Sophos XG Firewall

Advanced protection made simple

Most firewall products make you set up and manage policies across multiple modules or screens. Not Sophos. We provide a powerful unified policy model that allows you to manage, view, filter, and sort all your user, application and network policies on a single screen.

More-in-one protection

You get all the next-gen firewall features you need plus features you can’t get anywhere else - including Sophos' revolutionary Security Heartbeat^™, full web application firewall, and complete email anti-spam, encryption and DLP. No extra hardware. No extra cost. Simply choose what you want to deploy.

On-box reports included as standard

With hundreds of built-in reports you’ll know exactly what’s happening with your users and your network. You get detailed reports as standard, stored locally with no separate tools required. And our unique User Threat Quotient reports show you which of your users are putting your security at risk.

Potent, powerful … fast

We’ve engineered XG Firewall to deliver outstanding performance. Our appliances are built using Intel multicore technology, solid-state drives, and accelerated inmemory content scanning. In addition Sophos FastPath packet optimization technology ensures you’ll always get maximum throughput.

Simply manage multiple firewalls

Sophos Firewall Manager provides a single console for the complete central management of multiple Sophos XG Firewalls. And if you also want to consolidate reporting across multiple XG, SG, and Cyberoam appliances then with Sophos iView, you can.

XG Firewall includes a number of innovations that not only makes your job a lot easier, but also ensures your network is more secure.

A revolution in advanced threat protection - Sophos Synchronized Security

An industry first, Synchronized Security links your endpoints and your firewall to enable unique insights and coordination. Security Heartbeat^™ relays Endpoint health status and enables your firewall to immediately identify and respond to a compromised system on your network. The firewall can isolate systems until they can be investigated and cleaned up. Another Synchronized Security feature, Dynamic App Identification, also enables the firewall to query the endpoint to determine the source of unknown traffic on the network.

Patented Layer-8 identity control

User identity takes enforcement to a whole new layer with our patented Layer-8 identity based policy technology enabling user level controls over applications, bandwidth and other network resources regardless of IP-address, location, network or device. It literally takes firewall policy to a whole new layer.

Policy templates get you protected fast

Pre-defined policy templates let you protect common applications like Microsoft Exchange or SharePoint quickly and easily. Simply select them from a list, provide some basic information and the template takes care of the rest. It sets all the inbound/ outbound firewall rules and security settings for you automatically - displaying the final policy in a statement in plain English.

Automated user risk reports

The Sophos User Threat Quotient (UTQ) indicator is a unique feature which provides actionable intelligence on user behavior. This enterprise firewall correlates each user’s surfing habits and activity with advanced threat triggers and history to identify users with risk-prone behavior.

Flexible deployment, no compromise

Unlike our competitors whether you choose hardware, software, or virtual we don’t make you compromise - every feature is available on every model and form-factor.

XG Series

Sophos XG Series firewalls come pre-loaded with the Sophos Firewall OS to provide optimal performance to meet today’s network security requirements.

XG Series 2U (Large Office / Data Center)	XG 550 Rev.2	XG 650 Rev.2	XG 750 Rev.2
Firewall throughput	65 Gbps	85 Gbps	100 Gbps
NGFW throughput	9 Gbps	10 Gbps	11.8 Gbps
VPN throughput	8.4 Gbps	9 Gbps	11 Gbps
IPS throughput	17 Gbps	20 Gbps	22 Gbps
Antivirus throughput (proxy)	10 Gbps	13 Gbps	17 Gbps
Ethernet interfaces	(8) GbE copper (default module)	(8) GbE copper (default module)	(8) GbE copper (default module)
FleXi port slots	4	6	8
FleXi port modules (optional)*	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+ 4 port 10 GE SFP+ 4 port SFP plus 4 port GE copper LAN bypass	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+ 4 port 10 GE SFP+ 4 port SFP plus 4 port GE copper LAN bypass	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+ 4 port 10 GE SFP+ 4 port SFP plus 4 port GE copper LAN bypass

