Sophos SG 650
Unleash the full potential of your network

Overview:

With bandwidth requirements constantly increasing, network security appliances need to do more than ever before. The Sophos SG Series appliances are built to provide optimal performance, versatility and efficiency to meet all your security needs.

The Sophos SG Series appliances are designed to provide the optimal balance between performance and protection – for diverse IT environments. Whether you need a solution for a small remote office, want to protect your school campus, or are a global organization requiring high-availability and enterprise-grade features, our SG Series appliances are an ideal fit.

Versatile

Appliances to suit every environment Our broad product line-up makes it easier for you to choose the right appliance. A higher model number indicates higher throughput and an increased number of ports or connectivity options.

And as every software subscription is available on every appliance, you can flexibly size the solution to fit your budget and your individual security needs. Next-generation firewall features or all-in-one security on a single box, it’s your choice.

Rapid

Proven performance on all models Our appliances are built upon the most advanced Intel technology. Optimized use of multi-core processors allows consolidation of your security solutions without a performance trade-off.

With faster than ever firewall, IPS and VPN throughput, our SG Series appliances effortlessly handle multiple tasks simultaneously. Plus, you can easily scale up by dynamically clustering up to 10 units without external load balancers.

Responsive

Technology built to process data in real-time Your network is constantly changing so your protection needs to be adaptive. All our appliances have integrated high-speed hard drives (in many cases SSDs) for local storage of spam quarantine data and faster access to comprehensive reports and real-time logs.

Accelerated in-memory content scanning in secure proxy mode makes your defenses more effective and efficient.

Reliable

Engineered for business – today and tomorrow Using the latest Intel technology, our products provide the utmost in flexibility. Add to your protection as you need it - without changing or upgrading your hardware. That means you benefit from future software and performance enhancements which guarantees the best possible value for money.

Redundancy features such as an additional hard-drive or power supply are available on the 1U SG 450 and on both of our 2U appliances.

Modular

Flexible configuration options on many models Configure your hardware to suit your infrastructure, even when that changes. Our optional FleXi Port LAN modules give you the freedom to select the connectivity you need – copper, fiber, 10GbE – you decide.

And because they’re fully interchangeable between the mid-range models, if you do choose to upgrade to a larger appliance, you simply swap your old appliance’s module to the new one.

Connected

Full wireless coverage – for every office Our SG 100 Series desktop models with integrated wireless are a very tidy solution for even the most compact office space. As the access point is built in, you do not require any extra hardware. Should you need additional coverage or have a larger space, you can add Sophos access points.

Every one of our appliances has a built-in wireless controller for you to connect Sophos access points and manage them simply from your central management console.

Compare Models:

This is what you get with every Sophos SG Series firewall:

• The latest Intel multi-core technology for optimal performance and efficiency
• The same security features available on every size of appliance
• Built-in HDD or SSD as storage for local quarantine data, logs and reporting
• FleXi Port modules available for all 1U and 2U appliances (interchangeable within a range, e.g. 1U)
• Free Sophos UTM Manager (SUM) to manage multiple appliances
• Possibility to dynamically cluster up to 10 appliances of the same kind – without external load balancers

Model		Tech. Specs			Throughput
	Form Factor	Ports/Slots (Max Ports)	w-model 802.11 wireless	Swappable Components	Firewall (Mbps)	VPN (Mbps)	NGFW (Mbps)	AV-proxy (Mbps)
SG 105(w)	desktop	4	a/b/g/n	n/a	1,500	325	350	90
SG 115(w)	desktop	4	a/b/g/n	n/a	2,300	425	500	120
SG 125(w)	desktop	8	a/b/g/n/ac	n/a	3,100	500	750	200
SG 135(w)	desktop	8	a/b/g/n/ac	n/a	6,000	1,000	1,500	350
SG 210	1U	6/1 (14)	n/a	n/a	11,000	1,000	2,000	500
SG 230	1U	6/1 (14)	n/a	n/a	13,000	2,000	3,000	800
SG 310	1U	10/1 (18)	n/a	n/a	17,000	3,000	5,000	1,200
SG 330	1U	10/1 (18)	n/a	n/a	20,000	4,000	6,000	1,500
SG 430	1U	8/3 (24)	n/a	n/a	25,000	4,000	7,000	2,000
SG 450	1U	8/3 (24)	n/a	opt. Power	27,000	5,000	8,000	2,500
SG 550	2U	8/4 (32)	n/a	Power, SSD, Fan	45,000	8,000	12,000	3,500
SG 650	2U	8/6 (48)	n/a	Power, SSD, Fan	65,000	10,000	16,000	5,000

