SMB and Branch Office: Desktop Models

Customers looking for an all-in-one network security solution will appreciate the seamless connectivity options available for our desktop appliances. With the modularity that smaller businesses, retail outlets, and branch offices need to grow and adapt to changing circumstances, they offer the perfect balance between price and performance. All desktop models are optionally available with built-in Wi-Fi.

All models are powered by a high-speed CPU plus a dedicated Xstream Flow Processor for hardware acceleration.

Product Highlights

  • Dual-processor architecture delivers an excellent price-to-performance ratio.
  • Every model is available with optional integrated Wi-Fi for all-in-one connectivity.
  • An expansion bay on all XGS 116/126/136 models improves compatibility for 3G/4G or 5G when used with our optional modules.
  • An optional second Wi-Fi radio module can be added to w-models with an expansion bay.
  • A second power supply option for all XGS 1xx models offers a redundancy option not always seen in this form factor.
  • Power-over-Ethernet ports are built-in on 116, 126 (1 GE), and 136 (2.5 GE) models to power your external devices.
    The SFP port on all models can be used for FTTH/FTTP or with the optional VDSL modem.
  • Note: All protection features are supported on every XGS 1xx model and most on XGS 87 and 87w.

Accessories

3G/4G or 5G Connectivity

For XGS 116, 126, and 136 models only

Our desktop appliances are often deployed in remote locations where flexible connectivity is essential. The expansion bay on the XGS 116, 126, and 136 models provides the option to add either a 3G/4G or a 5G module to your appliance. These optional modules can be securely mounted and are then managed from your Sophos Firewall console for better compatibility.

  • Better performance with the latest standards supported
  • 3G/4G module supports LTE cat-6, up to 300 Mbps download/50 Mbps upload.
  • 5G module supports 5G Sub-6 bands with download speeds of up to 4.5 Gbps and upload speeds of up to 660 Mbps (depending on carrier and region).
  • Full protection from theft or damage

3G/4G module: Two different versions: Europe/Americas and Asia-Pacific

5G module: One version for all regions

SFP VDSL Modem

For use with all XG and XGS Series models

Use the SFP port to add VDSL connectivity to your appliance. Get rid of your router and connect your appliance directly to the DSL socket on your wall. This means one less piece of equipment to manage and a fully integrated solution. Our optional DSL modem supports most VDSL2 standards with download/upload speeds up to 100 Mbps.

2nd Wi-Fi Radio Module

For XGS 116w, 126w, and 136w only

Improve Wi-Fi coverage and performance in your office by adding a second Wi-Fi radio to selected XGS models. Adding a second radio with two extra antennas to a model that already has built-in Wi-Fi allows you to broadcast in both the 2.4- and 5-GHz bands simultaneously for an overall better Wi-Fi experience.

Performance

FIREWALL
3,850 Mbps
TLS INSPECTION
375 Mbps
FIREWALL IMIX
3,000 Mbps
IPS
1,200 Mbps
IPSEC VPN
3,000 Mbps
NGFW
700 Mbps
THREAT PROTECTION
280 Mbps
LATENCY (64 BYTE UDP)
6 µs

Connectivity

ETHERNET INTERFACES (FIXED)
4 X GE copper
1 X SFP Fiber*
POWER-OVER-ETHERNET (FIXED)
N/A
MANAGEMENT INTERFACES
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
1 x USB 2.0 (front)
1 x USB 3.0 (rear)
WI-FI OPTION (W-MODEL ONLY)
Wi-Fi 5 (802.11ac)
2X2:2 MIMO
2 external antennas
single radio, 2.4 or 5 GHz

Modularity

EXPANSION SLOTS
N/A
OPTIONAL ADD-ON MODULES
SFP VDSL modem
SFP transceivers

Redundancy

SWAPPABLE COMPONENTS
N/A
NOTES:
* Transceivers sold separately

Performance Test Methodology

General Maximum throughput measured under ideal test conditions using industry-standard Keysight-Ixia BreakingPoint test tools. Actual performance may vary depending on network conditions and activated services.
Firewall Measured using HTTP traffic and 512 KB response size.
Firewall IMIX UDP throughput based on a combination of 66-byte, 570-byte, and 1518-byte packet sizes.
IPS Measured with IPS with HTTP traffic using default IPS ruleset and 512 KB object size.
IPsec VPN HTTP throughput using multiple tunnels and 512 KB HTTP response size.
TLS Inspection Performance measured with IPS with HTTPS sessions and different cipher suites.
Threat Protection Measured with firewall, IPS, application control, and malware prevention enabled using HTTP 200 KB response size.