.svg?width=185&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "Home"){kind=logo}
.svg?width=13&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "Top Navigation - Sign in - Icon")
XGS Series
SMB and branch office: 2nd Gen XGS desktop models
Unlock supreme desktop performance, improved energy efficiency, and a wealth of new high-speed connectivity options.
Sophos second-generation XGS Series desktop appliances deliver double the performance of our first-generation models while cutting power consumption in half. All these desktop firewalls include 2.5 GE interfaces, allowing traffic to flow freely and without bottlenecks, from your firewall to your 2.5 GE switch to your Wi-Fi 6 access point.
Customers with noise-sensitive environments such as healthcare, education, and retail will love the whisper-quiet operation of the fanless XGS 88 and XGS 108 models. Using the expansion bay, an optional 5G module adds either redundant cellular connectivity or cost-effective 5G fixed wireless access (FWA).
The XGS 88 to XGS 128 models feature a streamlined, single-CPU architecture that utilizes virtual FastPath technology for traffic acceleration (in combination with Sophos Firewall OS v21 and higher). As our gateway model to the distributed edge, the XGS 138 boasts a dedicated Xstream Flow processor for hardware acceleration and two 10 GE SFP+ interfaces for high-speed fiber connectivity. All models except the XGS 138 are optionally available with built-in Wi-Fi.
2nd Gen XGS desktop models
.png?width=1024&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "XGS 108/108w")
.png?width=1024&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "XGS 118/118w")
.png?width=1024&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "XGS 128/128w")
.png?width=1024&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "XGS 138")
* Transceivers sold separately
** 5G module (Gen.2) not sold in Japan
Performance test methodology
| General | Maximum throughput measured under ideal test conditions using industry-standard Keysight-Ixia BreakingPoint test tools. Actual performance may vary depending on network conditions and activated services |
| Firewall | Measured using HTTP traffic and 512 KB response size |
| Firewall IMIX | UDP throughput based on a combination of 66 byte, 570 byte, and 1518 byte packet sizes |
| IPS | Measured using HTTP traffic, default IPS ruleset, and 512 KB object size |
| IPsec VPN | HTTP throughput measured using multiple tunnels and 512 KB HTTP response size |
| TLS inspection | Measured with IPS enabled on HTTPS sessions and different cipher suites |
| Threat protection | Measured with firewall, IPS, application control, and malware prevention enabled using Enterprise Mix traffic |
.png?width=1024&quality=80&auto=webp&format=auto&cache=true&immutable=true&cache-control=max-age%3D31536000 "XGS Series Desktop Hardware")
Product highlights
- All protection features are supported on every XGS 1xx desktop model and most are available on XGS 88 and XGS 88w.
- Accelerated performance: Up to double the throughput of Gen.1 models plus Xstream virtual FastPath acceleration for IPsec VPN (XGS 88 to XGS 128) in combination with SFOS v21 and higher
- High-speed connectivity built in: 2.5 GE interfaces on everymodel,two built-in 10 GE SFP+ interfaces on the XGS 138, and Wi-Fi 6 (802.11ax) integrated on all w-models with concurrent use of the 2.4 and 5 GHz bands for better performance
- Power and environment: Up to 50% lower power consumption, fanless XGS 88 and 108 models for whisper-quiet operation, optimized thermal design for XGS 118 and above, and redundant power option for all XGS 1xx models
- Optional connectivity: New 5G module available exclusively for Gen.2 models for more cost-effective redundant connectivity
- Streamlined hardware architecture: The XGS 88 to XGS 128 models boast a new single-CPU architecture while the XGS 138 has a refreshed dual-processor architecture
Accessories
5G connectivity
For XGS 118, XGS 128, and XGS 138 models only
For many business locations, a 5G cellular network can be deployed to support traffic peaks or provide an important redundant/fallback connectivity option for SD-WAN. 5G fixed wireless access (FWA) may sound like a contradiction in terms, but as a technology, it allows network operators to deliver cost-effective, high-speed broadband connectivity to both suburban and rural areas. Using 5G, operators can now meet the high-speed internet access demands of cloud services in business and consumer requirements for latency-free, high-definition streaming services.The optional Gen.2 5G module can be securely mounted in the XGS device and then managed from your Sophos Firewall.
- Better performance with the latest standards supported
- Highly cost-effective solution
- Full protection from theft and damage
- Gen.2 5G module data rates (max.):
- 5G SA sub-6: downlink 2.4 Gbps; uplink 900 Mbps
- 5G NSA sub-6: downlink 3.4 Gbps; uplink 550 Mbps
- LTE: downlink 1.6 Gbps; uplink 200 Mbps
- WCDMA: downlink 42 Mbps; uplink 5.76 Mbps
- One 5G module (Gen.2) version for all regions
XGS Series 2nd Gen desktop accessories matrix
| Model | Power redundancy | Expansion bay | 5G module | Wi‑Fi options | Rackmount kit |
|---|---|---|---|---|---|
| XGS 88 | N/A | N/A | N/A | N/A | Optional |
| XGS 88w | N/A | N/A | N/A | Wi‑Fi 6 built in | Optional |
| XGS 108 | Optional 2nd power supply | N/A | N/A | N/A | Optional |
| XGS 108w | Optional 2nd power supply | N/A | N/A | Wi‑Fi 6 built in | Optional |
| XGS 118 | Optional 2nd power supply | 1 | Optional | N/A | Optional |
| XGS 118w | Optional 2nd power supply | 1 | Optional | Wi‑Fi 6 built in | Optional |
| XGS 128 | Optional 2nd power supply | 1 | Optional | N/A | Optional |
| XGS 128w | Optional 2nd power supply | 1 | Optional | Wi‑Fi 6 built in | Optional |
| XGS 138 | Optional 2nd power supply | 1 | Optional | N/A | Optional |
