Intercept X, Server, XDR, Mobile
Firewall, Zero Trust, Wireless, Switch
XDR, Managed Threat Response, Rapid Response, Refactr
Cloud Optix, Workload Protection, Zero Trust, Firewall
Protection for home Mac and PCs.
Sophos XGS Series firewalls combine the best of two worlds: the flexibility of a high-performance, multi-core CPU for deep-packet inspection, plus the performance benefits of a dedicated Xstream Flow Processor for intelligent application acceleration.
Sophos Firewall and the XGS Series deliver the industry’s best visibility, protection, and performance. From the small branch office to the distributed enterprise, no compromise protection is guaranteed.
Sophos Firewall can take your network anywhere it needs to go with an extensive range of modular hardware appliances, cloud and virtual platform support, and secure access edge devices like our SD-RED and APX wireless access points.
Excellent value and all-in-one connectivity for all your branch office, retail outlet, and small business needs.
Models 87/87w, 107/107w, 116/116w, 126/126w, 136/136w
Performance and versatile connectivity options to meet the security infrastructure needs of larger SMB and mid-sized organizations.
Performance, connectivity, and redundancy without compromise for the most demanding distributed enterprise networks.
Plug-and-play Remote Ethernet Devices to provide edge connectivity for branch office and remote sites.
Manage, secure, and control your Wi-Fi networks from your Sophos Firewall.
As an AWS Advanced Technology Partner, Sophos is a validated AWS Security Competency vendor, AWS marketplace seller, and AWS Public Section Partner.
Sophos Firewall is available in the AWS marketplace with a Pay as You Go (PAYG) license model or Bring Your Own License (BYOL) to best fit your needs.
Sophos Firewall is certified and optimized for Azure and is available in the Microsoft Azure Marketplace.
Take advantage of the free test drive or the flexible PAYG or BYOL licensing options.
Sophos Firewall is Nutanix AHV and Nutanix Flow Ready bringing next-gen protection to the industry’s leading Hyper Convergence Infrastructure (HCI) platform.
Take advantage of a 30-day free trial using our KVM image and flexible licensing.
Sophos Firewall is also available on all popular virtualization platforms, including VMWare ESXi, Microsoft Hyper-V 2008 and 2012, KVM, and Citrix Xen App platforms.
You can also install Sophos Firewall as a software appliance on your own x86 hardware.
Customers looking for an all-in-one network security solution will appreciate the seamless connectivity options available for our desktop appliances. With the modularity that smaller businesses, retail outlets, and branch offices need to grow and adapt to changing circumstances, they offer the perfect balance between price and performance. All desktop models are optionally available with built-in Wi-Fi.
All models are powered by a high-speed CPU plus a dedicated Xstream Flow Processor for hardware acceleration.
Dual processor architecture for an excellent price to performance ratio
Every model is available with optional integrated Wi-Fi for all-in-one connectivity
An expansion bay on all XGS 116/126/136 models improves compatibility for 3G/4G when used with our optional module
An optional second Wi-Fi radio module can be added to w-models with an expansion bay
A second power supply option for all XGS 1xx models offers a redundancy option not always seen in this form factor
Power-over-Ethernet ports are built-in on 116, 126 (1 GE) and 136 (2.5 GE) models to power your external devices
The SFP port on all models can be used for FTTH/FTTP or with the optional VDSL modem
Note: All protection features are supported on every XGS 1xx model and most on XGS 87 and 87w
For XGS 116, 126, and 136 models only
Our desktop appliances are often deployed in remote locations where flexible connectivity is essential. The expansion bay on the XGS 116, 126, and 136 models provides the option to add a 3G/4G module to your appliance. The module can be securely mounted and is then managed from your Sophos Firewall console.
Better performance with the latest standards supported (LTE cat-6, up to 300 Mbps download/50 Mbps upload)
Full protection from theft or damage
Two different versions: Europe/Americas and Asia-Pacific
For use with all XG and XGS Series models
Use the SFP port to add VDSL connectivity to your appliance. Get rid of your router and connect your appliance directly to the DSL socket on your wall. This means one less piece of equipment to manage and a fully integrated solution. Our optional DSL modem supports most VDSL2 standards with download/upload speeds up to 100 Mbps.
For XGS 116w, 126w, and 136w only
Improve the Wi-Fi coverage and performance in your office by adding a second Wi-Fi radio to selected XGS models. Adding a second radio to a model which already has built-in Wi-Fi allows you to broadcast the 2.4 and 5 GHz bands simultaneously and adds two additional antennas for an overall better Wi-Fi experience.
Mid-sized and distributed organizations in need of a versatile solution to power and protect their network will be well-served with our 1U models. These rackmount firewalls offer excellent performance, a diverse range of high-speed interfaces built-in, and a choice of add-on connectivity modules. Whether your priority is ensuring maximum uptime for your SD-WAN links, securely connecting your remote users, or protecting the network in a growing organization, you can tailor them to your dynamic environment.
All models are powered by a high-speed CPU plus a dedicated Xstream Flow Processor for hardware acceleration.
