceivers
* SFP transceivers sold separately
16. Sophos Firewall
15
Front View
Status LEDs
(w-model has
additional WiFi LED)
1 x
USB 2.0
1 x COM
Micro USB
Back View
2 x external antenna
(XGS 116w only)
6 x GbE copper port
F1 1 x SFP
fiber port
1 x COM
(RJ45)
1 x USB 3.0
Power
supply
Connector for optional 2nd
redundant power supply
Optional module
expansion bay
1 x GbE
PoE port
1 x GbE
copper port
Physical Specifications
Mounting Rackmount kit available
(to be ordered separately)
Dimensions
Width x Height x Depth
320 x 44 x 213 mm
Weight 2.2 kg/4.85 lbs (unpacked)
4.2 kg/9.26 lbs (packed)
(w-model minimally higher)
Environment
Power supply External auto-ranging AC-DC
100-240VAC, 2.5A@50-60 Hz
12VDC, 12.5A, 150W
Optional second redundant power supply
Power consumption 116: 28 W/96 BTU/hr (idle)
116w: 30 W/102 BTU/hr (idle)
116: 57 W/195 BTU/hr (max.)
116w: 60 W/205 BTU/hr (max.)
PoE addition enabled 38 W/130 BTU/hr (max.)
Operating temperature 0°C to 40°C (operating)
-20°C to +70°C (storage)
Humidity 10% to 90%, non-condensing
Product Certifications
Certifications CB, CE, UKCA, UL, FCC, ISED, VCCI, CCC,
KC*
, BSMI, RCM, NOM, Anatel*
, TEC
* XGS 116 only
Sophos XGS Series Desktop: SMB and Branch Office
XGS 116, XGS 116w
Technical Specifications
Performance XGS 116(w)
Firewall throughput 7,700 Mbps
Firewall IMIX 4,500 Mbps
Firewall Latency (64 byte UDP) 8 µs
IPS throughput 2,500 Mbps
Threat Protection throughput 720 Mbps
NGFW 2,000 Mbps
Concurrent connections 1,600,000
New connections/sec 61,500
IPsec VPN throughput 4,800 Mbps
IPsec VPN concurrent tunnels 1,500
SSL VPN concurrent tunnels 1,250
Xstream SSL/TLS Inspection 650 Mbps
Xstream SSL/TLS
concurrent connections
8,192
Note: For performance testing methodology, see page 11
Wireless Specification (XGS 116w only)
No. of antennas 2 external
MIMO capabilities 2 x 2:2
Wireless interface Wi-Fi 5/802.11a/b/g/n/ac
(2.4 GHz / 5 GHz)
Optional second Wi-Fi module Wi-Fi 5/802.11a/b/g/n/ac
Physical Interfaces
Storage
(local quarantine/logs)
Integrated 64 GB SSD
Ethernet interfaces (fixed) 8 GbE copper
1 GbE SFP*
Power-over-Ethernet (fixed) 1 x GbE
803.2at (30W max.)
Management ports 1 x COM RJ45
1 x Micro-USB (cable incl.)
Other I/O ports 1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Number of expansion slots 1
Optional add-on connectivity SFP DSL module (VDSL2)
3G/4G module/5G module
Second Wi-Fi radio (XGS 116w only)
SFP transceivers
* SFP transceivers sold separately
17. Sophos Firewall
16
Front View
Status LEDs
(w-model has
additional WiFi LED)
1 x
USB 2.0
1 x COM
Micro USB
Back View
3 x external antenna
(XGS 126w/136w only)
10 x GbE copper port
F1–F2 2 x
SFP fiber
ports
1 x COM
(RJ45)
1 x USB 3.0
Power
supply
Optional module
expansion bay
2 x 2.5 GbE PoE port (136(w))
2 x GbE PoE port (126(w))
Connector for optional 2nd
redundant power supply
Physical Specifications
Mounting Rackmount kit available
(to be ordered separately)
Dimensions
Width x Height x Depth
320 x 44 x 213 mm
Weight 2.4 kg/5.29 lbs (unpacked)
4.4 kg/9.70 lbs (packed)
(w-model minimally higher)
Environment
Power supply External auto-ranging AC-DC
100-240VAC, 2.5A@50-60 Hz
12VDC, 12.5A, 150W
Optional second redundant power supply
Power consumption 126/136: 30 W/102 BTU/hr (idle)
126w/136w: 32 W/109 BTU/hr (idle)
126: 59 W/202 BTU/hr (max.)
126w/136: 62 W/212 BTU/hr (max.)
136w: 65 W/222 BTU/hr (max.)
PoE addition enabled 76 W/260 BTU/hr (max.)
Operating temperature 0°C to 40°C (operating)
-20°C to +70°C (storage)
Humidity 10% to 90%, non-condensing
Product Certifications
Certifications CB, CE, UKCA, UL, FCC, ISED, VCCI, CCC,
KC*
, BSMI, RCM, NOM, Anatel*
, TEC, SDPPI†
* XGS 126 and XGS 136 only
† XGS 136 only
Sophos XGS Series Desktop: SMB and Branch Office
XGS 126, XGS 126w, XGS 136, XGS 136w
Technical Specifications
Performance XGS 126(w) XGS 136(w)
Firewall throughput 10,500 Mbps 11,500 Mbps
Firewall IMIX 5,250 Mbps 6,500 Mbps
Firewall Latency (64 byte UDP) 8 µs 8 µs
IPS throughput 3,250 Mbps 4,000 Mbps
Threat Protection throughput 900 Mbps 1,000 Mbps
NGFW 2,500 Mbps 3,000 Mbps
Concurrent connections 5,000,000 6,400,000
New connections/sec 69,900 74,500
IPsec VPN throughput 5,500 Mbps 6,350 Mbps
IPsec VPN concurrent tunnels 2,500 2,500
SSL VPN concurrent tunnels 1,500 1,500
Xstream SSL/TLS Inspection 800 Mbps 950 Mbps
Xstream SSL/TLS
concurrent connections
12,288 18,432
Note: For performance testing methodology, see page 11
Wireless Specification (XGS 126w and XGS 136w only)
No. of antennas 3 external
MIMO capabilities 3 x 3:3
Wireless interface Wi-Fi 5/802.11a/b/g/n/ac
(2.4 GHz / 5 GHz)
Optional 2nd
Wi-Fi Module Wi-Fi 5/802.11a/b/g/n/ac
Physical Interfaces
Storage
(local quarantine/logs)
Integrated 64 GB SSD
Ethernet interfaces (fixed) 12 x GbE copper
2 x SFP fiber*
10 x GbE copper
2 x 2.5 GbE copper
2 x SFP fiber*
Power-over-Ethernet (fixed) 2 x GbE
(30W max. per port)
2 x 2.5 GbE
(30W max. per port)
Management ports 1 x COM RJ45
1 x Micro-USB (cable incl.)
