Sophos XGS Xstream Protection

Name: Sophos XGS Xstream Protection Bundle - Complete Firewall Security
Brand: Sophos

The complete firewall subscription bundle delivering extreme levels of protection, performance, and visibility for your network.

See What's Included

Overview

Extreme performance without compromise

Traditional firewalls force you to choose between security and performance. Enable TLS inspection and watch throughput collapse. Turn on sandboxing and users complain about latency. The Xstream Protection bundle eliminates these trade-offs.

Built on Sophos Firewall's revolutionary Xstream architecture, this bundle delivers industry-leading performance while inspecting all encrypted traffic, analyzing unknown files in the cloud, and enforcing granular security policies across your entire network.

Xstream Protection is designed for organizations that refuse to compromise on security or performance. Every feature enabled. Full protection activated. No slowdowns.

Powered by Xstream architecture

Three core technologies that deliver uncompromising performance and protection.

Xstream TLS Inspection

Industry-leading performance, flexibility, and transparency into all encrypted traffic on your network. Inspect TLS 1.3 without breaking performance or user experience.

Xstream DPI Engine

Deep packet threat protection in a single streaming engine for AV, IPS, Web, App control, and TLS inspection. Process once, inspect everywhere.

Xstream Network FastPath

Automatic and policy-based intelligent offloading of trusted traffic processing at wire speed. Maximum throughput for known-good connections.

What's included in Xstream Protection

Six integrated protection layers managed from a single platform.

Network Protection

Xstream TLS Inspection - TLS 1.3 inspection with prepackaged exceptions
Xstream DPI Engine - Streaming deep-packet inspection
IPS - Next-gen Intrusion Prevention
ATP - Advanced Threat Protection
Synchronized Security Heartbeat - Integration with Sophos Endpoints
Clientless VPN - HTML5
SD-RED VPN - Manage SD-RED devices

Web Protection

Web Control - By user, group, category, URL, keyword
Web Threat Protection - Malware, PUA, malicious JavaScript, pharming
App Control - By user, group, category, risk, and more
Synchronized App Control - Integration with Sophos endpoints
Reporting - Extensive web and app reporting

Zero-Day Protection

Zero-Day Threat Protection - Analyze unknown files using AI, ML, and sandboxing
Powered by SophosLabs Intelix - Cloud-based intelligence and analysis
Machine Learning - Multiple deep learning models
Cloud Sandboxing - Dynamic runtime analysis of unknown files
Reporting - Extensive threat intelligence analysis reporting

Sophos Fusion Management

Group Firewall Management - Synchronized policy across firewall groups
Backup and Firmware Updates - Storage and scheduling
Zero-Touch Deployment - For new firewalls from the cloud

Sophos Orchestration

SD-WAN Orchestration - Point and click Site-to-Site VPN
Cloud Firewall Reporting - Multi-firewall reporting with save, schedule, and export (30-day retention)
XDR and MDR Connector - Support for XDR and MDR services

Enhanced Support

24/7 Support
Feature Updates
Advanced Replacement Hardware Warranty for term

Features

Advanced capabilities that set Xstream Protection apart

Deep dive into the features that make this the most comprehensive firewall bundle.

Xstream TLS Inspection

Extremely Fast, Effective, and Transparent

Up to 90% of the traffic passing through your firewall is encrypted. Most organizations are completely blind to this traffic. Why? Because TLS inspection kills their firewall performance. But not anymore.

Sophos Firewall's Xstream TLS Inspection solves this problem once and for all. You can now fully enable TLS inspection without compromising on performance, protection, privacy, and the end-user experience.

SD-WAN network diagram showing multi-site connectivity

SD-WAN Evolved

Unprecedented clarity, connectivity, and control

Sophos Firewall evolves SD-WAN with unique capabilities that provide unprecedented clarity and control over your connectivity needs.

