.svg?width=185&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "Home"){kind=logo}
.svg?width=13&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "Top Navigation - Sign in - Icon")
XGS Series next-gen firewall appliances
Enterprise and campus edge: 2U models
XGS 2U firewalls strike the perfect balance between port density and modularity, with a range of high-speed, built-in ports. Additional high-density Flexi Port modules are available to extend connectivity even further. All 2U rackmount models are powered by a high-speed CPU plus an Xstream Flow processor for traffic acceleration.
Compare XGS 2U models
Performance test methodology
| General | Maximum throughput measured under ideal test conditions using industry-standard Keysight-Ixia BreakingPoint test tools. Actual performance may vary depending on network conditions and activated services. |
| Firewall | Measured using HTTP traffic and 512 KB response size. |
| Firewall IMIX | UDP throughput based on a combination of 66 byte, 570 byte, and 1518 byte packet sizes. |
| IPS | Measured using HTTP traffic, default IPS ruleset, and 512 KB object size. |
| IPsec VPN | HTTP throughput measured using multiple tunnels and 512 KB HTTP response size. |
| TLS inspection | Measured with IPS enabled on HTTPS sessions and different cipher suites. |
| Threat protection | Measured with firewall, IPS, application control, and malware prevention enabled using Enterprise Mix traffic. |
Product highlights
- Engineered for no-compromise performance
- Dual-processor architecture with dedicated co-processor for enterprise-grade hardware acceleration
- High-performance Non-Volatile Memory Express (NVMe) SSDs for better compatibility and storage (XGS 7500/8500 only)
- Sufficient headroom to power all key threat protection features, such as TLS inspection, sandboxing, and AI-driven threat analysis
- Extremely competitive ROI per protected Mbps
- A range of standard 1 GE copper interfaces plus 8 to 12 SFP+ 10 GE fiber interfaces on every model
- QSFP28 interfaces on high-end models support port speeds of up to 40 Gbps (XGS 7500) and 100 Gbps (XGS 8500)
- Maximum port density of 48 (XGS 5500), 68 (XGS 6500), or 70 (XGS 7500/8500) using optional modules
- Redundancy features on all models to ensure business continuity
Accessories
Flexi Port modules
For all XGS 2U models
All 2U appliances come with two standard Flexi Port expansion bays plus one or two bays for the larger, high-density modules. These allow you to flexibly adapt your appliance to changes in your environment, workforce, or edge infrastructure that may require additional fiber ports or other connectivity adjustments. Flexi Port modules offer a cost-effective way to adapt your appliance rather than having to purchase new hardware mid-term, guaranteeing the best value over the lifetime of your firewall.
Redundancy
All of our 2U appliances come equipped with components to ensure maximum uptime:
- Dual SSDs
- Dual power supplies (hot-swappable)
Transceivers
A list of compatible third-party transceivers can be found in our knowledge base article.
Rackmount kits
All 2U rackmount appliances are supplied with rackmount sliding rails.
XGS Series 2U accessories matrix
| Model | Redundant power | Redundant SSD | Flexi Port bays | Flexi Port modules | Rackmount kit |
|---|---|---|---|---|---|
| XGS 5500 | Included | Included | 2 + 1 for high-density module | 8-port 1 GE copper 8-port 1 GE SFP 4-port 10 GE SFP+ 4-port 1 GE copper bypass 2-port 40 GE QSFP+ 8-port 10 GE SFP+ 2-port GE fiber (LC) bypass + 4-port GE SFP fiber 2-port 10 GE fiber (LC) bypass + 4-port 10 GE SFP+ fiber High-density Flexi Port module: 12-port 1 GE copper + 4-port 2.5 GE copper | Sliding rails included |
| XGS 6500 | Included | Included | 2 + 2 for high-density modules | Sliding rails included | |
| XGS 7500 | Included | Included | 2 + 2 for high-density modules | Sliding rails included | |
| XGS 8500 | Included | Included | 2 + 2 for high-density modules | Sliding rails included |