Other I/O ports 1 x USB 2.0 (front)
1 x USB 3.0 (rear)
Number of expansion slots 1
Optional add-on connectivity SFP DSL module (VDSL2)
3G/4G module/5G module
Second Wi-Fi radio
(XGS 126w/136w only)
SFP transceivers
* SFP transceivers sold separately
18. LAN and WAN Edge Connectivity
Securely connect your branch offices or remote locations to your main office with Sophos SD-RED, Remote Ethernet
Devices, and add connectivity at the LAN edge with our access layer switches and access points. Find out more at the
end of this brochure and sophos.com/switch.
Sophos XGS Series 1U: Distributed Edge
Mid-sized and distributed organizations that need a versatile solution to power and
protect their networks will be well-served with our 1U models. These rackmount
firewalls offer excellent performance, a diverse range of high-speed interfaces
and a choice of add-on connectivity modules. Whether your priority is ensuring
maximum uptime for your SD-WAN links, securely connecting your remote users,
or protecting your growing organization's network, you can tailor these models to
your dynamic environment.
All models are powered by a high-speed CPU plus a dedicated Xstream Flow
Processor for hardware acceleration.
Product Highlights
Ì Dual processor architecture supports all key protection
features without compromising performance
Ì Copper and fiber ports built in
Ì LAN bypass ports on every model
Ì Modular Flexi Port expansion bay(s) on
every model to adapt connectivity
Ì Second power supply option for all models
Ì Centrally powered PoE Flexi Port module option
to provide redundant power for PoE devices
Ì Rackmount kit included
Product Highlights
XGS 2100
See detailed technical specifications
XGS 2300
See detailed technical specifications
XGS 3100
See detailed technical specifications
XGS 3300
See detailed technical specifications
XGS 4300
See detailed technical specifications
XGS 4500
See detailed technical specifications
Sophos Firewall
17
19. Sophos Firewall
18
Sophos XGS Series 1U: Distributed Edge
XGS 2100, XGS 2300
Technical Specifications
Performance XGS 2100 XGS 2300
Firewall throughput 30,000 Mbps 39,000 Mbps
Firewall IMIX 16,500 Mbps 20,000 Mbps
Firewall Latency (64 byte UDP) 6 µs 4 µs
IPS throughput 6,000 Mbps 7,000 Mbps
Threat Protection throughput 1,250 Mbps 1,500 Mbps
NGFW 5,200 Mbps 6,300 Mbps
Concurrent connections 6,500,000 6,500,000
New connections/sec 134,700 148,000
IPsec VPN throughput 17,000 Mbps 20,500 Mbps
IPsec VPN concurrent tunnels 5,000 5,000
SSL VPN concurrent tunnels 2,500 2,500
Xstream SSL/TLS Inspection 1,100 Mbps 1,450 Mbps
Xstream SSL/TLS
concurrent connections
18,432 18,432
Note: For performance testing methodology, see page 11
Physical Interfaces
Storage
(local quarantine/logs)
Integrated min. 120 GB SATA-III SSD
Ethernet interfaces
(fixed)
8 x GbE copper
2 x SFP fiber*
Bypass port pairs 1
Management ports 1 x RJ45 MGMT
1 x COM RJ45
1 x Micro-USB (cable incl.)
Other I/O ports 2 x USB 3.0 (front)
1 x USB 2.0 (rear)
Number of Flexi Port slots 1
Flexi Port modules
(optional)
8 port GbE copper
8 port GbE SFP fiber
4 port 10GE SFP+ fiber
4 port GbE copper bypass (2 pairs)
4 port GbE copper PoE +
4 port GbE copper
4 port 2.5 GbE copper PoE
2 port GbE Fiber (LC) bypass
+ 4 port GbE SFP Fiber
Max. total port density
(incl. use of modules)
18
Max. Power-over-Ethernet
(using Flexi Port module)
1 module: 4 ports, 60W max.
Optional add-on connectivity SFP DSL module (VDSL2)
SFP/SFP+ Transceivers
Display Multi-function LCD module
* Transceivers (mini GBICs) sold separately
Front View
COM: Micro USB, RJ45,
2 x USB 3.0, MGMT port
1 x expansion bay
(shown with
optional module)
LAN 1–8: 8 x GbE copper –
1 bypass pair (ports 1/2)
Multi-function
LCD display and
navigation
F1–F2 2 x SFP
fiber ports
Back View
Power switch Power supply
Mounting pins for external
power supply
Connector for external
redundant power supply
(available as an option)
USB
Physical Specifications
Mounting 1U rackmount
(2 rackmount ears included)
Dimensions
Width x Height x Depth
438 x 44 x 405 mm
Weight 4.7 kg/10.36 lbs (unpacked)
7 kg/15.43 lbs (packed)
Environment
Power supply Internal auto-ranging AC-DC
100-240VAC, 3-6A@50-60 Hz
External Redundant PSU Option
Power consumption 2100: 43 W/146.86 BTU/hr (idle)
2300: 45 W/153.7 BTU/hr (idle)
2100: 162 W/533.5 BTU/hr (max.)
2300: 167 W/570.74 BTU/hr (max.)
PoE addition enabled 76 W/260 BTU/hr (max.)
Operating temperature 0°C to 40°C (operating)
-20°C to +70°C (storage)
Humidity 10% to 90%, non-condensing
Product Certifications
Certifications CB, CE, UKCA, UL, FCC, ISED, VCCI, KC,
RCM, NOM, Anatel, CCC, BSMI, TEC, SDPPI
20. Sophos Firewall
19
Sophos XGS Series 1U: Distributed Edge
XGS 3100, XGS 3300
Technical Specifications
Performance XGS 3100 XGS 3300
Firewall throughput 47,000 Mbps 58,000 Mbps
Firewall IMIX 23,500 Mbps 27,000 Mbps
Firewall Latency (64 byte UDP) 4 µs 4 µs
IPS throughput 10,500 Mbps 14,000 Mbps
Threat Protection throughput 2,000 Mbps 3,000 Mbps
NGFW 9,000 Mbps 12,500 Mbps
Concurrent connections 12,260,000 13,700,000
New connections/sec 186,500 257,800
IPsec VPN throughput 25,000 Mbps 31,100 Mbps
IPsec VPN concurrent tunnels 6,500 6,500
SSL VPN concurrent tunnels 5,000 5,000
Xstream SSL/TLS Inspection 2,470 Mbps 3,130 Mbps
Xstream SSL/TLS
concurrent connections
55,296 102,400
Note: For performance testing methodology, see page 11
Physical Interfaces
Storage
(local quarantine/logs)
Integrated min. 240 GB SATA-III SSD
Ethernet interfaces
(fixed)
8 x GE copper
2 x SFP fiber*
2 x SFP+ 10 GbE fiber*
Bypass port pairs 1
Management ports 1 x RJ45 MGMT
1 x COM RJ45
1 x Micro-USB (cable incl.)