Synchronized SD-WAN - Leverages 100% application visibility and control that Synchronized Security provides to make reliable SD-WAN path selection and routing decisions
SD-RED Branch Office Connectivity - Zero-touch branch office edge devices make SD-WAN deployments simple, easy, and secure
Flexible Connectivity Options - Full range of wireless, cellular, copper, and fiber options

Sophos Fusion management interface showing centralized firewall control

Powerful management. Seamless scalability.

Sophos Firewall provides powerful cloud-based central management and reporting tools that enable seamless scalability as your organization and network grows.

Group Firewall Management - Sophos Fusion provides powerful cross-estate management tools to easily make configuration changes, initiate firmware updates, or manage backups
Firewall Reporting - Powerful centralized reporting enables you to visualize your network utilizing a variety of built-in reports or build your own custom reports
Plug and Play High Availability - Get added scalability, resiliency, and peace of mind by simply connecting a pair of Sophos Firewalls together to enable high-availability

Synchronized Security diagram showing endpoint and firewall integration

Seamlessly integrate your cybersecurity for better protection

Sophos Firewall is part of the world's best cybersecurity ecosystem, integrating in real-time with Sophos Fusion and Intercept X.

Sophos Fusion - The most comprehensive cloud cybersecurity management platform available. Ultimate management efficiency and scalability for all your IT Security products from a single pane of glass
Synchronized Security - Sophos is a pioneer in Synchronized Security, integrating your endpoint and firewall protection to share information and provide features you can't get elsewhere, like Security Heartbeat for health monitoring, app control, user identification, and more
Zero-Touch Threat Isolation - Whether a threat is first detected at your firewall, endpoint, or server, they all leap into action and work together to provide automatic response with dynamic firewall rules and lateral movement protection

Specifications

Performance for the enterprise and campus edge

The latest Sophos XGS Series appliances come with a programmable, dual processor architecture with enterprise-grade acceleration for your trusted traffic and applications.

No compromise performance to serve thousands of users

Our hardware appliances are engineered from the core to serve high-performance networks. The new XGS 7500 and XGS 8500 models come with a range of connectivity including built-in, high-speed QSFP28 ports to support up to 100 Gbps, and offer up to 34 Gbps with full Threat Protection.

Scalability to address changing requirements

Our flexible product concept not only offers the flexibility to adapt and extend connectivity to address changing requirements, we also have a programmable architecture to continually accelerate performance over time.

Powering your journey to the cloud

Whether you're still fully on-prem, running a hybrid infrastructure, or well on your way to the cloud, our architecture design ensures your investment in Sophos Firewall is future-proofed and enables a seamless transition to a cloud-enabled world - whenever you're ready.

Sophos XGS 7500 and 8500 firewall appliances

Documentation

Downloads

Learn More

Sophos XGS Series Firewalls

High-performance hardware appliances with Xstream architecture. Available in desktop and rackmount form factors for all deployment sizes.

Explore XGS Firewalls

Standard Protection Bundle

Essential firewall security bundle with networking, SD-WAN, VPN, network protection, and web security for fundamental security needs.

Compare Standard Protection

Sophos Managed Detection and Response

24/7 threat hunting and incident response from Sophos experts. Extends across firewalls, endpoints, and servers.

Learn about MDR

Pricing Notes

Pricing and product availability subject to change without notice.

Sophos XGS Xstream Protection

Overview

Extreme performance without compromise

Powered by Xstream architecture

Xstream TLS Inspection

Xstream DPI Engine

Xstream Network FastPath

What's included in Xstream Protection

Network Protection

Web Protection

Zero-Day Protection

Sophos Fusion Management

Sophos Orchestration

Enhanced Support

Features

Advanced capabilities that set Xstream Protection apart

Xstream TLS Inspection

SD-WAN Evolved

Powerful management. Seamless scalability.

Seamlessly integrate your cybersecurity for better protection

Specifications

Performance for the enterprise and campus edge

No compromise performance to serve thousands of users

Scalability to address changing requirements

Powering your journey to the cloud

Documentation

Downloads

Learn More

Related Products

Sophos XGS Series Firewalls

Standard Protection Bundle

Sophos Managed Detection and Response

Pricing Notes