Deployment:

These 2U firewalls offer the ultimate in performance and connectivity for the most demanding deployment scenarios. The following diagram shows a typical deployment in this range and demonstrates their scalability which is ideally suited for larger distributed organizations.

Deployment scenario showing a cluster of two SG 650 appliances as part of a large distributed organization with Sophos REDs to protect small or home offices and other SG appliances to protect branch offices

Specifications:

The Sophos SG 550 and SG 650 are high-performance firewalls equipped to provide protection for larger distributed organizations and data center environments. They offer the fastest Intel CPU technology available today to effortlessly handle use as an all-inone solution or a powerful next-generation firewall. The models offer either 3 (SG 550) or 4 (SG 650) FleXi Port expansion bays to tailor your connectivity to your environment. An 8 port GbE copper module is supplied as a default. Hot-swappable dual SSDs and power supplies are standard redundancy features in this class. Cluster up to 10 of these appliances for larger deployments or simply add an additional appliance as a failover for high availability.

SG Series Appliances: SG 550, SG 650
Front View SG 550	Performance	SG 550	SG 650
	Firewall throughput	40 Gbps	60 Gbps
	VPN throughput	8 Gbps	10 Gbps
	IPS throughput	12 Gbps	16 Gbps
	Antivirus throughput (proxy)	3.5 Gbps	5 Gbps
	Concurrent connections	12,000,000	20,000,000
	New connections/sec	200,000	220,000
	Maximum licensed users	unrestricted	unrestricted
Front View SG 650	Physical interfaces
	Hard drive (local quarantine/logs)	2 x integrated hotswap SSD (RAID)	2 x integrated hotswap SSD (RAID)
	Ethernet interfaces (fixed)	8 GE copper	8 GE copper
	No. of FleXi Port slots	3	4
	FleXi Port modules (optional)	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+
	I/O ports	2 x USB 2.0 (front) 2 x USB 2.0 (rear) 2 x Mgmt Port (eth0/eth1, front) 1 x COM (RJ45) (front) 1 x VGA (rear)	2 x USB 2.0 (front) 2 x USB 2.0 (rear) 2 x Mgmt Port (eth0/eth1, front) 1 x COM (RJ45) (front) 1 x VGA (rear)
	Display	Multi-function LCD module	LCD module Multi-function
	Power supply	2 x hot-swap internal auto-ranging 100-240VAC, 48-62 Hz PSU	2 x hot-swap internal auto-ranging 100-240VAC, 48-62 Hz PSU

Physical specifications		Environment
Mounting	2U sliding rails (included)	Power consumption	221.44W, 755.11 BTU/hr (idle) 335.4W, 1143.71 BTU/hr (full load)
Dimensions Width x Depth x Height	432.4 x 580 x 88 mm 17.02 x 22.83 x 3.46 inches	Operating temperature	0-40°C (operating) -20 to +75°C (storage)
Weight	18.54 kg / 40.87 lbs (unpacked) 28.8 kg / 63.49 lbs (packed)	Humidity	10%-90%, non-condensing
Safety Certifications
Certifications	CE, FCC Class A, CB, VCCI, C-Tick, UL, CCC

How to Buy:

Three simple steps will get you complete security with Sophos UTM

• Choose How To Deploy
  Hardware, software, virtual or cloud-based appliance
• Choose Your License
  Choose pre-packaged licenses or license modules individually
• Choose to Extend Your Protection
  Plug in Sophos access points for Secure Wi-Fi and with Sophos RED extend protection to branch offices

You can read more about these steps below. And if you need help deciding what’s right for you, simply contact us. We’ll both be happy to help.

