Sophos XGS 128w Wireless (Gen 2) Firewall
Enterprise-Grade Desktop Firewall with 19,100 Mbps and Wi-Fi 6

Product highlights

• All protection features are supported on every XGS 1xx desktop model and most are available on XGS 88 and XGS 88w.
• Accelerated performance: Up to double the throughput of Gen.1 models plus Xstream virtual FastPath acceleration for IPsec VPN (XGS 88 to XGS 128) in combination with SFOS v21 and higher
• High-speed connectivity built in: 2.5 GE interfaces on everymodel,two built-in 10 GE SFP+ interfaces on the XGS 138, and Wi-Fi 6 (802.11ax) integrated on all w-models with concurrent use of the 2.4 and 5 GHz bands for better performance
• Power and environment: Up to 50% lower power consumption, fanless XGS 88 and 108 models for whisper-quiet operation, optimized thermal design for XGS 118 and above, and redundant power option for all XGS 1xx models
• Optional connectivity: New 5G module available exclusively for Gen.2 models for more cost-effective redundant connectivity
• Streamlined hardware architecture: The XGS 88 to XGS 128 models boast a new single-CPU architecture while the XGS 138 has a refreshed dual-processor architecture

Accessories

5G connectivity for XGS 118, XGS 128, and XGS 138 models only

For many business locations, a 5G cellular network can be deployed to support traffic peaks or provide an important redundant/fallback connectivity option for SD-WAN. 5G fixed wireless access (FWA) may sound like a contradiction in terms, but as a technology, it allows network operators to deliver cost-effective, high-speed broadband connectivity to both suburban and rural areas. Using 5G, operators can now meet the high-speed internet access demands of cloud services in business and consumer requirements for latency-free, high-definition streaming services.

The optional Gen.2 5G module can be securely mounted in the XGS device and then managed from your Sophos Firewall.

• Better performance with the latest standards supported
• Highly cost-effective solution
• Full protection from theft and damage
• Gen.2 5G module data rates (max.):
  • 5G SA sub-6: downlink 2.4 Gbps; uplink 900 Mbps
  • 5G NSA sub-6: downlink 3.4 Gbps; uplink 550 Mbps
  • LTE: downlink 1.6 Gbps; uplink 200 Mbps
  • WCDMA: downlink 42 Mbps; uplink 5.76 Mbps
• One 5G module (Gen.2) version for all regions

You can’t control what you can’t see. All firewalls today depend on static application signatures to identify apps. But those don’t work for most custom, obscure, evasive, or any apps using generic HTTP or HTTPS.

Sophos Firewall utilizes Synchronized Security to automatically identify, classify, and control all unknown applications easily blocking the apps you don’t want and prioritizing the ones you do

Active Threat Response

Sophos Firewall uniquely integrates with many Sophos products to automatically coordinate a response to an active adversary or attack:

• Sophos Endpoint and XDR
• Sophos Managed Detection and Response services
• Sophos switches and wireless access points
• Sophos ZTNA remote access
• Sophos messaging protection
• And third-party threat intelligence solutions

Regardless of how the threat is first identified, whether at the firewall, by another product, or by a security analyst, Sophos Firewall coordinates a Synchronized Security response across Sophos products. It will identify and isolate the compromised host and prevent lateral movement and external communications until the threat can be investigated and cleaned up.

Sophos Synchronized Security integration between products also provides additional capabilities you can’t get anywhere else that adds tremendous value to your network:

• Synchronized Application Control takes advantage of telemetry gathered by the endpoint about active, networked applications and shares that with the firewall enabling control of applications that might otherwise go unidentified.
• Synchronized User ID works similarly to share user identity between the endpoint agent and the firewall to enforce user-based policies without the need for a separate client or server identity solution.
• Synchronized SD-WAN leverages Synchronized Application Control for traffic matching operations to effectively route custom or otherwise unknown application traffic across your network.

Work From Anywhere

Sophos Firewall offers the ultimate in flexible connectivity and secure access for even the most demanding networks. You get a fully integrated SD-WAN solution, along with a full suite of secure access products for Zero Trust Network Access, SD-RED edge devices, VPN, switching, and wireless — all managed from Sophos Central.

