Sophos XG Firewall
Unrivalled performance, security and control
Sophos XG Firewall takes an innovative approach across all areas of network
security. From the way firewalls are managed, to the way they report information
and how they work with other security systems around them, giving you an
unprecedented level of simplicity, insight, and advanced threat protection.
Sophos XG Firewall
Sophos XG Firewall - The ultimate security package
With an interface designed to eliminate unnecessary complexity, it enables you to
use the powerful features without needing to become an IT security expert.
Advanced protection kept simple
More-in-one protection
Most firewall products make you set up and manage policies
across multiple modules or screens. Not Sophos. We provide a
powerful unified policy model that allows you to manage, view,
filter, and sort all your user, application and network policies on
a single screen.
You get all the next-gen firewall features you need plus
features you can’t get anywhere else - including our
revolutionary Security Heartbeat™, full web application
firewall, and complete email anti-spam, encryption and DLP.
No extra hardware. No extra cost. Simply choose what you
want to deploy.
Potent, powerful … fast
We’ve engineered XG Firewall to deliver outstanding
performance. Our appliances are built using Intel multi-core
technology, solid-state drives, and accelerated in-memory
content scanning. In addition Sophos FastPath packet
optimization technology ensures you’ll always get maximum
throughput.
On-box reports included as standard
With hundreds of built-in reports you’ll know exactly what’s
happening with your users and your network. You get detailed
reports as standard, stored locally with no separate tools
required. And our unique User Threat Quotient reports show
you which of your users are putting your security at risk.
1
Simply manage multiple firewalls
Sophos Firewall Manager provides a single console for the
complete central management of multiple SF-OS firewalls.
And if you also want to consolidate reporting across multiple
SF-OS, Sophos UTM v9.x and Cyberoam OS appliances then
with Sophos iView, you can.
Sophos XG Firewall
Security features you can’t get anywhere else
As well as simplifying core network security tasks Sophos delivers innovative
approaches to ensure you get even more protection.
Policy templates get you protected fast
Automated user risk reports
Pre-defined policy templates let you protect common
applications like Microsoft Exchange or SharePoint fast. Simply
select them from a list, provide some basic information and
the template takes care of the rest. It sets all the inbound/
outbound firewall rules and security settings for you
automatically - displaying the final policy in a statement in
plain English.
The Sophos User Threat Quotient (UTQ) indicator is a unique
feature which provides actionable intelligence on user behavior.
Our firewall correlates each user’s surfing habits and activity
with advanced threat triggers and history to identify users with
risk-prone behavior.
Patented Layer-8 Identity control
An industry first, our Security Heartbeat links your endpoints
and your firewall to combine their intelligence and identify
systems compromised by previously unknown threats. The
Heartbeat status is integrated into security policy settings to
instantly trigger actions at both endpoint and network levels
to isolate or limit access until systems are healthy again. This
feature requires Sophos Cloud Endpoint Protection Advanced
or Sophos Cloud Enduser Protection.
User identity takes enforcement to a whole new layer
with our
patented Layer-8 identity based policy technology enabling
user level controls over applications, bandwidth and other
network resources regardless of IP-address, location, network
or device. It literally takes firewall policy to a whole new layer.
Flexible deployment, no compromise
Unlike our competitors whether you choose hardware,
software, or virtual we don’t make you compromise - every
feature is available on every model and form- factor.
A revolution in advanced threat protection Sophos Security Heartbeat™
To find out more visit www.sophos.com/xgfirewall
XG Series
Software
Virtual
Purpose-built devices to provide
the ultimate in performance.
Install the Sophos Firewall OS image
on your own Intel hardware or server.
Install on VMware, Citrix,
Microsoft Hyper-V and KVM.
2
Sophos XG Firewall
How to Buy
Every appliance comes with our Base Firewall as standard which includes IPSec
and SSL VPN and comprehensive Wireless Protection. You can extend protection
with our total protection bundles or by adding protection modules individually.
Network Protection
Wireless Protection
Web Protection
All the protection you need to stop
sophisticated attacks and advanced
threats while providing secure
network access to those you trust.
Set up, manage and secure wireless
networks in just minutes with the UTM’s
built-in wireless controller that works with
our full range of wireless access points.
Comprehensive protection from the
latest web threats and powerful
policy tools ensures your users are
secure and productive online.
Security Heartbeat™
Email Protection
Web Server Protection
Links your Sophos endpoints with
your firewall to deliver unparalleled
protection from advanced threats
and reduce the time and complexity
of responding to security incidents.
Full SMTP and POP message protection
from spam, phishing and data loss
with our unique all-in-one protection
that combines policy-based email
encryption with DLP and anti-spam.
Harden your web servers and business
applications against hacking attempts
while providing secure access to external
users with reverse proxy authentication.
A simple approach to comprehensive support
We build products that are simple yet comprehensive. And, we take the same approach with our support. With options ranging
from basic technical support to those including direct access to senior support engineers and customized delivery.
Licenses names
Support
Via telephone and email
Security Updates & Patches
For the life of the product
Software Feature Updates & Upgrades
Standard
Enhanced
Included with purchase
Included in all bundles
For 90 days
(business hours only)
Included
(24x7)
VIP Access
(24x7)
Included with an active
software subscription
Included with an active
software subscription
Included with an active
software subscription
Included 90-days
Included
Included
Consulting
Remote consultation on your firewall configuration and security
with a Sophos Senior Technical Support Engineer
Warranty and RMA
For all hardware appliances
Technical Account Manager
Dedicated named technical account manager
3
Enhanced Plus
Included
(up to 4 hours)
1 year (return / replace)
Advance Exchange
(max. 5 years)
Advance Exchange
(max. 5 years)
Optional
(extra cost)
Optional
(extra cost)
Sophos XG Firewall
Sophos XG Series Appliances - at a glance
With desktop models for small businesses looking for Unified Threat Management,
to high-performance next-generation firewalls with features for high-availability in
datacenter environments, our Intel® based appliances cover multiple deployment
scenarios.
