Description

XGS Series Next-Gen Firewall Appliances

Distributed Edge: 1U Models

Mid-sized and distributed organizations in need of a versatile solution to power and protect their network will be well-served with our 1U models. These rackmount firewalls offer excellent performance, a diverse range of high-speed interfaces built-in, and a choice of add-on connectivity modules. Whether your priority is ensuring maximum uptime for your SD-WAN links, securely connecting your remote users, or protecting the network in a growing organization, you can tailor them to your dynamic environment.

All models are powered by a high-speed CPU plus a dedicated Xstream Flow Processor for hardware acceleration.

Performance Test Methodology

General	Maximum throughput measured under ideal test conditions using industry standard Keysight-Ixia BreakingPoint test tools. Actual performance may vary depending on network conditions and activated services.
Firewall	Measured using HTTP traffic and 512 KB response size
Firewall IMIX	UDP throughput based on a combination of 66 byte, 570 byte and 1518 byte packet sizes
IPS	Measured with IPS with HTTP traffic using default IPS ruleset and 512 KB object size.
IPsec VPN	HTTP throughput using multiple tunnels and 512 KB HTTP response size
TLS inspection	Performance measured with IPS with HTTPS sessions and different cipher suites.
Threat Protection	Measured with Firewall, IPS, Application Control, and malware prevention enabled using HTTP 200 KB response size

Sophos Switch

Connectivity, Power, and Control

XG Series

Datasheet

Connectivity at the LAN Edge

The Sophos Switch Series provides secure, scalable Ethernet access for your wired and wireless devices and puts your LAN connectivity fully under your control.

Devices, devices everywhere

Many businesses have pieced together a colorful range of network equipment in an attempt to somehow make connectivity work amid rapidly changing requirements. Sophos switches provide a simple solution to connect an ever-increasing range of devices to your network.

Segmentation for security

A security approach to network segmentation often begins at your switch. Configure virtual local area networks (VLANs) to segment your internal traffic and reduce the attack surface in case of an infection or breach. Secure VLANs can prevent guest devices from adding risk and enhance security at the access layer.

SMB and SD-Branch

Ideal for remote and home offices, small and medium-sized businesses, retail outlets and branch offices, Sophos switches come in a range of sizes to suit the connectivity needs of many organizations.

Product Highlights

Dual processor architecture supports all key protection features without compromising performance
A wide selection of copper and fiber ports plus various management interfaces are built-in on every model
Fixed LAN bypass ports are on every model to support various deployment scenarios
Modular Flexi Port expansion bay(s) on every model to adapt connectivity
Second power supply option for all models
Optional Power-over-Ethernet Flexi Port modules are centrally powered and so benefit from power redundancy when using the second power option
Rackmount kit included

Accessories

Flexi Port Modules

For all XGS 1U models

Our 1U models come with one or more expansion bays to flexibly add to the diverse range of built-in interfaces on every box. Changes in your environment, your workforce, or your edge infrastructure may require additional fiber ports or a change in your connectivity. With Flexi Port modules, you have a cost-effective way to adapt your appliance, rather than having to purchase new hardware mid-term.

Transceivers

Sophos offers a range of transceivers to use in the SFP and SFP+ interfaces on your appliance or Flexi port module.

A list of compatible third-party transceivers can be found in our knowledge base article.

External Redundant Power Supply

For XGS 2xxx, 3xxx, 4300

All of our 1U models offer an optional second power supply for redundancy. The external power supply can be connected to the rear of the appliance.

When using this power supply with either the XGS 2100 or 2300, we suggest that you purchase rackmount rails (rather than using the rackmount ears supplied) for a more stable deployment in your data center.

Internal Redundant Power Supply

For XGS 4500 only

The second power supply for the XGS 4500 provides a simple way to add redundancy to our most powerful 1U unit.

For added reliability, the XGS 4500 also offers a second integrated SSD (RAID).

XGS Series 1U Accessories Matrix

Model	Redundant Power	Redundant SSD	VDSL SFP Modem	Flexi Port Bays	Flexi Port Modules	Rackmount Kit
XGS 2100	optional external	n/a	optional	1	8 Port 1G copper 8 Port 1G SFP 4 Port 10G SFP+ 4 Port 1G copper bypass 4 port 1G copper PoE + 4 port 1G copper 4 port 2.5G copper PoE 2 port GbE Fiber (LC) bypass + 4 port GbE SFP Fiber	Rackmount ears incl. Optional sliding rails
XGS 2300	optional external	n/a	optional	1		Rackmount ears incl. Optional sliding rails
XGS 3100	optional external	n/a	optional	1		Rackmount ears incl. Optional sliding rails
XGS 3300	optional external	n/a	optional	1		Rackmount ears incl. Optional sliding rails
XGS 4300	optional external	n/a	optional	2		Sliding rails included
XGS 4500	optional internal	included	optional	2		Sliding rails included

Resources

Additional information

XGS 1U Rackmount	XGS 2100, XGS 2300, XGS 3100, XGS 3300, XGS 4300, XGS 4500

XGS 1U Rackmount