Other I/O ports 2 x USB 3.0 (front)
1 x USB 2.0 (rear)
Number of Flexi Port slots 1
Flexi Port modules
(optional)
8 port GbE copper
8 port GbE SFP fiber
4 port 10 GbE SFP+ fiber
4 port GbE copper bypass (2 pairs)
4 port GbE copper PoE +
4 port GbE copper
4 port 2.5 GbE copper PoE
2 port GbE Fiber (LC) bypass
+ 4 port GbE SFP Fiber
Max. total port density
(incl. use of modules)
20
Max. Power-over-Ethernet
(using Flexi Port module)
1 module: 4 ports, 60W max.
Optional add-on connectivity SFP DSL module (VDSL2)
SFP/SFP+ Transceivers
Display Multi-function LCD module
* Transceivers (mini GBICs) sold separately
Front View
Multi-function
LCD display
and Navigation
1 x expansion bay
(shown with
optional module)
F3–F4: 2 x SFP
fiber ports
LAN 1–8: 8 x GbE copper –
1 bypass pair (ports 1/2)
F1–F2 2 x SFP+
fiber ports
COM: Micro USB, RJ45,
2 x USB 3.0, MGMT port
Back View
Power switch Power supply
Mounting pins for external
power supply
Connector for external
redundant power supply
(available as an option)
USB
Physical Specifications
Mounting 1U rackmount
(2 rackmount ears included)
Dimensions
Width x Height x Depth
438 x 44 x 405 mm
Weight 4.7 kg/10.36 lbs (unpacked)
7 kg/15.43 lbs (packed)
Environment
Power supply Internal auto-ranging AC-DC
100-240VAC, 3-6A@50-60 Hz
External Redundant PSU Option
Power consumption 3100: 50 W/170.77 BTU/hr (idle)
3300: 50 W/170.77 BTU/hr (idle)
3100: 182 W/621.97 BTU/hr (max.)
3300: 201 W/686.68 BTU/hr (max.)
PoE addition enabled 76 W/260 BTU/hr (max.)
Operating temperature 0°C to 40°C (operating)
-20°C to +70°C (storage)
Humidity 10% to 90%, non-condensing
Product Certifications
Certifications CB, CE, UKCA, UL, FCC, ISED, VCCI, KC,
RCM, NOM, Anatel, CCC, BSMI, TEC, SDPPI
21. Sophos Firewall
20
Sophos XGS Series 1U: Distributed Edge
XGS 4300
Technical Specifications
Performance XGS 4300
Firewall throughput 75,000 Mbps
Firewall IMIX 33,000 Mbps
Firewall Latency (64 byte UDP) 3 µs
IPS throughput 29,500 Mbps
Threat Protection throughput 6,500 Mbps
NGFW 23,000 Mbps
Concurrent connections 16,600,000
New connections/sec 368,000
IPsec VPN throughput 62,500 Mbps
IPsec VPN concurrent tunnels 8,500
SSL VPN concurrent tunnels 7,500
Xstream SSL/TLS Inspection 8,000 Mbps
Xstream SSL/TLS
concurrent connections
276,480
Note: For performance testing methodology, see page 11
Physical Interfaces
Storage
(local quarantine/logs)
1 x min. 240 GB SATA-III SSD
Ethernet interfaces
(fixed)
4 x GbE copper
4 x 2.5 GbE copper
4 x SFP+ 10 GbE fiber*
Bypass port pairs 2
Management ports 1 x RJ45 MGMT
1 x COM RJ45
1 x Micro-USB (cable incl.)
Other I/O ports 2 x USB 3.0 (front)
Number of Flexi Port slots 2
Flexi Port modules
(optional)
8 port GbE copper
8 port GbE SFP fiber
4 port 10 GbE SFP+ fiber
4 port GbE copper bypass (2 pairs)
4 port GbE copper PoE +
4 port GbE copper
4 port 2.5 GbE copper PoE
2 port GbE Fiber (LC) bypass
+ 4 port GbE SFP Fiber
Max. total port density
(incl. use of modules)
28
Max. Power-over-Ethernet
(using Flexi Port module)
2 modules: 4 ports, 60W max. each
Optional add-on connectivity SFP DSL module (VDSL2)
SFP/SFP+ Transceivers
Display Multi-function LCD module
* Transceivers (mini GBICs) sold separately
Front View
Multi-function
LCD display
and navigation
2 x expansion
bay (shown with
optional modules)
LAN 1–4: 4 x GbE copper
– 2 bypass pairs (ports
1/2 and 3/4)
F1–F4 4 x SFP+
fiber ports
LAN 5–8: 4 x
2.5 GbE copper
COM: Micro USB, RJ45,
2 x USB 3.0, MGMT port
Back View
Power supply
Mounting pins for external
power supply
Connector for external
redundant power supply
(available as an option)
Power switch
Physical Specifications
Mounting 1U rackmount (sliding rails incl.)
