Sophos SG 430
Unleash the full potential of your network

Overview:

With bandwidth requirements constantly increasing, network security appliances need to do more than ever before. The Sophos SG Series appliances are built to provide optimal performance, versatility and efficiency to meet all your security needs.

The Sophos SG Series appliances are designed to provide the optimal balance between performance and protection – for diverse IT environments. Whether you need a solution for a small remote office, want to protect your school campus, or are a global organization requiring high-availability and enterprise-grade features, our SG Series appliances are an ideal fit.

Versatile

Appliances to suit every environment Our broad product line-up makes it easier for you to choose the right appliance. A higher model number indicates higher throughput and an increased number of ports or connectivity options.

And as every software subscription is available on every appliance, you can flexibly size the solution to fit your budget and your individual security needs. Next-generation firewall features or all-in-one security on a single box, it’s your choice.

Rapid

Proven performance on all models Our appliances are built upon the most advanced Intel technology. Optimized use of multi-core processors allows consolidation of your security solutions without a performance trade-off.

With faster than ever firewall, IPS and VPN throughput, our SG Series appliances effortlessly handle multiple tasks simultaneously. Plus, you can easily scale up by dynamically clustering up to 10 units without external load balancers.

Responsive

Technology built to process data in real-time Your network is constantly changing so your protection needs to be adaptive. All our appliances have integrated high-speed hard drives (in many cases SSDs) for local storage of spam quarantine data and faster access to comprehensive reports and real-time logs.

Accelerated in-memory content scanning in secure proxy mode makes your defenses more effective and efficient.

Reliable

Engineered for business – today and tomorrow Using the latest Intel technology, our products provide the maximum in flexibility to add to your protection as you need it - without changing or upgrading your hardware. So you benefit from future software and performance enhancements which guarantee the best possible value for your money. Our SG 450 offers unmatched enterprise-grade features for high-availability on a 1U rack-mountable appliance.

Modular

Flexible configuration options on many models Configure your hardware to suit your infrastructure, even when that changes. Our optional FleXi Port LAN modules give you the freedom to select the connectivity you need – copper, fiber, 10GbE – you decide.

And because they’re fully interchangeable between the mid-range models, if you do choose to upgrade to a larger appliance, you simply swap your old appliance’s module to the new one.

Key Features:

The Sophos SG Series appliances offer many features that make your network protection easier to manage and simpler to deploy.

Intel technology inside

• Our hardware uses the latest Intel technology to provide the best performance and ensure the optimal use of resources.
• By using standard Intel technology rather than customized hardware chips, our appliances are easy to upgrade and benefit from future software enhancements. That gives you greater flexibility and value for your money.

Solid State Drives – fast access, low impact

• Solid State Drives, or SSDs, provide faster data storage without the performance impact of rotating drives. Whether you’re scanning large volumes of emails, or generating highly complex reports, they allow you to get more done faster.
• As there are no moving parts, they provide a reliable highcapacity solution for your network with all functionality on the box, rather than requiring a separate appliance.

FleXi Ports – customize your connectivity

• FleXi Port modules let you tailor your security appliance to fit your network connectivity needs.
• On our SG 2xx, 3xx and 4xx appliances, you can select additional modules with copper and 1/10 GbE fiber interfaces to easily expand and upgrade your hardware.
• They’re fully interchangeable between models, so if your business grows and you upgrade, you can simply take the module you’ve already purchased and slot it into your new appliance – for example, going from an SG 210 to an SG 330.

LCD Display – everything in view

• The multi-function LCD display allows you to quickly check the status and do basic administrative tasks directly on the appliance.
• You can directly connect a monitor using the built-in VGA port.