Product Matrix
Model
Tech. Specs
Throughput
Form Factor
Maximum
Network
Ports (GE)
WiFi
Storage
RAM (GB)
Swappable
Components
Firewall
(Mbps)
VPN (Mbps)
IPS (Mbps)
AV-proxy
(Mbps)
XG 85(w)
Rev. 1
desktop
4
optional
with 802.11
a/b/g/n
8 GB eMMC
2
n/a
2000
200
510
330
XG 105(w)
Rev. 2
desktop
4
optional
with 802.11
a/b/g/n
64 GB SSD
2
n/a
3000
300
700
430
XG 115(w)
Rev. 2
desktop
4
optional
with 802.11
a/b/g/n
64 GB SSD
4
n/a
3,500
350
900
520
XG 125(w)
Rev. 2
desktop
8
optional
with 802.11
a/b/g/n/ac
64 GB SSD
4
n/a
5,000
410
1,000
590
XG 135(w)
Rev. 2
desktop
8
optional
with 802.11
a/b/g/n/ac
64 GB SSD
6
n/a
7,000
950
1,750
1,400
XG 210
Rev. 2
1U
14 (6 + 1
module)
n/a
120 GB SSD
8
n/a
14,000
1,350
2,700
2,300
XG 230
Rev. 1
1U
14 (6 + 1
module)
n/a
120 GB SSD
8
n/a
18,000
1,500
4,200
2,800
XG 310
Rev. 1
1U
18 (8 + 2SFP
+ 1 module)
n/a
180 GB SSD
12
n/a
25,000
2,500
5,500
3,300
XG 330
Rev. 1
1U
18 (8 + 2SFP
+ 1 module)
n/a
180 GB SSD
12
n/a
30,000
3,200
8,500
6,000
XG 430
Rev. 1
1U
24 (8 + 2
modules)
n/a
240 GB SSD
16
n/a
37,000
4,800
9,000
6,500
XG 450
Rev. 1
1U
24 (8 + 2
modules)
n/a
2*240 GB
SSD (RAID-1)
16
opt. Power
45,000
5,500
10,000
7,000
XG 550
Rev. 1
2U
24 (8 + 2
modules)
n/a
2*300 GB
SSD (RAID-1)
24
Power, SSD
60,000
8,400
17,000
10,000
XG 650
Rev. 1
2U
32 (8 + 3
modules)
n/a
2*480 GB
SSD (RAID-1)
48
Power, SSD
80,000
9,000
20,000
13,000
XG 750
Rev. 1
2U
64 (8 + 7
modules)
n/a
2* 512 GB
SSD (RAID-1)
64
Power,
SSD, Fan
140,000
11,000
22,000
17,000
This is what you get with every XG Series Appliance:
ÌÌ The latest Intel multi-core technology for optimal performance and efficiency
ÌÌ Sophisticated security features such as Advanced Threat Protection available on every size of appliance
ÌÌ Built-in SSD as storage for local quarantine data, logs and reporting*
ÌÌ FleXi Port modules available for all 1U and 2U appliances
* Excludes XG 85/XG 85w
4
Sophos XG Firewall
Sophos XG Series Desktop Appliances: XG 85 and XG 85w
Technical Specifications
These entry-level desktop firewalls are the ideal choice for budget-conscious small businesses, retail and small or home offices.
They are available with and without integrated wireless LAN, so you can have an all-in-one network security and hotspot solution
without the need for additional hardware. The Intel dual-core technology makes them highly efficient and as they’re fanless, they
won’t add unwanted noise to your office space.
Front View
Performance
XG 85(w) Rev. 1
Firewall throughput
Status LEDs
2 Gbps
VPN throughput
200 Mbps
IPS throughput
510 Mbps
Antivirus throughput (proxy)
330 Mbps
Concurrent connections
2,000,000
New connections/sec
Back View
18,000
Maximum licensed users
2 x external antennas
(XG 85w only)
unrestricted
Wireless Specification (XG 85w only)
No. of antennas
2 x USB 2.0
2 external
MIMO capabilities
2 x 2:2
Wireless interface
802.11a/b/g/n (2.4 GHz / 5 GHz)
Physical interfaces
1 x COM
(RJ45)
4 x 1GbE
copper port
Storage
8 GB eMMC
Ethernet interfaces (fixed)
4 GE copper
I/O ports (rear)
Environment
Power consumption
Operating temperature
Humidity
Power supply
3.24W, 11.04 BTU/h (idle)
5.64W, 19.232 BTU/h (full load)
0-40°C (operating)
-20 to +80°C (storage)
10%-90%, non-condensing
5
CB, CE, FCC Class B, IC, VCCI,
MIC, RCM, UL, CCC
External auto ranging DC: 12V,
100-240VAC, 50-60 Hz
Physical specifications
Mounting
Dimensions
Width x Depth x Height
Product Certifications
Certifications
2 x USB 2.0
1 x COM (RJ45)
Weight
Rackmount kit available
(to be ordered separately)
225 x 150 x 44 mm
8.86 x 5.91 x 1.73 inches
0.95 kg / 2.09 lbs (unpacked)
1.97 kg / 4.34 lbs (packed)
Sophos XG Firewall
Sophos XG Series Desktop Appliances: XG 105, XG 105w,
XG 115, XG 115w
Technical Specifications
These desktop firewall appliances offer an excellent price-to-performance ratio making them ideal for small businesses or branch
offices. They are available with or without integrated wireless LAN, so you can even have an all-in-one network security and
hotspot solution without the need for additional hardware. Of course, you can also add external access points. With Intel multicore technology designed for best performance and efficiency in a small form factor, these models come equipped with 4 GbE
copper ports built-in.