Dimensions
Width x Height x Depth
438 x 44 x 510 mm
Weight 8.7 kg/19.18 lbs (unpacked)
14.9 kg/32.85 lbs (packed)
Environment
Power supply Internal auto-ranging AC-DC
100-240VAC, 3.7-7.4A@50-60 Hz
External Redundant PSU Option
Power consumption 131 W/447.43 BTU/hr (idle)
268.35 W/916.56 BTU/hr (max.)
PoE addition enabled 152 W/519 BTU/hr
Operating temperature 0°C to 40°C (operating)
-20 to +70°C (storage)
Humidity 10% to 90%, non-condensing
Product Certifications
Certifications CB, CE, UKCA, UL, FCC, ISED, VCCI, KC,
RCM, NOM, Anatel, CCC, BSMI, TEC, SDPPI
22. Sophos Firewall
21
Sophos XGS Series 1U: Distributed Edge
XGS 4500
Technical Specifications
Performance XGS 4500
Firewall throughput 80,000 Mbps
Firewall IMIX 37,000 Mbps
Firewall Latency (64 byte UDP) 4 µs
IPS throughput 36,500 Mbps
Threat Protection throughput 8,650 Mbps
NGFW 30,000 Mbps
Concurrent connections 17,200,000
New connections/sec 450,000
IPsec VPN throughput 75,550 Mbps
IPsec VPN concurrent tunnels 8,500
SSL VPN concurrent tunnels 10,000
Xstream SSL/TLS Inspection 10,600 Mbps
Xstream SSL/TLS
concurrent connections
276,480
Note: For performance testing methodology, see page 11
Physical Interfaces
Storage
(local quarantine/logs)
2 x min. 240 GB SATA-III SSD (SW RAID-1)
Ethernet interfaces
(fixed)
4 x GbE copper
4 x 2.5 GbE copper
4 x SFP+ 10 GbE fiber*
Bypass port pairs 2
Management ports 1 x RJ45 MGMT
1 x COM RJ45
1 x Micro-USB (cable incl.)
Other I/O ports 2 x USB 3.0 (front)
Number of Flexi Port slots 2
Flexi Port modules
(optional)
8 port GbE copper
8 port GbE SFP fiber
4 port 10 GbE SFP+ fiber
4 port GbE copper bypass (2 pairs)
4 port GbE copper PoE +
4 port GbE copper
4 port 2.5 GbE copper PoE
2 port GbE Fiber (LC) bypass
+ 4 port GbE SFP Fiber
Max. total port density
(incl. use of modules)
28
Max. Power-over-Ethernet
(using Flexi Port module)
2 modules: 4 ports, 60W max. each
Optional add-on connectivity SFP DSL module (VDSL2)
SFP/SFP+ Transceivers
Display Multi-function LCD module
* Transceivers (mini GBICs) sold separately
Front View
Multi-function
LCD display
and navigation
2 x expansion
bay (shown with
optional modules)
LAN 1–4: 4 x GbE copper
– 2 bypass pairs (ports
1/2 and 3/4)
F1–F4 4 x SFP+
fiber ports
LAN 5–8: 4 x
2.5 GbE copper
COM: Micro USB, RJ45,
2 x USB 3.0, MGMT port
Back View
Hot swappable
power supply
Slot for internal
redundant power supply
(available as an option)
Power switch
Physical Specifications
Mounting 1U rackmount (sliding rails incl.)
Dimensions
Width x Height x Depth
438 x 44 x 510 mm
Weight 9.7 kg/21.38 lbs (unpacked)
15.9 kg/35.05 lbs (packed)
Environment
Power supply Internal Hot Swappable auto-ranging
AC-DC 100-240VAC, 3.7-7.4A@50-60 Hz
Internal Redundant PSU Option
Power consumption 151 W/515.74 BTU/hr (idle)
268.35 W/916.56 BTU/hr (max.)
PoE addition enabled 152 W/519 BTU/hr
Operating temperature 0°C to 40°C (operating)
-20 to +70°C (storage)
Humidity 10% to 90%, non-condensing
Product Certifications
Certifications CB, CE, UKCA, UL, FCC, ISED, VCCI, KC,
RCM, NOM, Anatel, CCC, BSMI, TEC, SDPPI
23. Sophos Firewall
22
Sophos XGS Series 2U: Enterprise and Campus Edge
Distributed and growing enterprises that require maximum throughput for even
the most complex network get no-compromise protection, performance, and
business continuity with these next-gen firewalls. The Xstream Flow Processors
provide dedicated hardware acceleration to easily handle full-on protection for
today’s encrypted, cloud-hosted applications and traffic. These models strike the
perfect balance between port density and modularity, with a range of high-speed,
built-in ports, plus additional high-density Flexi Port modules available to extend
connectivity even further.
All models are powered by a high-speed CPU plus a dedicated Xstream Flow
Processor for enterprise-grade hardware acceleration.
Product Highlights
Ì Dual-processor architecture with dedicated
co-processor for hardware acceleration
Ì Built to power all key threat protection features such as
TLS inspection, sandboxing, and AI-driven threat analysis
Ì Excellent price-to-performance ratio
Ì A range of standard 1 GE copper plus 8 to 12
SFP+ 10 GbE fiber interfaces built in
Ì QSPF28 ports on the XGS 7500 and 8500 provide port
speeds of up to 40 Gbps (7500) and 100 Gbps (8500)
Ì Optional standard and high-density Flexi Port modules
available to extend and adapt connectivity
Ì Maximum port density of 48 (XGS 5500), 68 (XGS 6500),
or 70 (XGS 7500/8500) using optional modules
Ì Redundancy features on all models
ensure business continuity
Product Highlights
XGS 5500
See detailed technical specifications
XGS 6500
See detailed technical specifications
XGS 7500
See detailed technical specifications
XGS 8500
See detailed technical specifications
24. Sophos Firewall
23
Sophos XGS Series 2U: Enterprise Edge
XGS 5500
Technical Specifications
Performance XGS 5500
Firewall throughput 100,000 Mbps
Firewall IMIX 52,000 Mbps
Firewall Latency (64 byte UDP) 5 µs
IPS throughput 40,000 Mbps
Threat Protection throughput 14,000 Mbps
NGFW 38,000 Mbps
Concurrent connections 32,400,000
New connections/sec 468,000
IPsec VPN throughput 92,500 Mbps
IPsec VPN concurrent tunnels 10,000
SSL VPN concurrent tunnels 15,000
Xstream SSL/TLS Inspection 13,500 Mbps
Xstream SSL/TLS
concurrent connections
512,000
Note: For performance testing methodology, see page 11
Physical Interfaces
Storage
(local quarantine/logs)
2 x min. 480 GB SATA-III SSD
HW RAID built into CPU
Ethernet interfaces
(fixed)
8 x GbE copper
8 x SFP+ 10 GbE fiber*
Bypass port pairs 2
Management ports 1 x RJ45 MGMT
1 x COM RJ45
1 x Micro-USB (cable incl.)
