XGS firewalls provide exceptional performance across SMB, distributed enterprise, and large campus environments, offering a wide range of models across desktop, 1U rackmount, and 2U rackmount form factors.
The XGS Series includes advanced networking, SD‑WAN, Zero‑Trust access segmentation, TLS inspection, IPS, ATP, application control, and unified cloud management via Sophos Central.
XGS Series Hardware Families
Sophos XGS models are categorized into three hardware families to match any deployment size:
- XGS Desktop models – for SMBs, branch offices, and distributed retail/remote sites
- XGS 1U rack models – for midsize organizations and distributed enterprise edges
- XGS 2U rack models – for large enterprise and campus networks
Details for each category are provided below.
XGS Desktop Models (2nd Generation)
Designed for small offices, branch locations, retail sites, and remote offices.
Models include:
XGS 88/88w, XGS 108/108w, XGS 118/118w, XGS 128/128w, XGS 138
Key Highlights (Desktop Series)
- Up to 2× performance vs Gen 1 models
- 50% lower power consumption (fanless 88 & 108)
- All models include 2.5 GE interfaces for high‑speed switching and Wi‑Fi 6 APs
- Optional Wi‑Fi 6 (“w” models)
- Optional 5G module for redundant WAN
- Xstream FastPath acceleration for trusted traffic (v21+
Desktop Customers Use Cases
- SMB branch offices
- Retail stores
- Small clinics / healthcare sites
- SOHO and distributed workforce environments
XGS 1U Rack Models (Distributed Edge)
Built for midsize networks requiring higher throughput, modular connectivity, and redundancy.
Models include:
XGS 2100, XGS 2300, XGS 3100, XGS 3300, XGS 4300, XGS 4500
Key Highlights (1U Series)
- High‑performance multi‑core CPU designs
- Flexible SFP/SFP+ uplinks
- Multi-gigabit copper interfaces
- Business continuity via optional 2nd power supply
- Ideal for mid‑sized distributed enterprises
Typical Deployments
- Corporate branch offices
- Schools & campuses
- Medium retail chains
- Multi‑site VPN infrastructure
XGS 2U Rack Models (Enterprise & Campus Edge)
Built for high‑performance environments with demanding throughput, scalability, and redundancy needs.
Models include:
XGS 5500, XGS 6500, XGS 7500, XGS 8500
Key Highlights (2U Series)
- No‑compromise throughput for large organizations
- High port density with multi‑gigabit and 10G/40G options
- Redundant power supplies & fans
- Optimized for large campuses, data centers, and high‑traffic edges
- Designed for large-scale segmentation & SD‑WAN
Typical Deployments
- Universities & hospitals
- Enterprise HQ networks
- High‑density campus networks
- Data‑center perimeter security
XGS Series Core Technologies
Xstream Architecture
- Xstream DPI Engine — efficiently inspects TLS encrypted traffic at high speed
- Xstream Flow Processor — hardware acceleration for trusted traffic paths
- Synchronized Security
- Integrates Firewall + Intercept X
- Automatically isolates compromised endpoints
- SD‑WAN & Branch Connectivity
- Dynamic and application‑aware path selection
- Seamless integration with SD‑RED devices
- Threat Protection
- IPS, ATP, sandboxing, web filtering
- AI-driven application and user risk scoring
- Management & Reporting
- Sophos Central unified cloud management
- Strong HA capabilities (active-active & active-passive)
Business Impact
- Stronger network protection through unified Xstream inspection
- Faster performance with hardware‑accelerated traffic paths
- Simplified operations via Sophos Central’s single-pane-of-glass management
- Reduced TCO with lower power consumption (desktop models)
- Scalable deployment options across SMB, enterprise, and campus networks
- Improved threat visibility with synchronized endpoint-firewall intelligence
