Sophos XG 105
Unleash the full potential of your network

Sophos XG 105 Front and Back View

Sophos XG Series

XG 105 Base Appliance

XG 105 Appliance
- 4 GE ports, SSD + Base License (incl. FW, VPN & Wireless) + power cable

#XG1ATCHUS
Our Price: $440.00

XG 105 TotalProtect 24x7

XG TotalProtect includes: Appliance and FullGuard subscription (Network Protection, Web Protection, Email Protection, Webserver Protection and Enhanced Support)

XG 105 TotalProtect 24x7, 1-year

#XB1A1CSUS
Our Price: $638.00
Add to Cart to see price!

XG 105 TotalProtect 24x7, 2-year

#XB1A2CSUS
Our Price: $787.00
Add to Cart to see price!

XG 105 TotalProtect 24x7, 3-year

#XB1A3CSUS
Our Price: $915.00
Add to Cart to see price!

XG 105 EnterpriseProtect 24x7

XG EnterpriseProtect includes: Appliance and EnterpriseGuard subscription (Network Protection, Web Protection and Enhanced Support)

XG 105 EnterpriseProtect 24x7, 1-year

#NB1A1CSUS
Our Price: $593.00

XG 105 EnterpriseProtect 24x7, 2-year

#NB1A2CSUS
Our Price: $708.00

XG 105 EnterpriseProtect 24x7, 3-year

#NB1A3CSUS
Our Price: $808.00

Accessories

Rack Mount Kit for Sophos SG/XG 85, 105 & 115

#RM-SR-T1
List Price: $139.00
Our Price: $119.00

More pricing below, click here!

Overview:

Sophos XG Firewall takes an innovative approach across all areas of network security. From the way firewalls are managed, to the way they report information and how they work with other security systems around them, giving you an unprecedented level of simplicity, insight, and advanced threat protection.

With an interface designed to eliminate unnecessary complexity, it enables you to use the powerful features without needing to become an IT security expert.

Advanced protection kept simple

Most firewall products make you set up and manage policies across multiple modules or screens. Not Sophos. We provide a powerful unified policy model that allows you to manage, view, filter, and sort all your user, application and network policies on a single screen.

Potent, powerful … fast

You get all the next-gen firewall features you need plus features you can’t get anywhere else - including our revolutionary Security Heartbeat™, full web application firewall, and complete email anti-spam, encryption and DLP. No extra hardware. No extra cost. Simply choose what you want to deploy

On-box reports included as standard

With hundreds of built-in reports you’ll know exactly what’s happening with your users and your network. You get detailed reports as standard, stored locally with no separate tools required. And our unique User Threat Quotient reports show you which of your users are putting your security at risk.

More-in-one protection

We’ve engineered XG Firewall to deliver outstanding performance. Our appliances are built using Intel multi-core technology, solid-state drives, and accelerated in-memory content scanning. In addition Sophos FastPath packet optimization technology ensures you’ll always get maximum throughput.

Simply manage multiple firewalls

Sophos Firewall Manager provides a single console for the complete central management of multiple SF-OS firewalls. And if you also want to consolidate reporting across multiple SF-OS, Sophos UTM v9.x and Cyberoam OS appliances then with Sophos iView, you can.

Policy templates get you protected fast

Pre-defined policy templates let you protect common applications like Microsoft Exchange or SharePoint fast. Simply select them from a list, provide some basic information and the template takes care of the rest. It sets all the inbound/outbound firewall rules and security settings for you automatically - displaying the final policy in a statement in plain English.

Patented Layer-8 Identity control

User identity takes enforcement to a whole new layer with our patented Layer-8 identity based policy technology enabling user level controls over applications, bandwidth and other network resources regardless of IP-address, location, network or device. It literally takes firewall policy to a whole new layer

Flexible deployment, no compromise

Unlike our competitors whether you choose hardware, software, or virtual we don’t make you compromise - every feature is available on every model and form- factor

Automated user risk reports

The Sophos User Threat Quotient (UTQ) indicator is a unique feature which provides actionable intelligence on user behavior. Our firewall correlates each user’s surfing habits and activity with advanced threat triggers and history to identify users with risk-prone behavior.

