SOPHOS XG3ATCHAU XGS 3100 Security Appliance

Get this firewall for free when you purchase it with the Sophos Xstream Protection subscription (3 year term).

Please feel free to contact us about this item, and we will recommend an IT Sales and Service Provider in your area.

Resellers: for pricing and to place orders.

This item is not normally held in stock. We’ll order it in on request. Please contact us for estimated delivery time
In stock email will be sent.
Instock notification already exists.
Order SKU: Supplier Code:

Powerful Protection and Performance

Compare models -

Download brochure -

See how it works -


Licensing : The Sophos Firewall Base License is included with the purchase of this firewall and is perpetual.

It includes : Networking, Wireless, Xstream-Architecture, unlimited Remote Access VPN, Site-to-Site VPN, Reporting - at no extra cost.


Add a Sophos Xstream Protection subscription and get:

Sophos Enhanced Support - 24/7-Support, Feature-Updates, Advance replacement warranty on hardware during contract term

Network Protection - Next-Gen Intrusion Prevention System (IPS), Security Heartbeat, Advanced Threat Protection, SD-RED VPN

Web Protection - Internet policies for users and groups, application control and QoS, high-performance traffic scanning

Zero-Day Protection - Cloud & AI-powered protection against ransomware and other known and unknown threats

Central Orchestration - SD-WAN VPN orchestration, Central Firewall Advanced Reporting (30 days), MTR/XDR-enabled

 Also available separately.

Email Protection - On-box email security with anti-spam, data loss prevention (DLP) and email encryption

Webserver Protection - Web application firewall for hardening web servers and critical business applications

Sophos Enhanced Plus Support - Upgrade to VIP support, advance replacement warranty for connected add-ons such as Sophos REDs and Sophos APs.


Sophos XGS Firewall key features.

  • Xstream Protection

Sophos Firewall’s Xstream architecture protects your network from the latest threats while accelerating your important SaaS, SD-WAN, and cloud application traffic.

  •  TLS 1.3 Decryption

Remove an enormous blind spot with intelligent TLS inspection that’s fast and effective, supporting the latest standards with extensive exceptions and point-and-click policy tools to make your job easy.

  •  Deep Packet Inspection

Stop the latest ransomware and breaches with high-performance streaming deep packet inspection, including next-gen IPS, web protection, and app control, as well as deep learning and sandboxing powered by SophosLabs Intelix.

  •  Application Acceleration

Accelerate your SaaS, SD-WAN, and cloud traffic such as VoIP, video, and other trusted applications automatically or via your own policies, putting them on the Xstream FastPath to optimize performance.

  •  Xstream SD-WAN

The latest SD-WAN capabilities in Sophos Firewall enable extreme network performance, flexibility, and resiliency.

  •  Xstream FastPath Acceleration

Accelerate SD-WAN IPsec VPN tunnel flows taking full advantage of the hardware crypto capabilities in XGS Series appliances.

  •  Performance-Based Routing

Automatically optimize routing and rerouting of traffic based on WAN Link performance (latency, jitter, loss) in real time with zero impact.

  •  Point-and-Click Orchestration

Easily set up the most complex hub-and-spoke or full mesh SD-WAN overlay networks with full tunnel redundancy with just a few clicks.

  •  Powerful Performance

The XGS Series delivers Xstream performance at every price point to power the protection you need for today’s diverse, distributed, and encrypted networks.

  •  Powered by Xstream

Accelerate and offload your important SaaS, SD-WAN, and cloud traffic at the hardware level, while adding performance headroom for TLS and deep packet inspection with integrated Xstream Flow Processors.

  •  High-Speed Connectivity

Customize your firewall’s already versatile connectivity options with an extensive range of add-on modules for high-speed copper, fiber, Power over Ethernet (PoE), 4G/5G, and Wi-Fi.

  •  Performance by Design

From the smallest entry-level device to our enterprise and campus edge models, every firewall is purpose-built to handle the most demanding workloads with a dual processor architecture, generous memory provisioning, and high-performance solid-state storage.

XGS 3100 Hardware Interfaces:

Networking Interfaces : (8) 10/100/1000 Mbps RJ45 Ethernet Ports, (2) 1G SFP Ports, (2) 10G SFP+ Ports
Management Interfaces : (1) RJ45 MGMT, (1) COM RJ45, (1) COM Micro-USB
Bypass Port Pairs (Fixed) : 1
I/O Interfaces : (2) USB 2.0 (front), (1) USB 3.0 (rear)

XGS 3100 Hardware Performance:

Firewall Throughput : 47,000 Mbps
TLS Inspection : 2,470 Mbps
IPS Throughput : 10,500 Mbps
IPsec VPN Throughput : 25,000 Mbps
Next Gen Firewall (NGFW) Throughput : 9,000 Mbps
Threat Protection Throughput : 2,000 Mbps
Latency (64 BYTE UDP) : 4 µs