8 port GE copper Flexi Port module	8 port GE SFP FleXi Port module
2 port 10 GE SFP+ FleXi Port module	LCD Display

Compare Models:

This is what you get with every Sophos SG Series firewall:

• The latest Intel multi-core technology for optimal performance and efficiency
• The same security features available on every size of appliance
• Built-in HDD or SSD as storage for local quarantine data, logs and reporting
• FleXi Port modules available for all 1U and 2U appliances (interchangeable within a range, e.g. 1U)
• Free Sophos UTM Manager (SUM) to manage multiple appliances
• Possibility to dynamically cluster up to 10 appliances of the same kind – without external load balancers

Model		Tech. Specs			Throughput
	Form Factor	Ports/Slots (Max Ports)	w-model 802.11 wireless	Swappable Components	Firewall (Mbps)	VPN (Mbps)	NGFW (Mbps)	AV-proxy (Mbps)
SG 105(w)	desktop	4	a/b/g/n	n/a	1,500	325	350	90
SG 115(w)	desktop	4	a/b/g/n	n/a	2,300	425	500	120
SG 125(w)	desktop	8	a/b/g/n/ac	n/a	3,100	500	750	200
SG 135(w)	desktop	8	a/b/g/n/ac	n/a	6,000	1,000	1,500	350
SG 210	1U	6/1 (14)	n/a	n/a	11,000	1,000	2,000	500
SG 230	1U	6/1 (14)	n/a	n/a	13,000	2,000	3,000	800
SG 310	1U	10/1 (18)	n/a	n/a	17,000	3,000	5,000	1,200
SG 330	1U	10/1 (18)	n/a	n/a	20,000	4,000	6,000	1,500
SG 430	1U	8/3 (24)	n/a	n/a	25,000	4,000	7,000	2,000
SG 450	1U	8/3 (24)	n/a	opt. Power	27,000	5,000	8,000	2,500
SG 550	2U	8/4 (32)	n/a	Power, SSD, Fan	45,000	8,000	12,000	3,500
SG 650	2U	8/6 (48)	n/a	Power, SSD, Fan	65,000	10,000	16,000	5,000

Deployment:

Whatever your deployment scenario, these appliances can handle multiple security solutions in every situation. The following diagrams show typical deployments in this range.

Specifications:

The Sophos SG 210 and SG 230 are designed to protect small to mid-sized businesses and branch offices. Based on the latest Intel technology and equipped with 6 GbE copper ports plus one FleXi Port slot to configure with an optional module, they provide high flexibility and throughput at an excellent price-to-performance ratio. As with all models, you can dynamically cluster up to 10 of these appliances.

SG Series Appliances: SG 430, SG 450
Front View	Performance	SG 430	SG 450
	Firewall throughput	25 Gbps	27 Gbps
	VPN throughput	4 Gbps	5 Gbps
	IPS throughput	7 Gbps	8 Gbps
	Antivirus throughput (proxy)	2 Gbps	2.5 Gbps
	Concurrent connections	4, 000,000	5,000,000
	New connections/sec	100,000	190,000
	Maximum licensed users	unrestricted	unrestricted
Back View	Physical interfaces
SG 430 SG 450	Hard drive (local quarantine/logs)	integrated HDD	integrated SSD
	Ethernet interfaces (fixed)	8 GE copper	8 GE copper
	No. of FleXi Port slots	3 (1 included)	3 (1 included)
	FleXi Port modules (optional)	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+
	I/O ports	2 x USB 3.0 (front) 1 x USB 2.0 (rear) 1 x COM (RJ45) (front) 1 x VGA (rear)	2 x USB 3.0 (front) 1 x USB 2.0 (rear) 1 x COM (RJ45) (front) 1 x VGA (rear)
	Display	Multi-function LCD module	Multi-function LCD module
	Power supply	Internal autoranging 110250VAC, 48-62 Hz	Internal autoranging 110250VAC, 48-62 Hz

Physical specifications		Environment
Mounting	1U rack mount (kit included)	Power consumption	22W, 74 BTU/hr, 0.56A@110V (idle), 125W, 429 BTU/hr, 1.48A@110V (full load)
Dimensions Width x Depth x Height	438 x 292 x 44mm 17.24 x 11.5 x 1.75 inches	Operating temperature	0-40°C (operating) -20 to +80°C (storage)
Weight	9.5 Kg / 20.94 lbs (unpacked) 12.3 Kg / 27.11 lbs (packed)	Humidity	10%-90%, non-condensing
Safety Certifications
Certifications	CE, FCC Class A, CB, VCCI, C-Tick, UL

How to Buy:

Three simple steps will get you complete security with Sophos UTM

• Choose How To Deploy
  Hardware, software, virtual or cloud-based appliance
• Choose Your License
  Choose pre-packaged licenses or license modules individually
• Choose to Extend Your Protection
  Plug in Sophos access points for Secure Wi-Fi and with Sophos RED extend protection to branch offices

You can read more about these steps below. And if you need help deciding what’s right for you, simply contact us. We’ll both be happy to help.