Choose How To Deploy

Choose the right appliance for your environment—is it hardware, software, virtual or even cloud-based?

• Hardware
  Our range of models fit any environment and are purpose-built to deliver high-performance. They integrate our security applications with a hardened operating system (OS) on optimized Intel-compatible server systems.
• Virtual
  Virtual appliances are certified as VMware Ready and Citrix Ready. They also run in Microsoft Hyper-V and KVM virtual environments.
• Software
  Easily installs on your existing hardware.
• Cloud-based appliances
  Using Amazon Virtual Private Cloud (VPC), you can run the appliance in the cloud. Or, you can use the Amazon VPC connector on the appliance at your office for secure and robust access to your Amazon-hosted resources.

Choose Your License

We give you the flexibility to license our protection modules individually. Or, you can choose one of our pre-packaged licenses. Whatever suits your needs.

Modules	Next-Gen Firewall	BasicGuard	FullGuard
Essential Firewall – Free Network Firewall, NAT, Native Windows Remote Access Datasheet	Full	Full	Full
Network Protection IPSec/SSL VPN, Intrusion Prevention, DoS Protection Datasheet	Full	Basic	Full
Web Protection URL Filtering, Application Control, Dual Engine Antivirus Datasheet	Full	Basic	Full
Email Protection Anti-spam, Email Encryption, Dual Engine Antivirus Datasheet	Optional	Basic	Full
Wireless Protection Wireless Controller, Multi-SSID Support, Captive Portal Datasheet	Optional	Basic	Full
Webserver Protection Web Application Firewall, Reverse Proxy, Antivirus Datasheet	Optional	-	Full
Endpoint Protection Antivirus, HIPS, Device Control Datasheet	Optional	Optional	Optional

Choose to Extend Your Protection

Choose the accessories you need to protect your branch offices and deploy secure Wi-Fi too:

• Sophos RED Secure your branch offices by forwarding all traffic to the central Sophos UTM. Installation requires no technical training and there is no ongoing maintenance.

Security Applications:

Our Linux-based OS includes a free Essential Network Firewall. It provides fundamental security like firewalling, networking tools, routing and secure remote access. And our modular approach lets you add layers of protection as your needs evolve.

UTM Network Protection stops sophisticated attacks that a firewall alone can’t stop.

• Configurable intrusion protection system and flood protection against denial of service attacks
• Sophos RED, IPsec and SSL tunnels provide flexible site-to-site and remote-access VPN connections

UTM Email Protection stops spam and viruses and keeps sensitive data safe.

• Let users manage their spam quarantine and search a personalized mail log
• Keep infected emails out of your mailbox and protect confidential emails against illegitimate access.

UTM Web Protection lets you protect your employees from web threats and control their time online.

• Limit use of unwanted applications while giving priority to business critical resources
• Create dynamic reports on the fly to check if your policy is working and make adjustments

UTM Webserver Protection hardens web servers and apps ensuring compliance with a web application firewall.

• Protect personally identifiable information like credit card and social security numbers
• Inspects information submitted via forms on your websites to prevent server exploits

UTM Wireless Protection gives you secure Wi-Fi in minutes.

• Centrally manage access points through the UTM's built-in wireless controller
• Easily set up wireless hotspots and grant guest access with a simple voucher-based system

UTM Endpoint Protection provides desktops, laptops, and servers with antivirus, device and web control.

• Scans files, webpages and devices blocking or cleaning threats
• Device control reduces the risk of data loss and malware by managing removable devices
• Built-in URL filtering ensures users get the same level of web protection outside of the office as they do inside

Add modules when you need them

Documentation:

Download the Sophos SG Series Data Sheet (PDF).