Securing and managing remote workers with ZTNA ensures users only have access to the applications they need, and not the whole network. ZTNA also integrates with Sophos Firewall and Sophos Endpoint to ensure a compromised device can’t access the network at all. ZTNA also protects your applications from hacks and attacks by making them invisible to the outside world. The best part is, Sophos Firewall integrates a Sophos ZTNA gateway directly into your firewall to make deployment easy.

Sophos Firewall also includes one of the best integrated SD-WAN solutions available in any firewall. Xstream SDWAN provides a powerful integrated SD-WAN solution with:

• Performance-based link selection and routing
• Load balancing with configurable weightings across multiple links
• Zero-impact transitions between links in the event of a disruption
• Central cloud-managed orchestration
• Xstream FastPath acceleration of VPN tunnel traffic

Sophos Firewall makes interconnecting your hybrid distributed enterprise easy and makes it extremely robust, ensuring maximum reliability and uptime.

Single Console Management

With Sophos Central, you get a single cloud management platform for all your Sophos products, including rich and powerful tools for group firewall management, SDWAN overlay network orchestration, ZTNA and user management, and infrastructure management for your switches and wireless access points. You also get full indepth dashboards and reports, cross-product integration and automation with other Sophos products, and much more. Sophos Firewall is so much more than just a firewall – consolidate and streamline your network security management starting with your firewall.

• Manage all of your Sophos Firewalls and other Sophos products from a single console
• Configure changes and apply them to a group of firewalls or manage each firewall individually
• Create a backup schedule and store up to five backups in the cloud
• Schedule firmware updates across your entire network with just a few clicks
• Use zero-touch deployment for new firewalls from Sophos Central: just drop ship the device to any location and set it up remotely. A USB drive is no longer required (but can still be used if you prefer).

Sophos Central also includes powerful reporting and orchestration tools that enable you to visualize your network, web, application activity, and security over time:

• Flexible reporting combines a variety of builtin reports with powerful tools that you can use to create your own custom reports
• Analyze data to identify security gaps, suspicious user behavior, or other events requiring policy changes
• Data is shared across Sophos products through the Sophos Central data lake for threat hunting, forensics, and automated response to active threats
• Utilize point-and-click SD-WAN orchestration to easily setup a fully redundant VPN overlay network for your hybrid distributed network
• Central reporting is available at no extra cost with storage of up to seven days of reporting data*

* Calculated based on average traffic volumes per appliance size. In high-traffic environments, the retention period can be lower.

Custom Protection

You can choose the Standard Protection Bundle or purchase any of the protection modules separately.

Sophos Central Management and Reporting:

Additional Protection:

Support

A support subscription is required to receive firmware upgrades. Enhanced support is included in all protection bundles, but you can enhance your support experience further by upgrading.

Cloud, Virtual and Software Appliance Licensing Options

If you’re deploying Sophos Firewall in the cloud, in a virtual environment, or as software on your own hardware, the licensing guide below can help you find the right option.

Cloud

Sophos Firewall offers the very best network visibility, protection, and response to secure your public, private, and hybrid cloud environments.

As an AWS Advanced Technology Partner, Sophos is a validated AWS Security Competency vendor, AWS marketplace seller, and AWS Public Sector Partner.

Sophos Firewall is now available in the AWS marketplace with autoscaling support with either a pay-as-you-go (PAYG) license model, or bring your own license (BYOL) to best fit your needs.

Sophos Firewall is certified and optimized for Azure and is available in the Microsoft Azure Marketplace. Take advantage of the free test drive or the flexible PAYG or BYOL licensing options.

Sophos Firewall is Nutanix AHV and Nutanix Flow Ready, bringing the world’s best next-gen firewall visibility, protection, and response to the industry’s leading Hyper Convergence Infrastructure (HCI) platform. Take advantage of a 30-day free trial using our KVM image and flexible licensing

Virtual and Software

Sophos Firewall supports a broad range of virtualization platforms and can also be deployed as a software appliance on your own x86 Intel hardware: