Sophos XGS 107 / 107w Desktop Next-Gen Firewall
SMB and Branch Office: Desktop Models
Customers looking for an all-in-one network security solution will appreciate the seamless connectivity options available for our desktop appliances. With the modularity that smaller businesses, retail outlets, and branch offices need to grow and adapt to changing circumstances, they offer the perfect balance between price and performance. All desktop models are optionally available with built-in Wi-Fi.
All models are powered by a high-speed CPU plus a dedicated Xstream Flow Processor for hardware acceleration.
Product Highlights
- Dual-processor architecture delivers an excellent price-to-performance ratio.
- Every model is available with optional integrated Wi-Fi for all-in-one connectivity.
- An expansion bay on all XGS 116/126/136 models improves compatibility for 3G/4G or 5G when used with our optional modules.
- An optional second Wi-Fi radio module can be added to w-models with an expansion bay.
- A second power supply option for all XGS 1xx models offers a redundancy option not always seen in this form factor.
- Power-over-Ethernet ports are built-in on 116, 126 (1 GE), and 136 (2.5 GE) models to power your external devices.
The SFP port on all models can be used for FTTH/FTTP or with the optional VDSL modem. - Note: All protection features are supported on every XGS 1xx model and most on XGS 87 and 87w.
Accessories
3G/4G or 5G Connectivity
For XGS 116, 126, and 136 models only
Our desktop appliances are often deployed in remote locations where flexible connectivity is essential. The expansion bay on the XGS 116, 126, and 136 models provides the option to add either a 3G/4G or a 5G module to your appliance. These optional modules can be securely mounted and are then managed from your Sophos Firewall console for better compatibility.
- Better performance with the latest standards supported
- 3G/4G module supports LTE cat-6, up to 300 Mbps download/50 Mbps upload.
- 5G module supports 5G Sub-6 bands with download speeds of up to 4.5 Gbps and upload speeds of up to 660 Mbps (depending on carrier and region).
- Full protection from theft or damage
3G/4G module: Two different versions: Europe/Americas and Asia-Pacific
5G module: One version for all regions
SFP VDSL Modem
For use with all XG and XGS Series models
Use the SFP port to add VDSL connectivity to your appliance. Get rid of your router and connect your appliance directly to the DSL socket on your wall. This means one less piece of equipment to manage and a fully integrated solution. Our optional DSL modem supports most VDSL2 standards with download/upload speeds up to 100 Mbps.
2nd Wi-Fi Radio Module
For XGS 116w, 126w, and 136w only
Improve Wi-Fi coverage and performance in your office by adding a second Wi-Fi radio to selected XGS models. Adding a second radio with two extra antennas to a model that already has built-in Wi-Fi allows you to broadcast in both the 2.4- and 5-GHz bands simultaneously for an overall better Wi-Fi experience.
Performance
FIREWALL 7,000 Mbps |
TLS INSPECTION 420 Mbps |
FIREWALL IMIX 3,750 Mbps |
IPS 1,500 Mbps |
IPSEC VPN 4,000 Mbps |
NGFW 1,050 Mbps |
THREAT PROTECTION 370 Mbps |
LATENCY (64 BYTE UDP) 6 µs |
Connectivity
ETHERNET INTERFACES (FIXED) 8 X GE copper 1 X SFP Fiber* |
POWER-OVER-ETHERNET (FIXED) N/A |
MANAGEMENT INTERFACES 1 x COM RJ45 1 x COM Micro-USB |
OTHER I/O INTERFACES 1 x USB 2.0 (front) 1 x USB 3.0 (rear) |
WI-FI OPTION (W-MODEL ONLY) Wi-Fi 5 (802.11ac) 2X2:2 MIMO 2 external antennas single radio, 2.4 or 5 GHz |
Modularity
EXPANSION SLOTS N/A |
OPTIONAL ADD-ON MODULES SFP VDSL modem SFP transceivers |
Redundancy
SWAPPABLE COMPONENTS optional 2nd power supply |
NOTES: * Transceivers sold separately |
Performance Test Methodology
General | Maximum throughput measured under ideal test conditions using industry-standard Keysight-Ixia BreakingPoint test tools. Actual performance may vary depending on network conditions and activated services. |
Firewall | Measured using HTTP traffic and 512 KB response size. |
Firewall IMIX | UDP throughput based on a combination of 66-byte, 570-byte, and 1518-byte packet sizes. |
IPS | Measured with IPS with HTTP traffic using default IPS ruleset and 512 KB object size. |
IPsec VPN | HTTP throughput using multiple tunnels and 512 KB HTTP response size. |
TLS Inspection | Performance measured with IPS with HTTPS sessions and different cipher suites. |
Threat Protection | Measured with firewall, IPS, application control, and malware prevention enabled using HTTP 200 KB response size. |