XG Series 1U (Mid-size Office)	XG 210 Rev.3	XG 230 Rev.2	XG 310 Rev.2	XG 330 Rev.2	XG 430 Rev.2	XG 450 Rev.2
Firewall throughput	16 Gbps	20 Gbps	28 Gbps	33 Gbps	41 Gbps	50 Gbps
VPN throughput	1.45 Gbps	1.7 Gbps	2.75 Gbps	3.2 Gbps	4.8 Gbps	5.5 Gbps
IPS throughput	2.7 Gbps	4.2 Gbps	5.5 Gbps	8.5 Gbps	9 Gbps	10 Gbps
Antivirus throughput (proxy)	2.3 Gbps	2.8 Gbps	3.3 Gbps	6 Gbps	6.5 Gbps	7 Gbps
Ethernet interfaces	(6) GbE copper (2) GbE SFP	(6) GbE copper (2) GbE SFP	(8) GbE copper (2) GbE SFP (2) 10 GbE SFP+	(8) GbE copper (2) GbE SFP (2) 10 GbE SFP+	(8) GbE copper (2) 10 GbE SFP+	(8) GbE copper (2) 10 GbE SFP+
FleXi port slots	1	1	1	1	2	2
FleXi port modules (optional)*	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+ 4 port 10 GE SFP+ 2 port 40 GE QSFP+ 4 port GE copper LAN bypass 4 port GE PoE 8 port GE PoE	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+ 4 port 10 GE SFP+ 2 port 40 GE QSFP+ 4 port GE copper LAN bypass 4 port GE PoE 8 port GE PoE	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+ 4 port 10 GE SFP+ 2 port 40 GE QSFP+ 4 port GE copper LAN bypass 4 port GE PoE 8 port GE PoE	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+ 4 port 10 GE SFP+ 2 port 40 GE QSFP+ 4 port GE copper LAN bypass 4 port GE PoE 8 port GE PoE	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+ 4 port 10 GE SFP+ 2 port 40 GE QSFP+ 4 port GE copper LAN bypass 4 port GE PoE 8 port GE PoE	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+ 4 port 10 GE SFP+ 2 port 40 GE QSFP+ 4 port GE copper LAN bypass 4 port GE PoE 8 port GE PoE

*Transceivers (mini GBICs) sold separately.

XG Series Desktop (Small Office)	XG 85/85w Rev.1	XG 105/105w Rev.2	XG 115/115w Rev.2	XG 125/125w Rev.2	XG 135/135w Rev.2
Firewall throughput	2 Gbps	3 Gbps	3.5 Gbps	5 Gbps	7 Gbps
VPN throughput	200 Mbps	300 Mbps	350 Mbps	410 Mbps	950 Mbps
IPS throughput	510 Mbps	700 Mbps	900 Mbps	1 Gbps	1.75 Gbps
Antivirus throughput (proxy)	330 Mbps	430 Mbps	520 Mbps	590 Mbps	1.4 Gbps
Ethernet interfaces	(4) GbE copper	(4) GbE copper	(4) GbE copper	(8) GbE copper	(8) GbE copper
Wireless standards (w models only)	802.11a/b/g/n 2.4 or 5 GHz	802.11a/b/g/n 2.4 or 5 GHz	802.11a/b/g/n 2.4 or 5 GHz	802.11a/b/g/n/ac 2.4 or 5 GHz	802.11a/b/g/n/ac 2.4 or 5 GHz
Number of antennas	2	3	3	3	3
Number of radios	1	1	1	1	1
MIMO capabilities	2x2:2	3x3:3	3x3:3	3x3:3	3x3:3

Secure Wireless

The Sophos range of Wireless Access Points gives your organization a solution for many different deployment scenarios. Then are able to be used combined with XG Series ‘w’ models.