Other I/O ports 2 x USB 3.0 (front)
Number of Flexi Port slots 2 + 1 for high-density module
Flexi Port modules
(optional)
8 port GbE copper
8 port GbE SFP fiber
4 port 10 GbE SFP+ fiber
4 port GbE copper bypass (2 pairs)
2 port 40 GbE QSFP+ fiber
8 port 10 GbE SFP+ fiber
2 port GbE Fiber (LC) bypass
+ 4 port GbE SFP Fiber
2 port 10 GbE Fiber (LC) bypass
+ 4 port 10 GbE SFP+ Fiber
High-density module (NIC): 12 port
GE copper + 4 port 2.5 GE copper
Max. total port density
(incl. use of modules)
48
Optional add-on connectivity SFP DSL module (VDSL2)
SFP/SFP+ Transceivers
Display Multi-function LCD module
* Transceivers (mini GBICs) sold separately
Front View
1 x expansion bay (shown
with optional module)
COM: Micro USB, RJ45,
2 x USB 3.0, MGMT port
2 x expansion bay
(shown with
optional modules)
F1–F4/F5–F8
fiber ports
LAN 1–8: 8 x GbE copper
– fixed. Incl. 2 bypass
pairs (ports 1/2 and 3/4)
Multi-function
LCD display and
navigation
Back View
2 x hot swappable
power supply
ESD grounding point
Power switch Chassis grounding
connections
Physical Specifications
Mounting 2U sliding rails (included)
Dimensions
Width x Height x Depth
438 x 88 x 645 mm
Weight 17.8 kg/39.24 lbs (unpacked)
27 kg/59.53 lbs (packed)
Environment
Power supply 2 x hot-swap internal auto-ranging
100-240VAC, 50-60 Hz PSU
Power consumption 168.0W/573.81 BTU/h (idle)
478.01W/1117.43 BTU/h (max.)
Operating temperature 0°C to 40°C (operating)
-20°C to +70°C (storage)
Humidity 10% to 90%, non-condensing
Product Certifications
Certifications CB, CE, UKCA, UL, FCC, ISED, VCCI, BSMI,
RCM, NOM, Anatel, KC, CCC, SDPPI
Planned: TEC
25. Sophos Firewall
24
Sophos XGS Series 2U: Enterprise Edge
XGS 6500
Technical Specifications
Performance XGS 6500
Firewall throughput 120,000 Mbps
Firewall IMIX 60,000 Mbps
Firewall Latency (64 byte UDP) 5 µs
IPS throughput 50,750 Mbps
Threat Protection throughput 17,850 Mbps
NGFW 46,500 Mbps
Concurrent connections 39,900,000
New connections/sec 496,000
IPsec VPN throughput 109,800 Mbps
IPsec VPN concurrent tunnels 10,000
SSL VPN concurrent tunnels 15,000
Xstream SSL/TLS Inspection 16,000 Mbps
Xstream SSL/TLS
concurrent connections
768,000
Note: For performance testing methodology, see page 11
Physical Interfaces
Storage
(local quarantine/logs)
2 x min. 480 GB SATA-III SSD
HW RAID built into CPU
Ethernet interfaces
(fixed)
8 x GbE copper
12 x SFP+ 10 GbE fiber*
Bypass port pairs 2
Management ports 1 x RJ45 MGMT
1 x COM RJ45
1 x Micro-USB (cable incl.)
Other I/O ports 2 x USB 3.0 (front)
Number of Flexi Port slots 2 + 2 for high-density module
Flexi Port modules
(optional)
8 port GbE copper
8 port GbE SFP fiber
4 port 10 GbE SFP+ fiber
4 port GbE copper bypass (2 pairs)
2 port 40 GbE QSFP+ fiber
8 port 10 GbE SFP+ fiber
2 port GbE Fiber (LC) bypass
+ 4 port GbE SFP Fiber
2 port 10 GbE Fiber (LC) bypass
+ 4 port 10 GbE SFP+ Fiber
High-density module (NIC): 12 port
GE copper + 4 port 2.5 GE copper
Max. total port density
(incl. use of modules)
68
Optional add-on connectivity SFP DSL module (VDSL2)
SFP/SFP+ Transceivers
Display Multi-function LCD module
* Transceivers (mini GBICs) sold separately
Front View
2 x expansion bay (shown
with optional modules)
COM: Micro USB, RJ45,
2 x USB 3.0, MGMT port
2 x expansion bay
(shown with
optional modules)
F1–F4/F5–F8/
F9–F12 fiber ports
LAN 1–8: 8 x GbE copper
– fixed. Incl. 2 bypass
pairs (ports 1/2 and 3/4)
Multi-function
LCD display and
navigation
Back View
2 x hot swappable
power supply
ESD grounding point
Power switch Chassis grounding
connections
Physical Specifications
Mounting 2U sliding rails (included)
Dimensions
Width x Height x Depth
438 x 88 x 645 mm
Weight 17.8 kg/39.24 lbs (unpacked)
27 kg/59.53 lbs (packed)
Environment
Power supply 2 x hot-swap internal auto-ranging
100-240VAC, 50-60 Hz PSU
Power consumption 188.00 W/642.13 BTU/h (idle)
497.09 W/1697.8 BTU/h (max.)
Operating temperature 0°C to 40°C (operating)
-20°C to +70°C (storage)
Humidity 10% to 90%, non-condensing
Product Certifications
Certifications CB, CE, UKCA, UL, FCC, ISED, VCCI, BSMI,
RCM, NOM, Anatel, KC, CCC, SDPPI
Planned: TEC
26. Sophos Firewall
25
Sophos XGS Series 2U: Enterprise/Campus Edge
XGS 7500
Technical Specifications
Performance XGS 7500
Firewall throughput 160,000 Mbps
Firewall IMIX 70,500 Mbps
Firewall Latency (64 byte UDP) 5.4 µs
IPS throughput 71,500 Mbps
Threat Protection throughput 26,000 Mbps
NGFW 58,000 Mbps
Concurrent connections 48,000,000
New connections/sec 1,100,000
IPsec VPN throughput 117,000 Mbps
IPsec VPN concurrent tunnels 12,500
SSL VPN concurrent tunnels 19,000
Xstream SSL/TLS Inspection 19,500 Mbps
Xstream SSL/TLS
concurrentconnections
1,280,000
Note: For performance testing methodology, see page 11
Physical Interfaces
Storage
(local quarantine/logs)
2 x min. 960 GB NVMe SSD
HW RAID built into CPU
Ethernet interfaces
(fixed)
8 x GbE copper
12 x SFP+ 10 GbE fiber*
2 x QSFP28 (up to 40 Gbps)
Bypass port pairs 2
Management ports 1 x RJ45 MGMT
1 x COM RJ45
1 x Micro-USB (cable incl.)
