Powerful Protection and Performance
Compare models - https://www.sophos.com/en-us/products/next-gen-firewall/tech-specs
Download brochure - https://assets.sophos.com/X24WTUEQ/at/7wf85vbnnqf939bbhtxgfk/sophos-firewall-br.pdf
See how it works -
Licensing : The Sophos Firewall Base License is included with the purchase of this firewall and is perpetual.
It includes : Networking, Wireless, Xstream-Architecture, unlimited Remote Access VPN, Site-to-Site VPN, Reporting - at no extra cost.
Add a Sophos Xstream Protection subscription and get:
Sophos Enhanced Support - 24/7-Support, Feature-Updates, Advance replacement warranty on hardware during contract term
Network Protection - Next-Gen Intrusion Prevention System (IPS), Security Heartbeat, Advanced Threat Protection, SD-RED VPN
Web Protection - Internet policies for users and groups, application control and QoS, high-performance traffic scanning
Zero-Day Protection - Cloud & AI-powered protection against ransomware and other known and unknown threats
Central Orchestration - SD-WAN VPN orchestration, Central Firewall Advanced Reporting (30 days), MTR/XDR-enabled
Also available separately.
Email Protection - On-box email security with anti-spam, data loss prevention (DLP) and email encryption
Webserver Protection - Web application firewall for hardening web servers and critical business applications
Sophos Enhanced Plus Support - Upgrade to VIP support, advance replacement warranty for connected add-ons such as Sophos REDs and Sophos APsRP include hardware spec.
Sophos XGS Firewall key features.
Sophos Firewall’s Xstream architecture protects your network from the latest threats while accelerating your important SaaS, SD-WAN, and cloud application traffic.
Remove an enormous blind spot with intelligent TLS inspection that’s fast and effective, supporting the latest standards with extensive exceptions and point-and-click policy tools to make your job easy.
Stop the latest ransomware and breaches with high-performance streaming deep packet inspection, including next-gen IPS, web protection, and app control, as well as deep learning and sandboxing powered by SophosLabs Intelix.
Accelerate your SaaS, SD-WAN, and cloud traffic such as VoIP, video, and other trusted applications automatically or via your own policies, putting them on the Xstream FastPath to optimize performance.
The latest SD-WAN capabilities in Sophos Firewall enable extreme network performance, flexibility, and resiliency.
- Xstream FastPath Acceleration
Accelerate SD-WAN IPsec VPN tunnel flows taking full advantage of the hardware crypto capabilities in XGS Series appliances.
- Performance-Based Routing
Automatically optimize routing and rerouting of traffic based on WAN Link performance (latency, jitter, loss) in real time with zero impact.
- Point-and-Click Orchestration
Easily set up the most complex hub-and-spoke or full mesh SD-WAN overlay networks with full tunnel redundancy with just a few clicks.
The XGS Series delivers Xstream performance at every price point to power the protection you need for today’s diverse, distributed, and encrypted networks.
Accelerate and offload your important SaaS, SD-WAN, and cloud traffic at the hardware level, while adding performance headroom for TLS and deep packet inspection with integrated Xstream Flow Processors.
Customize your firewall’s already versatile connectivity options with an extensive range of add-on modules for high-speed copper, fiber, Power over Ethernet (PoE), 4G/5G, and Wi-Fi.
From the smallest entry-level device to our enterprise and campus edge models, every firewall is purpose-built to handle the most demanding workloads with a dual processor architecture, generous memory provisioning, and high-performance solid-state storage.
XGS 2300 Performance
FIREWALL 35,000 Mbps
TLS INSPECTION 1,450 Mbps
FIREWALL IMIX 20,000 Mbps
IPS 7,000 Mbps
IPSEC VPN 3,500 Mbps
NGFW 6,300 Mbps
THREAT PROTECTION 1,400 Mbps
LATENCY (64 BYTE UDP) 4 µs
ETHERNET INTERFACES (FIXED)
8 x GE copper
2 x SFP Fiber*
BYPASS PORT PAIRS (FIXED) 1
MAX. PORT DENSITY (INCL. MODULES) 18
1 x RJ45 MGMT
1 x COM RJ45
1 x COM Micro-USB
OTHER I/O INTERFACES
2 x USB 3.0 (front)
1 x USB 2.0 (rear)
MAX. POE (USING FLEXI PORT MODULE)
1 Module: 4 Ports, 60W max.
FLEXI PORT SLOTS 1
OTHER OPTIONAL ADD-ON MODULES
SFP VDSL modem
FLEXI PORT MODULES (OPTIONAL)
8 port GE copper
8 port GE SFP Fiber*
4 port 10GE SFP+ Fiber*
4 port GE copper bypass (2 pairs)
4 port GE copper PoE + 4 port GE copper
4 port 2.5 GE copper PoE
2ND POWER SUPPLY optional external
DUAL SSD / RAID n/a
NOTES:* Transceivers sold separately