Sophos Access Points	AP 15	AP 15C	AP 55	AP 55C	AP 100	AP 100X	AP 100C
Capacity
	SOHO	SOHO	Enterprise dual-band/dual-radio	Enterprise dual-band/dual-radio ceiling mount	Enterprise dual-band/dual-radio	IP67 Enterprise outdoor/exterior wall-mount	Enterprise-grade ceiling mount
Maximum throughput	300 Mbps	300 Mbps	867 Mbps + 300 Mbps	867 Mbps + 300 Mbps	1.3 Gbps + 450 Mbps	1.3 Gbps + 450 Mbps	1.3 Gbps + 450 Mbps
Multiple SSIDs	8	8	8 per radio (16 in total)	8 per radio (16 in total)	8 per radio (16 in total)	8 per radio (16 in total)	8 per radio (16 in total)
Technical Specification
LAN interface	1 x 10/100/1000 Base TX	1 x 10/100/1000 Base TX	1 x 10/100/1000 Base TX	1 x 10/100/1000 Base TX	1 x 10/100/1000 Base TX	1 x 10/100/1000 Base TX	1 x 10/100/1000 Base TX
Supported WLAN standards	802.11 b/g/n 2.4 GHz	802.11 b/g/n 2.4 or 5 GHz	802.11 a/b/g/n/ac 2.4 and 5 GHz	802.11 a/b/g/n/ac 2.4 and 5 GHz	802.11 a/b/g/n/ac 2.4 and 5 GHz	802.11 a/b/g/n/ac 2.4 and 5 GHz	802.11 a/b/g/n/ac 2.4 and 5 GHz
DFS/TPC	–	–	Yes	Yes	Yes	Yes	Yes
Power over Ethernet (min.)	802.3af	802.3af	802.3at	802.3at	802.3at	802.3at	802.3at
Number of antennas	2 external	2 internal	2 external	4 internal	3 external	6 external	6 internal
Number of radios	1	1	2	2	2	2	2
MIMO capabilities	2x2:2	2x2:2	2x2:2	2x2:2	3x3:3	3x3:3	3x3:3

Remote Ethernet Devices (RED)

Sophos RED makes extending your secure network to other locations easy. With plug-and-play deployment, it requires no technical skills at the remote site.

RED appliance	RED 15	RED 15W	RED 50
Capacity
Maximum users	Unrestricted	Unrestricted	Unrestricted
Maximum throughput	90 Mbps	90 Mbps	360 Mbps
Physical interfaces
LAN interfaces	4 x 10/100/1000 Base-TX	4 x 10/100/1000 Base-TX	4 x 10/100/1000 Base-TX
WAN interfaces	1 x 10/100/1000 Base-TX	1 x 10/100/1000 Base-TX	2 x 10/100/1000 Base-TX
USB interfaces	1 x USB 2.0	1 x USB 2.0	2 x USB 2.0
Serial console	1 x RJ45 console	1 x RJ45 console	1 x RJ45 console
LED display	Power, system, router, Internet, tunnel , 4 x LAN, WAN	Power, system, router, Internet, tunnel , 4 x LAN, WAN	Power, error, 4 x LAN, 2 x WAN
Wireless standards(w models only)		802.11 a/b/g/n 2.4 or 5 GHz
Number of antennas		2 external
Number of radios		1
MIMO capabilities		2x2:2

What's New in XG Firewall v16

It just isn't possible to show you everything that's new in XG Firewall v16 in just 2 minutes, since there are just way too many new features and enhancements, so enjoy this 8 minute overview.

Sophos XG Firewall: How it Works

Sophos XG Firewall solves today’s top problems with existing firewalls. It brings a fresh new approach to the way you manage a firewall, respond to threats, and monitor what’s happening on your network.

w

Getting Started: Control Center and Nav

In this video we cover how to make the most out of the XG Firewall Control Center and how the navigation is organized.

What makes a firewall great?

Protection, Visibility and Manageability are the hallmarks of a great firewall. Great innovations make XG Firewall the best choice for your organization. Unrivalled security simplicity and insights.

XG Firewall Datasheets, Guides etc.

• Sophos XG Firewall Datasheet
• Sophos XG Firewall Brochure
• Sophos XG Firewall on Microsoft Azure