Other I/O ports 2 x USB 3.0 (front)
Number of Flexi Port slots 2 + 2 for high-density module
Flexi Port modules
(optional)
8 port GbE copper
8 port GbE SFP fiber
4 port 10 GbE SFP+ fiber
4 port GbE copper bypass (2 pairs)
2 port 40 GbE QSFP+ fiber
8 port 10 GbE SFP+ fiber
2 port GbE Fiber (LC) bypass
+ 4 port GbE SFP Fiber
2 port 10 GbE Fiber (LC) bypass
+ 4 port 10 GbE SFP+ Fiber
High-density module (NIC): 12 port
GE copper + 4 port 2.5 GE copper
Max. total port density
(incl. use of modules)
70
Optional add-on connectivity SFP DSL module (VDSL2)
SFP/SFP+ Transceivers
Display Multi-function LCD module
* Transceivers (mini GBICs) sold separately
Front View
2 x large expansion bay (shown with
optional High-Density modules)
COM: Micro USB, RJ45,
2 x USB 3.0, MGMT port
2 x expansion bay
(shown with
optional modules)
F1–12 SFP+
fiber/DAC ports
LAN 1–8: 8 x GbE copper –
fixed. Incl. 2 bypass pairs
(ports 1/2 and 3/4)
Multi-function
LCD display and
navigation
F13–F14 QSFP28
fiber/DAC ports
(max. 40 Gbps)
Back View
2 x hot swappable
power supply
ESD grounding point
Power switch Chassis grounding
connections
Physical Specifications
Mounting 2U sliding rails (included)
Dimensions
Width x Height x Depth
438 x 88 x 645 mm
17.24 x 3.46 x 25.39 inches
Weight 18 kg/39.68 lbs (unpacked)
27.3 kg/60.19 lbs (packed)
Environment
Power supply 2 x hot-swap internal auto-ranging
100-240VAC, 50-60 Hz PSU
Power consumption 306 W/1,044 BTU/h (idle)
635 W/2,165 BTU/h (max.)
Operating temperature 0°C to 40°C (operating)
-20°C to +70°C (storage)
Humidity 10% to 90%, non-condensing
Product Certifications
Certifications CB, CE, UKCA, UL, FCC, ISED, VCCI, BSMI,
RCM, NOM, KC, SDPPI, Anatel, CCC.
Planned: TEC
27. Sophos Firewall
26
Sophos XGS Series 2U: Enterprise/Campus Edge
XGS 8500
Technical Specifications
Performance XGS 8500
Firewall throughput 190,000 Mbps
Firewall IMIX 81,000 Mbps
Firewall Latency (64 byte UDP) 5.5 µs
IPS throughput 93,000 Mbps
Threat Protection throughput 34,000 Mbps
NGFW 76,000 Mbps
Concurrent connections 58,000,000
New connections/sec 1,700,000
IPsec VPN throughput 141,000 Mbps
IPsec VPN concurrent tunnels 15,000
SSL VPN concurrent tunnels 24,000
Xstream SSL/TLS Inspection 24,000 Mbps
Xstream SSL/TLS
concurrent connections
2,500,000
Note: For performance testing methodology, see page 11
Physical Interfaces
Storage
(local quarantine/logs)
2 x min. 960 GB NVMe SSD
HW RAID built into CPU
Ethernet interfaces
(fixed)
8 x GbE copper
12 x SFP+ 10 GbE fiber*
2 x QSFP28 (up to 100 Gbps)
Bypass port pairs 2
Management ports 1 x RJ45 MGMT
1 x COM RJ45
1 x Micro-USB (cable incl.)
Other I/O ports 2 x USB 3.0 (front)
Number of Flexi Port slots 2 + 2 for high-density module
Flexi Port modules
(optional)
8 port GbE copper
8 port GbE SFP fiber
4 port 10 GbE SFP+ fiber
4 port GbE copper bypass (2 pairs)
2 port 40 GbE QSFP+ fiber
8 port 10 GbE SFP+ fiber
2 port GbE Fiber (LC) bypass
+ 4 port GbE SFP Fiber
2 port 10 GbE Fiber (LC) bypass
+ 4 port 10 GbE SFP+ Fiber
High-density module (NIC): 12 port
GE copper + 4 port 2.5 GE copper
Max. total port density
(incl. use of modules)
70
Optional add-on connectivity SFP DSL module (VDSL2)
SFP/SFP+ Transceivers
Display Multi-function LCD module
* Transceivers (mini GBICs) sold separately
Front View
2 x large expansion bay (shown with
optional High-Density modules)
COM: Micro USB, RJ45,
2 x USB 3.0, MGMT port
2 x expansion bay
(shown with
optional modules)
F1–12 SFP+
fiber/DAC ports
LAN 1–8: 8 x GbE copper –
fixed. Incl. 2 bypass pairs
(ports 1/2 and 3/4)
Multi-function
LCD display and
navigation
F13–F14 QSFP28
fiber/DAC ports
(max. 100 Gbps)
Back View
2 x hot swappable
power supply
ESD grounding point
Power switch Chassis grounding
connections
Physical Specifications
Mounting 2U sliding rails (included)
Dimensions
Width x Height x Depth
438 x 88 x 645 mm
17.24 x 3.46 x 25.39 inches
Weight 18 kg/39.68 lbs (unpacked)
27.3 kg/60.19 lbs (packed)
Environment
Power supply 2 x hot-swap internal auto-ranging
100-240VAC, 50-60 Hz PSU
Power consumption 318 W/1,085 BTU/h (idle)
645 W/2,200 BTU/h (max.)
Operating temperature 0°C to 40°C (operating)
-20°C to +70°C (storage)
Humidity 10% to 90%, non-condensing
Product Certifications
Certifications CB, CE, UKCA, UL, FCC, ISED, VCCI, BSMI,
RCM, NOM, KC, SDPPI, Anatel, CCC.
Planned: TEC
28. Sophos Firewall
27
Adapt Connectivity with Optional Modules
Connectivity Modules
Add additional connectivity options to your appliances to enhance the range and performance of your network.