Front View
Performance
Firewall throughput
Status LEDs
3 Gbps
3.5 Gbps
300 Mbps
350 Mbps
IPS throughput
700 Mbps
900 Mbps
Antivirus throughput (proxy)
430 Mbps
520 Mbps
Concurrent connections
3,200,000
6,000,000
VPN throughput
New connections/sec
Back View
Maximum licensed users
3 x external antennas
(XG 105w and XG 115w only)
XG 105(w) Rev. 2 XG 115(w) Rev. 2
27,500
27,500
unrestricted
unrestricted
Wireless Specification (XG 105w and XG 115w only)
No. of antennas
2 x USB 2.0
3 external
3 external
MIMO capabilities
3 x 3:3
3 x 3:3
Wireless interface
802.11a/b/g/n
(2.4 GHz / 5 GHz)
802.11a/b/g/n
(2.4 GHz / 5 GHz)
integrated SSD
integrated SSD
4 GE copper
4 GE copper
Physical interfaces
1 x VGA
port
1 x COM
(RJ45)
4 x 1GbE
copper port
Storage (local quarantine/logs)
Ethernet interfaces (fixed)
I/O ports (rear)
Environment
Power consumption
Operating temperature
Humidity
4.83W, 16.468 BTU/hr (idle)
9.84W, 33.55 BTU/hr (full load)
0-40°C (operating)
-20 to +80°C (storage)
10%-90%, non-condensing
2 x USB 2.0
1 x COM (RJ45)
1 x VGA
1 x VGA
External auto
ranging DC: 12V,
100-240VAC,
50-60 Hz
External auto
ranging DC: 12V,
100-240VAC,
50-60 Hz
Physical specifications
Product Certifications
Certifications
Power supply
2 x USB 2.0
1 x COM (RJ45)
CB, CE, FCC Class B, IC, VCCI,
MIC, RCM, UL, CCC
Mounting
Dimensions
Width x Depth x Height
Weight
Rackmount kit available
(to be ordered separately)
225 x 150 x 44 mm
8.86 x 5.91 x 1.73 inches
1.19 kg / 2.62 lbs (unpacked)
2.185 kg / 4.82 lbs (packed)
6
Sophos XG Firewall
Sophos XG Series Desktop Appliances: XG 125, XG 125w,
XG 135, XG 135w
Technical Specifications
These powerful firewall appliances offer 1U performance with a desktop form factor and price. If you have a small business
or branch offices to protect and are working on a tight budget, these models are the ideal choice. They are also available with
integrated 802.11ac wireless LAN for optimal coverage and connectivity for your mobile workers. Built upon the latest Intel
architecture, our software makes optimal use of the multi-core technology to provide excellent throughput for all your key
processes. These models come equipped with 8 GbE copper ports built-in.
Front View
Performance
Firewall throughput
Status LEDs
VPN throughput
IPS throughput
1 Gbps
1.75 Gbps
1.4 Gbps
Concurrent connections
6,200,000
8,200,000
35,000
82,000
unrestricted
unrestricted
Wireless Specification (XG 125w and XG 135w only)
No. of antennas
2 x USB 2.0
7 Gbps
950 Mbps
590 Mbps
Maximum licensed users
3 x external antennas
(XG 125w and XG 135w only)
5 Gbps
410 Mbps
Antivirus throughput (proxy)
New connections/sec
Back View
XG 125(w) Rev. 2 XG 135(w) Rev. 2
1 x VGA port
3 external
3 external
MIMO capabilities
3 x 3:3
3 x 3:3
Wireless interface
802.11a/b/g/n/ac
(2.4 GHz / 5 GHz)
802.11a/b/g/n/ac
(2.4 GHz / 5 GHz)
integrated SSD
integrated SSD
8 GE copper
8 GE copper
Physical interfaces
1 x COM (RJ45)
8 x 1GbE copper port
Storage (local quarantine/logs)
Ethernet interfaces (fixed)
I/O ports (rear)
Environment
Power consumption
Operating temperature
Humidity
12.46W, 49.3 BTU/hr (idle)
26.16W, 89.2 BTU/hr (full load)
0-40°C (operating)
-20 to +80°C (storage)
10%-90%, non-condensing
Product Certifications
Certifications
Power supply
2 x USB 2.0
1 x COM (RJ45)
1 x VGA
1 x VGA
External auto
ranging DC: 12V,
100-240VAC,
50-60 Hz
External auto
ranging DC: 12V,
100-240VAC,
50-60 Hz
Physical specifications
CB, CE, FCC Class B, IC, VCCI,
MIC, RCM, UL, CCC
Mounting
Rackmount kit available
(to be ordered separately)
Dimensions
Width x Depth x Height
288 x 186.8 x 44 mm
11.38 x 7.35 x 1.73 inches
Weight
7
2 x USB 2.0
1 x COM (RJ45)
1.7 kg / 3.75 lbs (unpacked)
2.82 kg / 6.22 lbs (packed)
Sophos XG Firewall
Sophos XG Series Rackmount Appliances: XG 210, XG 230
Technical Specifications
The Sophos XG 210 and XG 230 are designed to protect small to mid-sized businesses and branch offices. Based on the latest Intel
technology and equipped with 6 GbE copper ports plus one FleXi Port slot to configure with an optional module, they provide high
flexibility and throughput at an excellent price-to-performance ratio.
