Description XGS Series Next-Gen Firewall Appliances Distributed Edge: 1U Models Mid-sized and distributed organizations in need of a versatile solution to power and protect their network will be well-served with our 1U models. These rackmount firewalls offer excellent performance, a diverse range of high-speed interfaces built-in, and a choice of add-on connectivity modules. Whether your priority is ensuring maximum uptime for your SD-WAN links, securely connecting your remote users, or protecting the network in a growing organization, you can tailor them to your dynamic environment. All models are powered by a high-speed CPU plus a dedicated Xstream Flow Processor for hardware acceleration. Performance Test Methodology General Maximum throughput measured under ideal test conditions using industry standard Keysight-Ixia BreakingPoint test tools. Actual performance may vary depending on network conditions and activated services. Firewall Measured using HTTP traffic and 512 KB response size Firewall IMIX UDP throughput based on a combination of 66 byte, 570 byte and 1518 byte packet sizes IPS Measured with IPS with HTTP traffic using default IPS ruleset and 512 KB object size. IPsec VPN HTTP throughput using multiple tunnels and 512 KB HTTP response size TLS inspection Performance measured with IPS with HTTPS sessions and different cipher suites. Threat Protection Measured with Firewall, IPS, Application Control, and malware prevention enabled using HTTP 200 KB response size Sophos Switch Connectivity, Power, and Control XG Series Datasheet Connectivity at the LAN Edge The Sophos Switch Series provides secure, scalable Ethernet access for your wired and wireless devices and puts your LAN connectivity fully under your control. Devices, devices everywhere Many businesses have pieced together a colorful range of network equipment in an attempt to somehow make connectivity work amid rapidly changing requirements. Sophos switches provide a simple solution to connect an ever-increasing range of devices to your network. Segmentation for security A security approach to network segmentation often begins at your switch. Configure virtual local area networks (VLANs) to segment your internal traffic and reduce the attack surface in case of an infection or breach. Secure VLANs can prevent guest devices from adding risk and enhance security at the access layer. SMB and SD-Branch Ideal for remote and home offices, small and medium-sized businesses, retail outlets and branch offices, Sophos switches come in a range of sizes to suit the connectivity needs of many organizations. Product Highlights Dual processor architecture supports all key protection features without compromising performance A wide selection of copper and fiber ports plus various management interfaces are built-in on every model Fixed LAN bypass ports are on every model to support various deployment scenarios Modular Flexi Port expansion bay(s) on every model to adapt connectivity Second power supply option for all models Optional Power-over-Ethernet Flexi Port modules are centrally powered and so benefit from power redundancy when using the second power option Rackmount kit included Accessories Flexi Port Modules For all XGS 1U models Our 1U models come with one or more expansion bays to flexibly add to the diverse range of built-in interfaces on every box. Changes in your environment, your workforce, or your edge infrastructure may require additional fiber ports or a change in your connectivity. With Flexi Port modules, you have a cost-effective way to adapt your appliance, rather than having to purchase new hardware mid-term. Transceivers Sophos offers a range of transceivers to use in the SFP and SFP interfaces on your appliance or Flexi port module. A list of compatible third-party transceivers can be found in our knowledge base article. External Redundant Power Supply For XGS 2xxx, 3xxx, 4300 All of our 1U models offer an optional second power supply for redundancy. The external power supply can be connected to the rear of the appliance. When using this power supply with either the XGS 2100 or 2300, we suggest that you purchase rackmount rails (rather than using the rackmount ears supplied) for a more stable deployment in your data center. Internal Redundant Power Supply For XGS 4500 only The second power supply for the XGS 4500 provides a simple way to add redundancy to our most powerful 1U unit. For added reliability, the XGS 4500 also offers a second integrated SSD (RAID). XGS Series 1U Accessories Matrix Model Redundant Power Redundant SSD VDSL SFP Modem Flexi Port Bays Flexi Port Modules Rackmount Kit XGS 2100 optional external n/a optional 1 8 Port 1G copper 8 Port 1G SFP 4 Port 10G SFP 4 Port 1G copper bypass 4 port 1G copper PoE 4 port 1G copper 4 port 2.5G copper PoE 2 port GbE Fiber (LC) bypass 4 port GbE SFP Fiber Rackmount ears incl. Optional sliding rails XGS 2300 optional external n/a optional 1 Rackmount ears incl. Optional sliding rails XGS 3100 optional external n/a optional 1 Rackmount ears incl. Optional sliding rails XGS 3300 optional external n/a optional 1 Rackmount ears incl. Optional sliding rails XGS 4300 optional external n/a optional 2 Sliding rails included XGS 4500 optional internal included optional 2 Sliding rails included Resources DOWNLOADS Sophos Firewall and XGS Series Brochure What’s New in Sophos Firewall Sophos XG Series Hardware Brochure Sophos Firewall Solution Brief Sophos Firewall Feature List Firewall Buyers Guide Sophos Firewall and SD-WAN Making the Move to SD-WAN Firewall for Education Brochure Firewall Best Practices Whitepaper Five TLS Inspection Capabilities You Need Sophos Central Firewall Brochure VIDEOS Sophos XGS Series Overview What’s New: Sophos Firewall v19 Sophos Firewall: How it Works Central Firewall Reporting 5 Things to Look for in Your Next Firewall Synchronized Security Sophos Firewall: SD-WAN vs MPLS Sophos Firewall How-To Videos Central SD-WAN VPN Orchestration