XGS Series: Optional Connectivity Modules
Desktop Modules Other Connectivity Options
SFP VDSL2 Modem
For all XGS and XG Series with an SFP port
2nd Wi-Fi 5 Module
For XGS 116w, 126w, and 136w only
(not compatible with XG Series)
3G/4G Module
For XGS 116(w), 126(w), and 136(w) models only
(not compatible with XG Series)
Optional Transceivers
A range of optional transceivers are
available, incl. SFP, SFP+
5G Module
For XGS 116(w), 126(w), and 136(w) models only
(not compatible with XG Series)
XGS Series: Desktop Accessory Matrix by Model
Redundancy Connectivity Mounting
Model Power Expansion Bay
3G/4G module/
5G module Wi-Fi Options VDSL SFP Modem Rackmount Kit
XGS 87 n/a n/a n/a n/a Optional Optional
XGS 87w n/a n/a n/a Built in Optional Optional
XGS 107 Optional 2nd
power supply n/a n/a n/a Optional Optional
XGS 107w Optional 2nd
power supply n/a n/a Built in Optional Optional
XGS 116 Optional 2nd
power supply 1 Optional n/a Optional Optional
XGS 116w Optional 2nd
power supply 1 Optional Built in
Optional 2nd
module
Optional Optional
XGS 126 Optional 2nd
power supply 1 Optional n/a Optional Optional
XGS 126w Optional 2nd
power supply 1 Optional Built in
Optional 2nd
module
Optional Optional
XGS 136 Optional 2nd
power supply 1 Optional n/a Optional Optional
XGS 136w Optional 2nd
power supply 1 Optional Built in
Optional 2nd
module
Optional Optional
29. Sophos Firewall
28
Flexi Port Modules for 1U and 2U
Configure your hardware to suit your infrastructure and change it as needed. Our optional Flexi Port LAN modules give you
the freedom to select the connectivity you need: copper, fiber, 10GbE, and 40GbE – you decide.
XGS Rackmount Models For XGS 2xxx/3xxx/4xxx only For XGS 2U Rackmount Models only
8 Port 1G copper 4 Port 1G copper PoE + 4 Port 1G copper 2 Port 40G QSFP+
8 Port 1G SFP 4 Port 2.5G copper PoE 8 Port 10G SFP+
4 Port 10G SFP+ 2 port 10 GbE Fiber (LC) bypass +
4 port 10 GbE SFP+ Fiber
4 Port 1G copper bypass (2 pairs) High-Density Flexi Port Module (NIC)
12 Port 1G copper + 4 Port 2.5G copper
2 port GbE Fiber (LC) bypass +
4 port GbE SFP Fiber
Note: XGS modules are not compatible with any previous XG Series appliances
30. Sophos Firewall
29
XGS Series: 1U Accessory Matrix by Model
Redundancy Modular Connectivity Mounting
Model Power 2nd
SSD VDSL SFP Modem Flexi Port Bays Flexi Port Modules Rackmount Kit
XGS 2100 Optional external n/a Optional 1 Ì 8 Port 1G copper
Ì 8 Port 1G SFP
Ì 4 Port 10G SFP+
Ì 4 Port 1G copper bypass
Ì 4 port 1G copper PoE
+ 4 port 1G copper
Ì 4 port 2.5G copper PoE
Ì 2 port GbE Fiber
(LC) bypass + 4 port
GbE SFP Fiber
Rackmount ears incl.
Optional sliding rails
XGS 2300 Optional external n/a Optional 1 Rackmount ears incl.
Optional sliding rails
XGS 3100 Optional external n/a Optional 1 Rackmount ears incl.
Optional sliding rails
XGS 3300 Optional external n/a Optional 1 Rackmount ears incl.
Optional sliding rails
XGS 4300 Optional external n/a Optional 2 Sliding rails included
XGS 4500 Optional internal Internal redundant SSD Optional 2 Sliding rails included
XGS Series: 2U Accessory Matrix by Model
Redundancy Modular Connectivity Mounting
Model Power SSD VDSL SFP Modem Flexi Port Bays Flexi Port Modules Rackmount Kit
XGS 5500 Included 2nd
redundant
SSD included
Optional 2 + 1 for
High-density
module
Ì 8 Port 1G copper
Ì 8 Port 1G SFP
Ì 4 Port 10G SFP+
Ì 4 Port 1G copper bypass
Ì 2 port 40G QSFP+
Ì 8 port 10G SFP+
Ì 2 port GbE Fiber
(LC) bypass + 4 port
GbE SFP Fiber
Ì 2 port 10 GbE Fiber
(LC) bypass + 4 port
10 GbE SFP+ Fiber
Ì High-Density Flexi
Port module (NIC) 12
Port 1G copper + 4
Port 2.5G copper
Sliding rails included
XGS 6500 Included 2nd
redundant
SSD included
Optional 2 + 2 for
High-density
modules
Sliding rails included
XGS 7500 Included 2nd
redundant NVMe
SSD included
Optional 2 + 2 for
High-density
modules
Sliding rails included
XGS 8500 Included 2nd
redundant NVMe
SSD included
Optional 2 + 2 for
High-density
modules
Sliding rails included
31. Sophos Firewall
30
Sophos Wireless Protection
Simple, Secure, Reliable
Sophos offers three different options for wireless protection:
Firewall as a Controller
Using Sophos Firewall as a wireless controller, your Sophos access points are automatically discovered when
they’re connected, allowing you to configure a variety of corporate, guest, or contractor wireless networks quickly
and easily. This option supports Wi-Fi 5 APX Series access points only.
Hardware Appliances with Integrated Wi-Fi
All our XGS Series desktop appliances are available with an integrated wireless access point. Coverage can be
further extended by adding Sophos APX Series access points.
Cloud-Managed Wi-Fi
Our Sophos Central-managed wireless solution is the best option for greater scalability, enhanced security, and
support for the latest technology with our Wi-Fi 6/6E AP6 Series access points. APX Series models are also
supported.
Technical Specifications
Our indoor APX Series access points support Wi-Fi 5 (802.11ac Wave 2) and can be managed on premises from
your firewall console. Management in the Sophos Central cloud platform is currently also available at no extra cost.
Model APX 120 APX 320 APX 530 APX 740
Deployment Indoor; desktop, wall, or ceiling mount.