Front View
Performance
Firewall throughput
1 x COM
(RJ45)
Navigation
buttons for LCD
6 x 1GbE
copper port
– fixed
2x
USB 3.0
Multi-function
LCD display
14 Gbps
18 Gbps
1.5 Gbps
IPS throughput
2.7 Gbps
4.2 Gbps
Antivirus throughput (proxy)
2.3 Gbps
2.8 Gbps
8,200,000
8,200,000
New connections/sec
Maximum licensed users
Back View
135,000
140,000
unrestricted
unrestricted
integrated SSD
integrated SSD
6 GE copper
6 GE copper
Physical interfaces
Storage (local quarantine/logs)
1 x USB 2.0
Ethernet interfaces (fixed)
No. of FleXi Port slots
FleXi Port modules (optional)
Power supply and switch
1 x VGA port
Environment
Power consumption
XG 210: 19W, 65 BTU/hr (idle)
29W, 99 BTU/hr (full load)
XG 230: 21W, 72 BTU/hr (idle)
35W, 120 BTU/hr (full load)
Operating temperature
Humidity
I/O ports
0-40°C (operating)
-20 to +70°C (storage)
0%-90%, non-condensing
Product Certifications
Certifications
XG 230 Rev. 1
1.35 Gbps
VPN throughput
Concurrent connections
1 x expansion bay
(shown here with optional
FleXi Port module)
XG 210 Rev. 2
Display
Power supply
CB, CE, FCC Class A, IC,
VCCI, RCM, UL, CCC
1
1
8 port GE copper
8 port GE copper
8 port GE SFP*
8 port GE SFP*
2 port 10 GE SFP+*
2 port 10 GE SFP+*
4 port 10 GE SFP+*
4 port 10 GE SFP+*
4 port GE copper
LAN bypass
4 port GE copper
LAN bypass
2 x USB 3.0 (front)
2 x USB 3.0 (front)
1 x USB 2.0 (rear)
1 x USB 2.0 (rear)
1 x COM (RJ45)
(front)
1 x COM (RJ45)
(front)
1 x VGA (rear)
1 x VGA (rear)
Multi-function
LCD module
Multi-function
LCD module
Internal autoranging 110240VAC, 50-60 Hz
Internal autoranging 110240VAC, 50-60 Hz
Physical specifications
Mounting
Dimensions
Width x Depth x Height
Weight
1U rack mount
(2 rackmount ears included)
438 x 292 x 44mm
17.24 x 11.5 x 1.75 inches
5 Kg / 11.02 lbs (unpacked)
6.9 Kg / 15.21 lbs (packed)
* Transceivers (mini GBICs) sold separately
8
Sophos XG Firewall
Sophos XG Series Rackmount Appliances: XG 310, XG 330
Technical Specifications
The Sophos XG 310 and XG 330 are scalable appliances suitable for distributed organizations or mid-sized companies.
With solid-state drives for on-box reporting, logs and spam quarantine, they’re highly responsive even in high traffic environments.
Each model is equipped with 8 GbE copper ports, 2 GbE SFP fiber ports plus one FleXi Port slot to configure with an optional
module. They provide optimal performance and flexibility.
Front View
Performance
1 x COM
(RJ45)
2 x GbE
SFP
Navigation
buttons for LCD
8 x 1GbE
copper port
– fixed
2x
USB 3.0
Multi-function
LCD display
25 Gbps
30 Gbps
VPN throughput
2.5 Gbps
3.2 Gbps
IPS throughput
5.5 Gbps
8.5 Gbps
Antivirus throughput (proxy)
3.3 Gbps
6 Gbps
17,500,000
17,500,000
New connections/sec
Maximum licensed users
Back View
200,000
200,000
unrestricted
unrestricted
integrated SSD
integrated SSD
8 GE copper
2 GE SFP*
8 GE copper
2 GE SFP*
1
1
8 port GE copper
8 port GE copper
Physical interfaces
Storage (local quarantine/logs)
1 x USB 2.0
Ethernet interfaces (fixed)
No. of FleXi Port slots
Power supply
and switch
1 x VGA port
FleXi Port modules (optional)
8 port GE SFP*
8 port GE SFP*
2 port 10 GE SFP+*
2 port 10 GE SFP+*
4 port 10 GE SFP+*
4 port 10 GE SFP+*
4 port GE copper
LAN bypass
4 port GE copper
LAN bypass
2 x USB 3.0 (front)
2 x USB 3.0 (front)
1 x USB 2.0 (rear)
1 x USB 2.0 (rear)
0-40°C (operating)
-20 to +70°C (storage)
1 x COM (RJ45)
(front)
1 x COM (RJ45)
(front)
0%-90%, non-condensing
1 x VGA (rear)
1 x VGA (rear)
Multi-function
LCD module
Multi-function
LCD module
Internal autoranging 110240VAC, 50-60 Hz
Internal autoranging 110240VAC, 50-60 Hz
Environment
Power consumption
XG 310: 29W, 99 BTU/hr (idle)
50W, 171 BTU/hr (full load)
XG 330: 33W, 113 BTU/hr (idle)
55W, 188 BTU/hr (full load)
Operating temperature
Humidity
I/O ports
Display
Product Certifications
Certifications
XG 330 Rev. 1
Firewall throughput
Concurrent connections
1 x expansion bay
(shown here with optional
FleXi Port module)
XG 310 Rev. 1
CB, CE, FCC Class A, IC,
VCCI, RCM, UL, CCC
Power supply
Physical specifications
Mounting
Dimensions
Width x Depth x Height
Weight
1U rack mount
(2 rackmount ears included)
438 x 292 x 44mm
17.24 x 11.5 x 1.75 inches
5.2 Kg / 11.46 lbs (unpacked)
6.9 Kg / 15.21 lbs (packed)
* Transceivers (mini GBICs) sold separately
9
Sophos XG Firewall
Sophos XG Series Rackmount Appliances: XG 430, XG 450
Technical Specifications
The Sophos XG 430 and XG 450 offer enterprise performance for distributed organizations or larger mid-sized companies.