Choose How To Deploy

Choose the right appliance for your environment—is it hardware, software, virtual or even cloud-based?

• Hardware
  Our range of models fit any environment and are purpose-built to deliver high-performance. They integrate our security applications with a hardened operating system (OS) on optimized Intel-compatible server systems.
• Virtual
  Virtual appliances are certified as VMware Ready and Citrix Ready. They also run in Microsoft Hyper-V and KVM virtual environments.
• Software
  Easily installs on your existing hardware.
• Cloud-based appliances
  Using Amazon Virtual Private Cloud (VPC), you can run the appliance in the cloud. Or, you can use the Amazon VPC connector on the appliance at your office for secure and robust access to your Amazon-hosted resources.

Choose Your License

We give you the flexibility to license our protection modules individually. Or, you can choose one of our pre-packaged licenses. Whatever suits your needs.

Modules	Next-Gen Firewall	BasicGuard	FullGuard
Essential Firewall – Free Network Firewall, NAT, Native Windows Remote Access Datasheet	Full	Full	Full
Network Protection IPSec/SSL VPN, Intrusion Prevention, DoS Protection Datasheet	Full	Basic	Full
Web Protection URL Filtering, Application Control, Dual Engine Antivirus Datasheet	Full	Basic	Full
Email Protection Anti-spam, Email Encryption, Dual Engine Antivirus Datasheet	Optional	Basic	Full
Wireless Protection Wireless Controller, Multi-SSID Support, Captive Portal Datasheet	Optional	Basic	Full
Webserver Protection Web Application Firewall, Reverse Proxy, Antivirus Datasheet	Optional	-	Full
Endpoint Protection Antivirus, HIPS, Device Control Datasheet	Optional	Optional	Optional

Choose to Extend Your Protection

Choose the accessories you need to protect your branch offices and deploy secure Wi-Fi too:

• Sophos RED Secure your branch offices by forwarding all traffic to the central Sophos UTM. Installation requires no technical training and there is no ongoing maintenance.

Security Applications:

Our Linux-based OS includes a free Essential Network Firewall. It provides fundamental security like firewalling, networking tools, routing and secure remote access. And our modular approach lets you add layers of protection as your needs evolve.

UTM Network Protection stops sophisticated attacks that a firewall alone can’t stop.

• Configurable intrusion protection system and flood protection against denial of service attacks
• Sophos RED, IPsec and SSL tunnels provide flexible site-to-site and remote-access VPN connections

UTM Email Protection stops spam and viruses and keeps sensitive data safe.

• Let users manage their spam quarantine and search a personalized mail log
• Keep infected emails out of your mailbox and protect confidential emails against illegitimate access.

UTM Web Protection lets you protect your employees from web threats and control their time online.

• Limit use of unwanted applications while giving priority to business critical resources
• Create dynamic reports on the fly to check if your policy is working and make adjustments

UTM Webserver Protection hardens web servers and apps ensuring compliance with a web application firewall.

• Protect personally identifiable information like credit card and social security numbers
• Inspects information submitted via forms on your websites to prevent server exploits

UTM Wireless Protection gives you secure Wi-Fi in minutes.

• Centrally manage access points through the UTM's built-in wireless controller
• Easily set up wireless hotspots and grant guest access with a simple voucher-based system

UTM Endpoint Protection provides desktops, laptops, and servers with antivirus, device and web control.

• Scans files, webpages and devices blocking or cleaning threats
• Device control reduces the risk of data loss and malware by managing removable devices
• Built-in URL filtering ensures users get the same level of web protection outside of the office as they do inside

Add modules when you need them

Documentation:

Download the Sophos SG Series Data Sheet (PDF).