SOPHOS XG4CTCHAU XGS 4300 Security Appliance
Get this firewall for free when you purchase it with the Sophos Xstream Protection subscription (3 year term).
Powerful Protection and Performance
Compare models - https://www.sophos.com/en-us/products/next-gen-firewall/tech-specs
Download brochure - https://assets.sophos.com/X24WTUEQ/at/7wf85vbnnqf939bbhtxgfk/sophos-firewall-br.pdf
See how it works -
Licensing : The Sophos Firewall Base License is included with the purchase of this firewall and is perpetual.
It includes : Networking, Wireless, Xstream-Architecture, unlimited Remote Access VPN, Site-to-Site VPN, Reporting - at no extra cost.
Add a Sophos Xstream Protection subscription and get:
Sophos Enhanced Support - 24/7-Support, Feature-Updates, Advance replacement warranty on hardware during contract term
Network Protection - Next-Gen Intrusion Prevention System (IPS), Security Heartbeat, Advanced Threat Protection, SD-RED VPN
Web Protection - Internet policies for users and groups, application control and QoS, high-performance traffic scanning
Zero-Day Protection - Cloud & AI-powered protection against ransomware and other known and unknown threats
Central Orchestration - SD-WAN VPN orchestration, Central Firewall Advanced Reporting (30 days), MTR/XDR-enabled
Also available separately.
Email Protection - On-box email security with anti-spam, data loss prevention (DLP) and email encryption
Webserver Protection - Web application firewall for hardening web servers and critical business applications
Sophos Enhanced Plus Support - Upgrade to VIP support, advance replacement warranty for connected add-ons such as Sophos REDs and Sophos APs.
Sophos XGS Firewall key features.
- Xstream Protection
Sophos Firewall’s Xstream architecture protects your network from the latest threats while accelerating your important SaaS, SD-WAN, and cloud application traffic.
- TLS 1.3 Decryption
Remove an enormous blind spot with intelligent TLS inspection that’s fast and effective, supporting the latest standards with extensive exceptions and point-and-click policy tools to make your job easy.
- Deep Packet Inspection
Stop the latest ransomware and breaches with high-performance streaming deep packet inspection, including next-gen IPS, web protection, and app control, as well as deep learning and sandboxing powered by SophosLabs Intelix.
- Application Acceleration
Accelerate your SaaS, SD-WAN, and cloud traffic such as VoIP, video, and other trusted applications automatically or via your own policies, putting them on the Xstream FastPath to optimize performance.
- Xstream SD-WAN
The latest SD-WAN capabilities in Sophos Firewall enable extreme network performance, flexibility, and resiliency.
- Xstream FastPath Acceleration
Accelerate SD-WAN IPsec VPN tunnel flows taking full advantage of the hardware crypto capabilities in XGS Series appliances.
- Performance-Based Routing
Automatically optimize routing and rerouting of traffic based on WAN Link performance (latency, jitter, loss) in real time with zero impact.
- Point-and-Click Orchestration
Easily set up the most complex hub-and-spoke or full mesh SD-WAN overlay networks with full tunnel redundancy with just a few clicks.
- Powerful Performance
The XGS Series delivers Xstream performance at every price point to power the protection you need for today’s diverse, distributed, and encrypted networks.
- Powered by Xstream
Accelerate and offload your important SaaS, SD-WAN, and cloud traffic at the hardware level, while adding performance headroom for TLS and deep packet inspection with integrated Xstream Flow Processors.
- High-Speed Connectivity
Customize your firewall’s already versatile connectivity options with an extensive range of add-on modules for high-speed copper, fiber, Power over Ethernet (PoE), 4G/5G, and Wi-Fi.
- Performance by Design
From the smallest entry-level device to our enterprise and campus edge models, every firewall is purpose-built to handle the most demanding workloads with a dual processor architecture, generous memory provisioning, and high-performance solid-state storage.
XGS 4300 Performance
FIREWALL
75,000 MbpsTLS INSPECTION
8,000 Mbps
FIREWALL IMIX
33,000 MbpsIPS
29,500 Mbps
IPSEC VPN
62,500 MbpsNGFW
23,000 Mbps
THREAT
PROTECTION
6,500 MbpsLATENCY
(64 BYTE UDP)
3 µs
Connectivity
ETHERNET INTERFACES (FIXED)
4 x GE copper
4 x 2.5 GE copper
4 x SFP+ 10 GE Fiber*
BYPASS PORT PAIRS (FIXED)
2
MAX. PORT DENSITY (INCL. MODULES)
28
MANAGEMENT INTERFACES
1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
2 x USB 3.0 (front)
MAX. POE (USING FLEXI PORT MODULE)
2 Modules: 4 Ports, 60W max. per module
Modularity
FLEXI PORT SLOTS
2
OTHER OPTIONAL ADD-ON MODULES
SFP VDSL modem
Transceivers
FLEXI PORT MODULES (OPTIONAL)
8 port GE copper
8 port GE SFP Fiber*
4 port 10GE SFP+ Fiber*
4 port GE copper bypass (2 pairs)
4 port GE copper PoE + 4 port GE copper
4 port 2.5 GE copper PoE
2 port GbE Fiber (LC) bypass + 4 port GbE SFP Fiber
Redundancy
2ND POWER SUPPLY
optional external