The connectivity options are second to none for rack mountable appliances, with each model coming equipped with a removable 8
GbE copper port module and 2 additional FleXi Port slots which you can configure with your choice of optional modules. For highavailability, the XG 450 also offers unparalleled redundancy features in a 1U appliance with a second SSD (RAID) integrated and an
optional second power supply available.
Front View
Performance
1 x 8 port 1GbE copper FleXi Port module
(supplied as default, removable)
2 x GbE
SFP
1 x management
port (eth0)
Multi-function
LCD display
XG 430 Rev. 1
XG 450 Rev. 1
Firewall throughput
37 Gbps
45 Gbps
VPN throughput
4.8 Gbps
5.5 Gbps
IPS throughput
9 Gbps
10 Gbps
6.5 Gbps
7 Gbps
20,000,000
20,000,000
200,000
200,000
unrestricted
unrestricted
Storage (local quarantine/logs)
integrated SSD
integrated SSD x2
Ethernet interfaces (removable)
8 GE copper
8 GE copper
3
3
8 port GE copper
8 port GE copper
Antivirus throughput (proxy)
Concurrent connections
2 x expansion bay
(shown here with optional
FleXi Port modules)
1 x COM
(RJ45)
2x
USB
3.0
Navigation
for LCD
Back View XG 430
New connections/sec
Maximum licensed users
Physical interfaces
1 x USB 3.0
No. of FleXi Port slots
Power supply
and switch
1 x VGA port
FleXi Port modules (optional)
Back View XG 450
Power supply
Power switch
1 x USB 3.0
I/O ports
Optional 2nd hot
swappable power supply
1 x VGA port
Display
Environment
Power consumption
XG 430: 36W, 123 BTU/hr (idle)
147W, 502 BTU/hr (full load)
Power supply
XG 450: 53W, 181 BTU/hr (idle)
163W, 556 BTU/hr (full load)
Operating temperature
Humidity
0-40°C (operating)
-20 to + 70°C (storage)
0%-90%, non-condensing
Certifications
CB, CE, FCC Class A, IC,
VCCI, RCM, UL, CCC
8 port GE SFP*
2 port 10 GE SFP+*
2 port 10 GE SFP+*
4 port 10 GE SFP+*
4 port 10 GE SFP+*
4 port GE copper
LAN bypass
4 port GE copper
LAN bypass
2 x USB 3.0 (front)
2 x USB 3.0 (front)
1 x USB 3.0 (rear)
1 x USB 3.0 (rear)
1 x COM (RJ45)
(front)
1 x COM (RJ45)
(front)
1 x VGA (rear)
1 x VGA (rear)
Multi-function
LCD module
Multi-function
LCD module
Internal autoranging 110240VAC, 50-60 Hz
Internal autoranging 110240VAC, 50-60 Hz
Hot Swap Redundant
PSU optional
Physical specifications
Mounting
Product Certifications
8 port GE SFP*
Dimensions
Width x Depth x Height
Weight
1U rackmount (sliding rails incl.)
438 x 483 x 44mm
17.24 x 19 x 1.75 inches
8.3 kg / 18.29 lbs (unpacked)
13.1 kg / 28.88 lbs (packed)
* Transceivers (mini GBICs) sold separately
10
Sophos XG Firewall
Sophos XG Series Rackmount Appliances: XG 550, XG 650
Technical Specifications
The Sophos XG 550 and XG 650 are high-performance firewalls equipped to provide protection for larger distributed and growing
organizations. They offer CPU technology to effortlessly handle use as an all-in-one solution or a powerful next-generation
firewall. The models offer either 3 (XG 550) or 4 (XG 650) FleXi Port expansion bays to tailor your connectivity to your environment.
An 8 port GbE copper module is supplied as a default. Hot-swappable dual SSDs and power supplies are standard redundancy
features in this class.