A revolution in advanced threat protection - Sophos Security Heartbeat™

An industry first, our Security Heartbeat links your endpoints and your firewall to combine their intelligence and identify systems compromised by previously unknown threats. The Heartbeat status is integrated into security policy settings to instantly trigger actions at both endpoint and network levels to isolate or limit access until systems are healthy again. This feature requires Sophos Cloud Endpoint Protection Advanced or Sophos Cloud Enduser Protection.

Compare Models:

Our XG Series hardware appliances are purpose-built with the latest multi-core Intel technology, generous RAM provisioning, and solid-state storage. Whether you’re protecting a small business or a large datacenter, you’re getting industry leading performance.

Product Matrix

Model		Tech. Specs			Throughput
	Form Factor	Ports/Slots (Max Ports)	w-model 802.11 wireless	Swappable Components	Firewall (Mbps)	VPN (Mbps)	NGFW (Mbps)	AV-proxy (Mbps)
XG 85(w)	desktop	4	a/b/g/n	n/a	2000	200	235	330
XG 105(w)	desktop	4	a/b/g/n	n/a	3000	300	270	430
XG 115(w)	desktop	4	a/b/g/n	n/a	3,500	350	310	520
XG 125(w)	desktop	8	a/b/g/n/ac	n/a	5,000	410	360	590
XG 135(w)	desktop	8	a/b/g/n/ac	n/a	7,000	950	880	1,400
XG 210	1U	6/1 (14)	n/a	n/a	14,000	1,350	1,700	2,300
XG 230	1U	6/1 (14)	n/a	n/a	18,000	1,500	2,420	2,800
XG 310	1U	10/1 (18)	n/a	n/a	25,000	2,500	2,700	3,300
XG 330	1U	10/1 (18)	n/a	n/a	30,000	3,200	4,220	6,000
XG 430	1U	8/3 (24)	n/a	n/a	37,000	4,800	4,800	6,500
XG 450	1U	8/3 (24)	n/a	opt. Power	45,000	5,500	5,000	7,000
XG 550	2U	8/4 (32)	n/a	Power, SSD, Fan	65,000	8,400	9,000	10,000
XG 650	2U	8/6 (48)	n/a	Power, SSD, Fan	85,000	9,000	10,000	13,000
XG 750	2U	8/8 (64)	n/a	Power, SSD, Fan	100,000	11,000	11,800	17,000

Sophos XG Firewall TotalProtect Plus Bundle

For the ultimate in protection, value, and peace-of-mind, get our convenient TotalProtect Plus bundle.

What you get	TotalProtect Plus Bundle
Base Firewall Firewall, IPsec and SSL VPN, Wireless Protection (APs sold separately)
Network Protection IPS, RED, HTML5 VPN, ATP, Security Heartbeat
Web Protection Anti-malware, Web and App visibility, control, and protection
Email Protection Anti-spam, SPX Email Encryption, and DLP
Web Server Protection Web Application Firewall and reverse proxy
Sandstorm Protection next-gen cloud-sandbox technology
Enhanced Support 24x7 support, security and software updates, adv. exchange warranty
XG Series Hardware Appliance Multi-core Intel processor, solid-state storage, flexible connectivity

XG Firewall Features:

Sophos XG Firewall

Highlights

Purpose-built user interface with interactive control center
Optimized three-clicks-to-anywhere navigation
Policy Control Center Widget monitors policy activity for business, user and network policies and tracks unused, disabled, changed and new policies
New unified policy model enabling all business, user and network policies to be managed on a single screen with powerful filtering and search options
Policy Templates for common business applications like Microsoft Exchange, SharePoint, Lync, and much more defined in XML enabling customization and sharing.
Policy natural language descriptions and at- a-glance policy enforcement indicators
Custom IPS, Web, App, and Traffic Shapping (QoS) settings per user or network policy on a single screen
Layer-8 user identity awareness across key areas of the firewall
Sophos Security Heartbeat connecting Sophos endpoints with the Firewall to share health status and telemetry to enable instant identification of unhealty or compromised endpoints
Policy support for Sophos Security Heartbeat to automatically isolate or limit network access to compromised endpoints
User Threat Quotient for identifying risky users based on recent browsing behavior and ATP triggers
Application Risk Meter provides and overall risk factor based on the risk level of applications on the network
Configuration API for all features for RMM/PSA integration
Discover Mode (TAP mode) for seamless integration for trials and PoCs
Full-featured centralized management with Sophos Firewall Manager available as a hardware, software, or virtual appliance
New virtual and software licensing model based on CPU and Memory resources