WLAN Standards 802.11 a/b/g/n/ac
Radios 1 x 2.4 GHz single band
1 x 5 GHz single band
1 x 2.4 GHz/5 GHz dual-band
1 x 5 GHz single band
1 x Bluetooth low energy
(BLE - for future use)
1 x 2.4 GHz single band
1 x 5 GHz single band
1 x Bluetooth low energy
(BLE - for future use)
Antennas 2 x internal dual-band
antenna for Radio-1 and 2
2 x internal dual-band
antenna for Radio-1
2 x internal 5 GHz
antenna for Radio-2
1 x internal 2.4 GHz
antenna for BLE
3 x internal 2.4 GHz
antenna for Radio-1
3 x internal 5 GHz
antenna for Radio-2
1 x internal 2.4 GHz
antenna for BLE
4 x internal 2.4 GHz
antenna for Radio-1
4 x internal 5 GHz
antenna for Radio-2
1 x internal 2.4 GHz
antenna for BLE
Performance 2 x 2:2 MU-MIMO 3 x 3:3 MU-MIMO 4 x 4:4 MU-MIMO
Interfaces 1 x 12V DC-in
1 x RJ45 10/100/1000
Ethernet w/PoE
1 x RJ45 connector
console serial port
1 x RJ45 10/100/1000
Ethernet w/PoE
1 x RJ45 connector console serial port
1 x RJ45 10/100/1000 Ethernet port
1 x RJ45 10/100/1000 Ethernet w/PoE
Power (max.) 11.8W 11.5W 16.7W 22.4W
Power-over-Ethernet (min.) PoE 802.3af PoE+ 802.3at
Dimensions
Width x Height x Depth
144 x 33.5 x 144 mm
5.67 x 1.32 x 5.67 inches
155 x 38 x 155 mm
6.11 x 1.5 x 6.11 inches
183 x 39 x 183 mm
7.21 x 1.54 x 7.21 inches
195 x 43 x 195 mm
7.68 x 1.7 x 7.68 inches
Weight 0.256 kg 0.474 kg 0.922 kg 1.012 kg
See sophos.com/wireless for further details about our wireless solutions.
32. Sophos Firewall
31
SD-RED
Sophos SD-RED: Empowering Your SD-WAN Strategy
Sophos has long been a pioneer in providing an easy-to-use and secure way to connect branch offices and other
remote locations. Sophos Firewall includes comprehensive SD-WAN features to help you accelerate application
performance and get better visibility into network health to ensure that your remote locations enjoy the same
performance as your main office.
Our SD-RED devices work with your Sophos Firewall independent of whether you have a hardware, software, or
public cloud deployment. Our APX Series access points are also compatible with Sophos SD-RED.
To manage Sophos SD-RED, you need to have an active Network Protection subscription.
Technical Specifications
Model SD-RED 20 SD-RED 60
Capacity
Maximum throughput 250 Mbps 850 Mbps
Physical interfaces (Built-in)
LAN interfaces 4 x 10/100/1000 Base-TX (1 GbE copper) 4 x 10/100/1000 Base-TX (1 GbE copper)
WAN interfaces 1 x 10/100/1000 Base-TX (shared with SFP) 2 x 10/100/1000 Base-TX (WAN1 shared port with SFP)
SFP interfaces 1x SFP fiber (shared port with WAN) 1x SFP fiber (shared port with WAN1)
Power-over-Ethernet ports None 2 PoE ports (total power 30W)
USB ports 2 x USB 3.0 (front and rear) 2 x USB 3.0 (front and rear)
COM ports 1 x micro-USB 1 x micro-USB
Optional Connectivity
Modular bay 1 (for use with optional Wi-Fi OR 4G/LTE card) 1 (for use with optional Wi-Fi OR 4G/LTE card)
Optional Wi-Fi module
802.11 a/b/g/n/ac Wave 1 (Wi-Fi 5) dual-band capable
2 x 2 MIMO 2 antennas
802.11 a/b/g/n/ac Wave 1 (Wi-Fi 5) dual-band capable
2 x 2 MIMO 2 antennas
Optional 3G/4G LTE module MC7430/MC7455 Sierra Wireless Card MC7430/MC7455 Sierra Wireless Card
Optional VDSL modem Optional SFP modem (support coming in future release) Optional SFP modem (support coming in future release)
Physical Specifications
Dimensions
Width x Height x Depth
225 x 44 x 150 mm
8.86 x 1.73 x 5.91 inches
225 x 44 x 150 mm
8.86 x 1.73 x 5.91 inches
Weight 0.9 kg/1.8 kg (1.98 lbs/3.97 lbs) Unpacked/Packed 1.0 kg/2.2 kg (2.2 lbs/4.85 lbs) Unpacked/Packed
Power supply adapter
AC Input: 110-240VAC @50-60 Hz
DC Output: 12V +/- 10%, 3.7A, 40W
AC Input: 110-240VAC @50-60 Hz
DC Output: 12V +/- 10%, 6.95A, 75W
Power redundancy support Yes, optional second power supply Yes, optional second power supply
Power consumption
6.1W, 20.814 BTU (idle)
22.6W, 77.114 BTU (full load)
11.88W, 40.536 BTU/h (idle)
25.33W, 86.429 BTU/h (full load without PoE)
62.48W, 213.190 BTU/h (full load with PoE)
Temperature (operational) 0°C to 40°C (32°F to 104°F) 0°C to 40°C (32°F to 104°F)
Temperature (storage) -20°C to 70°C (-4°F to 158°F) -20°C to 70°C (-4°F to 158°F)
Humidity 10% to 90%, non-condensing 10% to 90%, non-condensing
Safety Regulations
Certifications (safety, EMC, radio) CE/FCC/IC/RCM/VCCI/CB/UL/CCC/KC/ANATEL CE/FCC/IC/RCM/VCCI/CB/UL/CCC/KC/ANATEL
See sophos.com/compare-xgs for further technical details.
33. Sophos Switch
Access Layer Switches
The Sophos Switch Series offers a range of network access layer switches to connect and power
the devices connecting to your local area network (LAN) while adding security controls and
segmentation at the all-important LAN edge. Our switches can be managed from Sophos Central
alongside all of your Sophos solutions. A local user interface is also available.
Technical Specifications
1G Models
8-Port: CS101-8, CS101-8FP 8 x 1G, 2 x SFP. FP = Full PoE (110W)
24-Port: CS110-24, CS110-24FP 24 x 1G, 4 x SFP+. FP = Full PoE (410W)
48-Port: CS110-48, CS110-48P, CS110-48FP 48 x 1G, 4 x SFP+. P = Partial PoE (410W). FP = Full PoE (740W)
2.5G Models
8-Port: CS210-8FP 8 x 2.5G, 4 x SFP+. FP = Full PoE (240W). This model supports 802.3bt.
24-Port: CS210-24FP 16 x 1G, 8 x 2.5G, 4 x SFP+. FP = Full PoE (410W).
48-Port: CS210-48FP 32 x 1G, 16 x 2.5G, 4 x SFP+. FP = Full PoE (740W)
Deployment Options
While most 24- and 48-port models will find their future home in a rack, our entry-level 8-port
models are also suitable for wall mounting or desktop use, making them the ideal choice for
deployments outside of a standard data center environment. All of our switches come with a
mounting kit.
See sophos.com/switch for further details.