Dual processor architecture supports all key protection features without compromising performance
A wide selection of copper and fiber ports plus various management interfaces are built-in on every model
Fixed LAN bypass ports are on every model to support various deployment scenarios
Modular Flexi Port expansion bay(s) on every model to adapt connectivity
Second power supply option for all models
Optional Power-over-Ethernet Flexi Port modules are centrally powered and so benefit from power redundancy when using the second power option
For all XGS 1U models
Our 1U models come with one or more expansion bays to flexibly add to the diverse range of built-in interfaces on every box. Changes in your environment, your workforce, or your edge infrastructure may require additional fiber ports or a change in your connectivity. With Flexi Port modules, you have a cost-effective way to adapt your appliance, rather than having to purchase new hardware mid-term.
Sophos offers a range of transceivers to use in the SFP and SFP+ interfaces on your appliance or Flexi port module.
A list of compatible third-party transceivers can be found in our knowledge base article.
All of our 1U models offer an optional second power supply for redundancy. The external power supply can be connected to the rear of the appliance.
When using this power supply with either the XGS 2100 or 2300, we suggest that you purchase rackmount rails (rather than using the rackmount ears supplied) for a more stable deployment in your data center.
The second power supply for the XGS 4500 provides a simple way to add redundancy to our most powerful 1U unit.
For added reliability, the XGS 4500 also offers a second integrated SSD (RAID).
Distributed and growing enterprises in need of maximum throughput for even the most complex network get the ultimate in protection, performance, and business continuity with these next-gen firewalls. The new Xstream Flow Processors provide dedicated hardware acceleration to easily handle full-on protection for today’s encrypted, cloud-hosted applications and traffic. These models strike the perfect balance between port density and modularity, with a range of high-speed, built-in ports, plus additional high-density Flexi port modules available to extend connectivity even further.
All models are powered by a high-speed CPU plus a dedicated Xstream Flow Processor for hardware acceleration.
Dual processor architecture with dedicated co-processor for hardware acceleration
Built to power all key threat protection features such as TLS inspection, sandboxing and AI-driven threat analysis
Excellent price to performance ratio
A range of standard 1 GE copper plus 8 to 12 SFP+ 10GE Fiber interfaces on-board
Optional standard and high-density Flexi Port modules available to extend and adapt connectivity
Maximum port density of 48 (XGS 5500) or 68 (XGS 6500) using optional modules
Redundancy features on all models ensure business continuity
For all XGS 2U models
Our 2U models come with two standard Flexi Port expansion bays plus one or two bays for high-density modules to flexibly add to the diverse range of built-in interfaces on every box. Changes in your environment, your workforce, or your edge infrastructure may require additional fiber ports or a change in your connectivity. With Flexi Port modules, you have a cost-effective way to adapt your appliance, rather than having to purchase new hardware mid-term.
A list of compatible third-party transceivers can be found in our knowledge base article.
All of our 2U appliances come equipped with hot-swappable components to ensure maximum uptime:
All 2U rackmount appliances are supplied with rackmount sliding rails.
SD-RED Remote Ethernet Devices SD-RED offers a uniquely simple solution to extend network connectivity to your remote locations and branch offices, no matter where in the world they are. Replace expensive MPLS connections to reduce your costs and take advantage of other Sophos products, such as Intercept X, for added SD-WAN functionality in combination with Sophos Firewall.
Both SD-RED models are equipped with a modular bay, allowing you to tailor connectivity to your needs. This provides flexible, reliable WAN connectivity without the incompatibility issues experienced with USB dongles and similar add-on solutions.
Add an 802.11ac Wave 2 (Wi-Fi 5) module to your SD-RED device to provide Wi-Fi connectivity at your remote sites. Two external antennas ensure that the network coverage is optimized.
Power redundancy is a must for network devices. A second power adapter on your SD-RED ensures business continuity.
Our 3G/4G module has been tested using numerous Internet Service Providers in many countries. Two external antennas provide superior network coverage vs. other add-on solutions.
Mount your SD-RED on a wall for easy access to all interfaces or use a rackmount kit to add it to your existing server rack.
Wireless LAN and Sophos Firewall Sophos Firewall provides several options for wireless LAN connectivity. As Wireless Protection is included in the Base License purchased with every appliance, there are no additional subscription costs to consider.
Desktop appliances are optionally available with Wi-Fi built-in. These are ideal as a low-cost, all-in-one solution for smaller offices and retail environments where network coverage is only required in a relatively limited space. See the Desktop section for further details.
Your Sophos Firewall can be used as a wireless controller to manage APX Series access points. These models are designed for a range of deployment scenarios and with 2x2, 3x3 and 4x4 models available at different price points, they can suit even the tightest budget.
The APX Series can also be managed from Sophos Central. This option offers additional features and the full scalability of a cloud-managed platform. If you’re already using Sophos Central to manage other Sophos products, your Sophos partner or sales contact can provide more information about Sophos Wireless.
© 1997 -2022 Sophos Ltd. All rights reserved.