.svg?branch=dev&width=185&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "Home"){kind=logo}
.svg?branch=dev&width=13&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "Top Navigation - Sign in - Icon")
XGS Series
SMB and branch office: 2nd Gen XGS desktop models
Unlock supreme desktop performance, improved energy efficiency, and a wealth of new high-speed connectivity options.
Sophos second-generation XGS Series desktop appliances deliver twice the performance of first-generation models while using half the power. Every model includes 2.5 GE interfaces to ensure smooth traffic flow from firewall to switch to Wi-Fi 6 access points.
The fanless XGS 88 and XGS 108 run whisper-quiet, ideal for healthcare, education, and retail. An optional 5G module provides redundant cellular connectivity or cost-effective fixed wireless access.
Models XGS 88 to XGS 128 feature a streamlined single-CPU architecture with virtual FastPath technology for traffic acceleration when paired with Sophos Firewall OS v21 or higher. The XGS 138, designed for the distributed edge, adds a dedicated Xstream Flow processor for hardware acceleration and two 10 GE SFP+ interfaces for high-speed fiber. All models except the XGS 138 are available with optional built-in Wi-Fi.
2nd Gen XGS desktop models
* Transceivers sold separately
** 5G module (Gen.2) not sold in Japan
Performance test methodology
| General | Maximum throughput measured under ideal test conditions using industry-standard Keysight-Ixia BreakingPoint test tools. Actual performance may vary depending on network conditions and activated services. |
| Firewall | Measured using HTTP traffic and 512 KB response size. |
| Firewall IMIX | UDP throughput based on a combination of 66 byte, 570 byte, and 1518 byte packet sizes. |
| IPS | Measured using HTTP traffic, default IPS ruleset, and 512 KB object size. |
| IPsec VPN | HTTP throughput measured using multiple tunnels and 512 KB HTTP response size. |
| TLS inspection | Measured with IPS enabled on HTTPS sessions and different cipher suites. |
| Threat protection | Measured with firewall, IPS, application control, and malware prevention enabled using Enterprise Mix traffic. |
Product highlights
- All protection features are supported on every XGS 1xx desktop model and most are available on XGS 88 and XGS 88w.
- Accelerated performance: Up to double the throughput of Gen.1 models plus Xstream virtual FastPath acceleration for IPsec VPN (XGS 88 to XGS 128) in combination with SFOS v21 and higher.
- High-speed connectivity built in: 2.5 GE interfaces on everymodel,two built-in 10 GE SFP+ interfaces on the XGS 138, and Wi-Fi 6 (802.11ax) integrated on all w-models with concurrent use of the 2.4 and 5 GHz bands for better performance.
- Power and environment: Up to 50% lower power consumption, fanless XGS 88 and 108 models for whisper-quiet operation, optimized thermal design for XGS 118 and above, and redundant power option for all XGS 1xx models.
- Optional connectivity: New 5G module available exclusively for Gen.2 models for more cost-effective redundant connectivity.
- Streamlined hardware architecture: The XGS 88 to XGS 128 models boast a new single-CPU architecture while the XGS 138 has a refreshed dual-processor architecture.
Accessories
5G connectivity
For XGS 118, XGS 128, and XGS 138 models only
For many business locations, a 5G cellular network can be deployed to support traffic peaks or provide an important redundant/fallback connectivity option for SD-WAN. 5G fixed wireless access (FWA) may sound like a contradiction in terms, but as a technology, it allows network operators to deliver cost-effective, high-speed broadband connectivity to both suburban and rural areas. Using 5G, operators can now meet the high-speed internet access demands of cloud services in business and consumer requirements for latency-free, high-definition streaming services.
The optional Gen.2 5G module can be securely mounted in the XGS device and then managed from your Sophos Firewall.
- Better performance with the latest standards supported.
- Highly cost-effective solution.
- Full protection from theft and damage.
- Gen.2 5G module data rates (max.):
5G SA sub-6: downlink 2.4 Gbps; uplink 900 Mbps.
5G NSA sub-6: downlink 3.4 Gbps; uplink 550 Mbps.
LTE: downlink 1.6 Gbps; uplink 200 Mbps.
WCDMA: downlink 42 Mbps; uplink 5.76 Mbps.
- One 5G module (Gen.2) version for all regions.
XGS Series 2nd Gen desktop accessories matrix
| Model | Power redundancy | Expansion bay | 5G module | Wi-Fi options | Rackmount kit |
|---|---|---|---|---|---|
| XGS 88 | N/A | N/A | N/A | N/A | Optional |
| XGS 88w | N/A | N/A | N/A | Wi-Fi 6 built in | Optional |
| XGS 108 | Optional 2nd power supply | N/A | N/A | N/A | Optional |
| XGS 108w | Optional 2nd power supply | N/A | N/A | Wi-Fi 6 built in | Optional |
| XGS 118 | Optional 2nd power supply | 1 | Optional | N/A | Optional |
| XGS 118w | Optional 2nd power supply | 1 | Optional | Wi-Fi 6 built in | Optional |
| XGS 128 | Optional 2nd power supply | 1 | Optional | N/A | Optional |
| XGS 128w | Optional 2nd power supply | 1 | Optional | Wi-Fi 6 built in | Optional |
| XGS 138 | Optional 2nd power supply | 1 | Optional | N/A | Optional |