Front View XG 550
Navigation
for LCD
Multi-function
LCD display
Performance
1 x 8 port 1GbE copper FleXi Port module
(supplied as default, removable)
2 x hot-swap
SSD (RAID-1)
XG 550 Rev. 1
XG 650 Rev. 1
Firewall throughput
60 Gbps
80 Gbps
VPN throughput
8.4 Gbps
9 Gbps
IPS throughput
17 Gbps
20 Gbps
Antivirus throughput (proxy)
10 Gbps
13 Gbps
20,000,000
20,000,000
200,000
200,000
unrestricted
unrestricted
Storage (local quarantine/logs)
2 x integrated
hot-swap SSD
(RAID)
2 x integrated
hot-swap SSD
(RAID)
Ethernet interfaces (removable)
8 GE copper
8 GE copper
Concurrent connections
New connections/sec
2 x USB 2.0
2 x management port
1 x COM
(RJ45)
Maximum licensed users
2 further expansion bays (shown here
with optional FleXi Port modules)
Physical interfaces
Front View XG 650
Navigation
for LCD
Multi-function
LCD display
1 x 8 port 1GbE copper FleXi Port module
(supplied as default, removable)
2 x hot-swap
SSD (RAID-1)
No. of FleXi Port slots
FleXi Port modules (optional)
2 x USB 2.0
2 x management port
1 x COM
(RJ45)
3 further expansion bays (shown here
with optional FleXi Port modules)
I/O ports
Back View
2 x hot swappable
power supply
2 x USB 2.0
Display
Power supply
1 x VGA port
Power switch
Operating temperature
Humidity
Mounting
221.44W, 755.11 BTU/hr (idle)
335.4W, 1143.71 BTU/hr (full load)
0-40°C (operating)
-20 to +75°C (storage)
10%-90%, non-condensing
Product Certifications
Certifications
11
4
8 port GE copper
8 port GE SFP*
8 port GE SFP*
2 port 10 GE SFP+*
2 port 10 GE SFP+*
2 x USB 2.0 (front)
2 x USB 2.0 (front)
2 x USB 2.0 (rear)
2 x USB 2.0 (rear)
2 x Mgmt Port
(eth0/eth1, front)
2 x Mgmt Port
(eth0/eth1, front)
1 x COM (RJ45)
(front)
1 x COM (RJ45)
(front)
1 x VGA (rear)
1 x VGA (rear)
Multi-function
LCD module
Multi-function
LCD module
2 x hot-swap
2 x hot-swap
internal auto-ranging internal auto-ranging
100-240VAC,
100-240VAC,
48-62 Hz PSU
48-62 Hz PSU
Physical specifications
Environment
Power consumption
3
8 port GE copper
CB, CE, FCC Class A, IC,
VCCI, RCM, UL, CCC
Dimensions
Width x Depth x Height
Weight
2U sliding rails (included)
432.4 x 580 x 88 mm
17.02 x 22.83 x 3.46 inches
18.54 kg / 40.87 lbs (unpacked)
28.8 kg / 63.49 lbs (packed)
* Transceivers (mini GBICs) sold separately
Sophos XG Firewall
Sophos XG Series Rackmount Appliances: XG 750
Technical Specifications
The Sophos XG 750 is a high performance firewall suitable for high traffic datacenter and large enterprise environments. Intel
multi core technology and redundancy features such as dual SSDs, power supplies and swappable fans, ensure you’re protected
at all times. With a total of 8 FleXi Port bays, one of which comes equipped with a default 8 port GbE copper module, connectivity
knows no bounds and can reach a maximum of 64 ports using the optional modules.
Front View
Performance
XG 750 Rev. 1
Firewall throughput
2 x hot-swap
SSD (RAID-1)
2 x management port
Multi-function
LCD display
1 x 8 port 1GbE copper FleXi Port module
(supplied as default, removable)
2 x USB 2.0
140 Gbps
VPN throughput
11 Gbps
IPS throughput
22 Gbps
Antivirus throughput (proxy)
17 Gbps
Concurrent connections
30,000,000
New connections/sec
300,000
Maximum licensed users
Navigation
for LCD
1 x COM
(RJ45)
7 further expansion bays
(shown here with optional FleXi Port modules)
Back View
1 x USB 3.0
1 x VGA
port
Power
switch
2 x hot swappable
power supply
unrestricted
Physical interfaces
Storage (local quarantine/logs)
2 x integrated hot-swap SSD (RAID)
Ethernet interfaces (removable)
8 GE copper
No. of FleXi Port slots
8
FleXi Port modules (optional)
8 port GE copper
8 port GE SFP*
2 port 10 GE SFP+*
4 port 10 GE SFP+*
4 port SFP* plus
4 port GE copper LAN bypass
4 x swappable fan
I/O ports
2 x USB 2.0 (front)
1 x USB 3.0 (rear)
2 x Mgmt Port (eth0/eth1, front)
Environment
Power consumption
512.2W,1747.62BTU/h,
12A@115V (full load)
515.6W,1759.27BTU/h,
6A@230V (full load)
Operating temperature
Humidity
0-40°C (operating)
-40 to +70°C (storage)
5%-90%, non-condensing
Product Certifications
Certifications
1 x COM (RJ45) (front)
326.5W, 1114.01 BTU/h, 12A@115V (idle),
325W, 1108.90 BTU/h, 6A@230V (idle)
CB, CE, FCC Class A, IC,
VCCI, RCM, UL, CCC
1 x VGA (rear)
Display
Power supply
Multi-function LCD module
2 x hot-swap external auto-ranging
100-240VAC, 50-60 Hz
Physical specifications
Mounting
2U sliding rails (included)
Dimensions
Width x Depth x Height
438 x 600 x 88 mm
17.24 x 23.62 x 3.46 inches
Weight
23 kg / 50.71 lbs (unpacked)
25 kg / 55.12 lbs (packed)
* Transceivers (mini GBICs) sold separately
12
Sophos XG Firewall
FleXi Port Modules
Configure your hardware to suit your infrastructure and change it as and when you need to. Our optional FleXi Port LAN modules
give you the freedom to select the connectivity you need – copper, fiber, 10GbE – you decide.
In some cases, FleXi Port modules are interchangeable within a range of appliances, so, for example, you can use the same module
with all of your 1U appliances which saves you money if you upgrade to a higher model at a later date.
FleXi Port Modules for 1U
FleXi Port Modules for
XG 550 and XG 650
FleXi Port Modules for XG 750
8 port GbE copper FleXi Port module
(for XG/SG 2xx/3xx/4xx only)
8 port GbE copper FleXi Port module
(for XG/SG/UTM 5xx and 6xx)
8 port GbE copper FleXi Port module
(for XG 750 only)
8 port GbE SFP FleXi Port module
(for XG/SG 2xx/3xx/4xx only)
8 port GbE SFP FleXi Port module
(for XG/SG/UTM 5xx and 6xx)
8 port GbE SFP FleXi Port module
(for XG 750 only)
2 port 10 GbE SFP+ FleXi Port module
(for XG/SG 2xx/3xx/4xx only)
2 port 10 GbE SFP+ FleXi Port module Rev.2
(for XG/SG 550/650 only)
2 port 10 GbE SFP+ FleXi Port module
(for XG 750 only)
4 port 10 GbE SFP+ FleXi Port module
(for XG/SG 2xx/3xx/4xx only)
4 port 10 GbE SFP+ FleXi Port module
(for XG 750 only)
4 port GbE copper LAN Bypass FleXi Port module
(for XG/SG 2xx/3xx/4xx only)
4 port GbE SFP plus 4 port GbE copper LAN
bypass FleXi port module (for XG 750 only)
Please note: Transceivers (mini GBICs) are sold separately.
