Sophos XGS Xstream Protection

Xstream TLS Inspection

Industry-leading performance, flexibility, and transparency into all encrypted traffic on your network. Inspect TLS 1.3 without breaking performance or user experience.

Xstream DPI Engine

Deep packet threat protection in a single streaming engine for AV, IPS, Web, App control, and TLS inspection. Process once, inspect everywhere.

Xstream Network FastPath

Automatic and policy-based intelligent offloading of trusted traffic processing at wire speed. Maximum throughput for known-good connections.

• Xstream TLS Inspection - TLS 1.3 inspection with prepackaged exceptions
• Xstream DPI Engine - Streaming deep-packet inspection
• IPS - Next-gen Intrusion Prevention
• ATP - Advanced Threat Protection
• Synchronized Security Heartbeat - Integration with Sophos Endpoints
• Clientless VPN - HTML5
• SD-RED VPN - Manage SD-RED devices

• Web Control - By user, group, category, URL, keyword
• Web Threat Protection - Malware, PUA, malicious JavaScript, pharming
• App Control - By user, group, category, risk, and more
• Synchronized App Control - Integration with Sophos endpoints
• Reporting - Extensive web and app reporting

• Zero-Day Threat Protection - Analyze unknown files using AI, ML, and sandboxing
• Powered by SophosLabs Intelix - Cloud-based intelligence and analysis
• Machine Learning - Multiple deep learning models
• Cloud Sandboxing - Dynamic runtime analysis of unknown files
• Reporting - Extensive threat intelligence analysis reporting

• Group Firewall Management - Synchronized policy across firewall groups
• Backup and Firmware Updates - Storage and scheduling
• Zero-Touch Deployment - For new firewalls from the cloud

• SD-WAN Orchestration - Point and click Site-to-Site VPN
• Cloud Firewall Reporting - Multi-firewall reporting with save, schedule, and export (30-day retention)
• XDR and MDR Connector - Support for XDR and MDR services

• 24/7 Support
• Feature Updates
• Advanced Replacement Hardware Warranty for term