
Sophos XGS 87 / 87w Desktop Next-Gen Firewall
SMB and Branch Office: Desktop Models
Customers looking for an all-in-one network security solution will appreciate the seamless connectivity options available for our desktop appliances. With the modularity that smaller businesses, retail outlets, and branch offices need to grow and adapt to changing circumstances, they offer the perfect balance between price and performance. All desktop models are optionally available with built-in Wi-Fi.
All models are powered by a high-speed CPU plus a dedicated Xstream Flow Processor for hardware acceleration.
Product Highlights
- Dual-processor architecture delivers an excellent price-to-performance ratio.
- Every model is available with optional integrated Wi-Fi for all-in-one connectivity.
- An expansion bay on all XGS 116/126/136 models improves compatibility for 3G/4G or 5G when used with our optional modules.
- An optional second Wi-Fi radio module can be added to w-models with an expansion bay.
- A second power supply option for all XGS 1xx models offers a redundancy option not always seen in this form factor.
- Power-over-Ethernet ports are built-in on 116, 126 (1 GE), and 136 (2.5 GE) models to power your external devices.
The SFP port on all models can be used for FTTH/FTTP or with the optional VDSL modem. - Note: All protection features are supported on every XGS 1xx model and most on XGS 87 and 87w.
Accessories
3G/4G or 5G Connectivity
For XGS 116, 126, and 136 models only
Our desktop appliances are often deployed in remote locations where flexible connectivity is essential. The expansion bay on the XGS 116, 126, and 136 models provides the option to add either a 3G/4G or a 5G module to your appliance. These optional modules can be securely mounted and are then managed from your Sophos Firewall console for better compatibility.
- Better performance with the latest standards supported
- 3G/4G module supports LTE cat-6, up to 300 Mbps download/50 Mbps upload.
- 5G module supports 5G Sub-6 bands with download speeds of up to 4.5 Gbps and upload speeds of up to 660 Mbps (depending on carrier and region).
- Full protection from theft or damage
3G/4G module: Two different versions: Europe/Americas and Asia-Pacific
5G module: One version for all regions
SFP VDSL Modem
For use with all XG and XGS Series models
Use the SFP port to add VDSL connectivity to your appliance. Get rid of your router and connect your appliance directly to the DSL socket on your wall. This means one less piece of equipment to manage and a fully integrated solution. Our optional DSL modem supports most VDSL2 standards with download/upload speeds up to 100 Mbps.
2nd Wi-Fi Radio Module
For XGS 116w, 126w, and 136w only
Improve Wi-Fi coverage and performance in your office by adding a second Wi-Fi radio to selected XGS models. Adding a second radio with two extra antennas to a model that already has built-in Wi-Fi allows you to broadcast in both the 2.4- and 5-GHz bands simultaneously for an overall better Wi-Fi experience.
Performance
| FIREWALL 3,850 Mbps | TLS INSPECTION 375 Mbps |
| FIREWALL IMIX 3,000 Mbps | IPS 1,200 Mbps |
| IPSEC VPN 3,000 Mbps | NGFW 700 Mbps |
| THREAT PROTECTION 280 Mbps | LATENCY (64 BYTE UDP) 6 µs |
Connectivity
| ETHERNET INTERFACES (FIXED) 4 X GE copper 1 X SFP Fiber* | POWER-OVER-ETHERNET (FIXED) N/A |
| MANAGEMENT INTERFACES 1 x COM RJ45 1 x COM Micro-USB | OTHER I/O INTERFACES 1 x USB 2.0 (front) 1 x USB 3.0 (rear) |
| WI-FI OPTION (W-MODEL ONLY) Wi-Fi 5 (802.11ac) 2X2:2 MIMO 2 external antennas single radio, 2.4 or 5 GHz |
Modularity
| EXPANSION SLOTS N/A | OPTIONAL ADD-ON MODULES SFP VDSL modem SFP transceivers |
Redundancy
| SWAPPABLE COMPONENTS N/A | NOTES: * Transceivers sold separately |
Performance Test Methodology
| General | Maximum throughput measured under ideal test conditions using industry-standard Keysight-Ixia BreakingPoint test tools. Actual performance may vary depending on network conditions and activated services. |
| Firewall | Measured using HTTP traffic and 512 KB response size. |
| Firewall IMIX | UDP throughput based on a combination of 66-byte, 570-byte, and 1518-byte packet sizes. |
| IPS | Measured with IPS with HTTP traffic using default IPS ruleset and 512 KB object size. |
| IPsec VPN | HTTP throughput using multiple tunnels and 512 KB HTTP response size. |
| TLS Inspection | Performance measured with IPS with HTTPS sessions and different cipher suites. |
| Threat Protection | Measured with firewall, IPS, application control, and malware prevention enabled using HTTP 200 KB response size. |
For further assistance please call us on +254205147026, +254706357055 or email us on info@victorockkenya.com
About Victorock Kenya Limited
Victorock is the leading Sophos partner and dealers of Sophos products in Nairobi Kenya. We also ship to all East African countries, namely: Uganda, Tanzania, Somalia, Ethiopia, South Sudan, Burundi and Rwanda. We also offer services such as installation, configuration, troubleshooting and maintenance. Contact us for a Sophos quote today.