13
Sophos XG Firewall
Sophos Wireless Protection
Get secure and reliable wireless access all over the office
Simplify your wireless networking by using your Sophos XG Firewall as a wireless controller to centralize your Wi-Fi management
and security. Sophos Wireless Protection is included in the Base Firewall license and for example, provides full hotspot support
to simply set up guest and visitor access. Our optional access points are automatically set up and configured by the firewall. That
means all your wireless clients get complete threat protection too.
Choose your Access Point
Our APs are built on the latest enterprise-class, high-speed wireless chipsets with custom designed antennas, added CPU and
memory resources, and hardware accelerated encryption.
Product Matrix
Sophos Access Points
AP 15
AP 55
AP 55C
AP 100
AP 100C
AP 100X
AP 100C
Capacity
Maximum throughput
Multiple SSIDs
SOHO
Enterprise dualband/dual-radio
Enterprise dualband/dual-radio
ceiling mount
Enterprise dualband/dual-radio
Enterprise-grade
ceiling mount
IP67 Enterprise
outdoor/exterior
wall-mount
300 Mbps
867 Mbps +
300 Mbps
867 Mbps +
300 Mbps
1.3 Gbps +
450 Mbps
1.3 Gbps + 450 Mbps
1.3 Gbps +
450 Mbps
8
8 per radio
(16 in total)
8 per radio
(16 in total)
8 per radio
(16 in total)
8 per radio
(16 in total)
8 per radio
(16 in total)
1 x 10/100/1000
Base TX
1 x 10/100/1000
Base TX
1 x 10/100/1000
Base TX
1 x 10/100/1000
Base TX
1 x 10/100/1000
Base TX
1 x 10/100/1000
Base TX
802.11 b/g/n
2.4 GHz
802.11 a/b/g/n/ac
2.4 and 5 GHz
802.11 a/b/g/n/ac
2.4 GHz and 5 GHz
802.11 a/b/g/n/ac
2.4 and 5 GHz
802.11 a/b/g/n/ac
2.4 and 5 GHz
802.11 a/b/g/n/ac
2.4 and 5 GHz
Technical Specification
LAN interface
Supported WLAN Standards
DFS/TPC
-
Yes
Yes
Yes
Yes
Yes
Power over Ethernet
802.3af (PoE+)
802.3at (PoE+)
802.3at (PoE+)
802.3at (PoE+)
802.3at (PoE+)
802.3at (PoE+)
Number of antennas
2 external
2 external
4 internal
3 external
6 internal
6 external
1
2
2
2
2
2
Number of radios
MIMO capabilities
Power supply
Power consumption (max.)
2x2:2
2x2:2
2x2:2
3x3:3
3x3:3
3x3:3
90-240V, 50/60 Hz
100-240V, 50/60 Hz
100-240V, 50/60Hz
100-240V, 50/60 Hz
100-240V, 50/60 Hz
100-240V, 50/60 Hz
2.5W
11W
13W
13W
13W
15W
194 x 32 x 115 mm
183 x 36 x 183 mm
200 (Diameter) x
37 mm (Height)
183 x 36 x 183 mm
200 (Diameter) x
37 mm (Height)
255 x 225 x 90 mm
Physical Specification
Dimensions (WxHxD)
Weight
Mounting options
260g
500g
640g
505g
640 g
2.5 kg
Desktop/wall
Desktop/wall
Ceiling
Desktop/wall
Ceiling
Wall/pole
FCC, CE, SRRC
FCC, CE
CB, CE, FCC, UL
(plenum-rated)
FCC, CE
CB, CE, FCC, NCC,
UL (plenum-rated)
CB, CE, FCC, UL
Product Certifications
Certifications
Hardware Appliances with integrated WiFi
All our XG Series desktop appliances are available with an integrated wireless access point. Coverage can be further extended by
adding Sophos Access Points. Please see the Hardware section for further details.
14
Sophos XG Firewall
Sophos RED (Remote Ethernet Device)
Turn any location into a secure location with our Remote Ethernet Devices (RED)
If you have branch offices, retail locations, remote outposts or otherwise need to extend your secure network easily and affordably
beyond your main facility, Sophos Remote Ethernet Devices are the ideal solution. Uniquely simple and imminently affordable, RED
provides an elegant solution to building a secure distributed network.
Plug-and-protect
Sophos RED makes extending your secure network to other locations easy. It requires no technical skills at the remote site; simply
enter the RED device ID into your XG Firewall console and ship it. As soon as it’s plugged in and connected to the Internet, it will
contact your firewall and establish a secure dedicated VPN tunnel. It’s that easy.
RED appliance
RED 15
RED 50
Unrestricted
Unrestricted
90 Mbps
360 Mbps
LAN interfaces
4 x 10/100/1000 Base-TX
4 x 10/100/1000 Base-TX
WAN interfaces
1 x 10/100/1000 Base-TX
2 x 10/100/1000 Base-TX
Capacity
Maximum users
Maximum throughput
Physical interfaces
USB interfaces
1 x USB 2.0
2 x USB 2.0
Serial console
1 x RJ45 console
1 x RJ45 console
Power, system, router, Internet, tunnel , 4 x LAN, WAN
Power, error, 4 x LAN, 2 x WAN
110-240 V, 50-60 Hz, max. 1.5 A
100-240 V, 50-60 Hz, 1.3 A
Heavy-duty steel
Heavy-duty steel
LED display
Power supply
Physical specifications
Chassis
Mounting
Dimensions (W x H x D)
Weight
Power consumption
Temperature
Humidity
Desktop
Desktop/wall/rack (optional)
165 x 34 x 134.8 mm
216 x 44 x 189 mm
600 g / 1.31 lbs
1.1 kg / 2.43 lbs
<7W
38.2 W (max.)
0-40°C (operating), -20-80°C (storage)
0-40°C (operating), -20-70°C (storage)
10-90% (operating),
5-95% (storage), non-condensing
5-90% (operating),
5-95% (storage), non-condensing
CB, CE, FCC Class B, IC, VCCI, RCM, UL, CCC
CB, CE, FCC Class A, IC, VCCI, C-TICK, UL
Product Certifications
Certifications
15
Sophos XG Firewall
Sophos Firewall Manager (SFM)
Sophos Firewall Manager (SFM) provides powerful centralized management for all your Sophos Firewalls across multiple
customers sites or branch offices all from a single screen. Whether you’re an MSP, Enterprise Network Security Admin, or simply
managing a few small offices, SFM simplifies security management enabling consistent enforcement, easy provisioning of new
policies, and at-a-glance monitoring of device health. SFM saves you time, money and makes management simpler.
Comprehensive Centralized Management - Manage all Firewall policies and configuration from single console.
Insightful Monitoring - At-a-glance device and network health indicators.
Extensive Administrative controls - Role-based administration, change control and logging.
Flexible Deployment Options - Available as Hardware, Software, or Virtual appliance.
SFM Hardware Models
SFM 200
SFM 300
SFM 400
Recommended number of
Sophos Firewall OS devices
30
150
300
10 /100 /1000 RJ45 Ports
6
6
6
Console ports (RJ-45)
1
1
1
USB ports
2
2
2
Virtual/Software
Number of Sophos Firewall
OS devices supported
Recommended CPU**
Recommended Memory (vRAM)
Recommended HDD
Network Interface Support
(Minimum/Maximum)
SFM v5*
SFM v15
SFM v50
SFM v100
SFM v200
5
15
50
100
200
SFM v500 SFM v1000
500
1000
Dual Core
Dual Core
Dual Core
Dual Core
Dual Core
Quad Core
Quad Core
2 GB
2 GB
4 GB
4 GB
8 GB
8 GB
16 GB
160 GB
160 GB
250 GB
500 GB
500 GB
1 TB
1 TB
1/4
1/4
1/4
1/4
1/4
1/4
1/4
* Free for evaluation purpose
** CPU frequency 2.7 GHz or equivalent
16
Sophos XG Firewall
Sophos iView v2
Monitoring a distributed network across multiple locations can be a challenge. That’s where Sophos iView can help. It provides
you with an intelligent, uninterrupted view of your network from a single pane of glass. If you have multiple appliances, need
consolidated reporting, or could just use help with log management or compliance, Sophos iView is the ideal solution.
Consolidated reporting - Aggregated reporting across multiple Sophos and Cyberoam firewall devices.
User-based Reporting - Our patented Layer-8 user identity provides visibility into user activities regardless of where they’re working.
Security intelligence - Identify potential network issues and possible attacks anywhere across your network.
Log backup and management - Logs data from multiple devices at distributed locations with smart indexing and easy search facilities.
Deployment options - Available as software ISO or virtual appliance.
Technical Specifications
License
names
iView Light*
iView 500 GB
iView 1 TB
iView 4 TB
iView 8 TB
iView Unlimited
100 GB
500 GB
1 TB
4 TB
8 TB
Unlimited
(16 TB recommended)
Recommended
CPU**
Dual core
Dual core
Dual core
Quad core
Quad core
Quad core†
Recommended
Memory (vRAM)
4 GB
4 GB
4 GB
4 GB
4 GB
8 GB
1/4
1/4
1/4
1/4
1/4
1/4
Storage limit
Network Interface
support (Minimum/
Maximum)
* Free for evaluation purposes
Event capacity varies with CPU family and hardware specs
** CPU frequency 2.7 GHz or equivalent
†
CPU frequency 3.1 GHz or equivalent
17
Sophos XG Firewall
Try it for free – business and even at home
If you have any additional questions visit Sophos.com or give one of our Sales Agents a call.
Free 30 day Trial – no strings attached
If you’d like to take it for a test drive you can get the full-featured product
simply sign-up for our Free 30-day trial.
See it in action now
You can take a walkthrough of the user interface with our interactive demo or
watch videos showing you just how we make network security simple.
Visit sophos.com/xgfirewall
Free Home Use version
Our Sophos XG Firewall Home Edition is a fully-equipped software version that
gives you complete network, web, mail and web application security with VPN
functionality, for home-use only and limited to 4 virtual cores, 6GB of RAM.
Visit sophos.com/freetools
United Kingdom and Worldwide Sales
Tel: +44 (0)8447 671131
Email: sales@sophos.com
North American Sales
Toll Free: 1-866-866-2802
Email: nasales@sophos.com
Oxford, UK | Boston, USA
© Copyright 2015. Sophos Ltd. All rights reserved.
Registered in England and Wales No. 2096520, The Pentagon, Abingdon Science Park, Abingdon, OX14 3YP, UK
Sophos is the registered trademark of Sophos Ltd. All other product and company names mentioned are
trademarks or registered trademarks of their respective owners.
2015-10-07 BR-NA (DD-2212)
Australia and New Zealand Sales
Tel: +61 2 9409 9100
Email: sales@sophos.com.au
Asia Sales
Tel: +65 62244168
Email: salesasia@sophos.com