Base Firewall

General Management

Purpose-built streamlined user interface
Three-clicks-to-anywhere navigation
Self-documenting menu system
Advanced trouble-shooting tools in GUI (e.g., Packet Capture)
High Availability (HA) support clustering two devices in active-active or active-passive mode.
Full command-line-interface (CLI) accessible from GUI
Role-based administration
Automated firmware update notification with easy automated update process and roll-back features
Reusable system object definitions for networks, services, hosts, time periods, users and groups, clients and servers
Self-service user portal
Configuration change tracking
Flexible device access control for services by zones
Email or SNMP trap notification options
SNMP and Netflow support
Central managment support from Sophos Firewall Manager or Sophos Cloud Firewall Manager
Backup and restore configurations: locally, via FTP or email; on-demand, daily, weekly or monthly
API for third party integration
Remote access option for Sophos Support
Cloud-based license management via MySophos

Firewall, Networking, and Routing

Stateful deep packet inspection firewall
FastPath Packet Optimization
User, group, time, or network based policies
Access time polices per user/group
Enforce policy across zones, networks, or by service type
Zone isolation and zone-based policy support.
Default zones for LAN, WAN, DMZ, LOCAL, VPN, and WiFi
Custom zones on LAN or DMZ
Customizable NAT policies with IP masquerading
Flood protection: DoS, DDoS and portscan blocking
Country blocking by geo-IP
Routing: static, multicast (PIM-SM) and dynamic (RIP, BGP, OSPF)
Upstream proxy support
Protocol independent multicast routing with IGMP snooping
Bridging with STP support and ARP broadcast forwarding
VLAN DHCP support and tagging
Multiple bridge support
WAN link balancing: multiple Internet connections, auto-link health check, automatic failover, automatic and weighted balancing, and granular multipath rules
Wireless WAN support (n/a in virtual deployments)
802.3ad interface link aggregation
Full configuration of DNS, DHCP and NTP
Dynamic DNS
IPv6 support with tunnelling support including 6in4, 6to4, 4in6, and IPv6 rapid deployment (6rd) through IPSec

Base Traffic Shaping and Quotas

Flexible network or user based traffic shaping (QoS) (enhanced Web and App traffic shaping options are included with the Web Protection Subscription)
Set user-based traffic quotas on upload/download or total traffic and cyclical or non-cyclical
Real-time VoIP optimization

Secure Wireless

Simple plug-and-play deployment of Sophos wireless access points (APs) — automatically appear on the firewall control center
Central monitor and manage all APs and wireless clients through the built-in wireless controller
Bridge APs to LAN, VLAN, or a separate zone with client isolation options
Multiple SSID support per radio including hidden SSIDs
Support for the latest security and encryption including WPA2 Personal and Enterprise
Support for IEEE 802.1X (RADIUS authentication)
Support for 802.11r (fast transition)
Hotspot support for (custom) vouchers, password of the day, or T&C acceptance
Wireless guest Internet access with walled garden options
Time-based wireless network access
Wireless repeating and bridging meshed network mode with supported APs
Automatic channel selection background optimization
Support for HTTPS login
Rogue AP detection

Authentication

Transparent, proxy authentication (NTLM/ Kerberos) or client authentication
Authentication via: Active Directory, eDirectory, RADIUS, LDAP and TACACS+
Server authentication agents for Active Directory SSO, STAS, SATC
Client authentication agents for Windows, Mac OS X, Linux 32/64
Authentication certificates for iOS and Android
Single sign-on: Active directory, eDirectory
Authentication services for IPSec, L2TP, PPTP, SSL
Captive Portal

User Self-Serve Portal

Download the Sophos Authentication Client
Download SSL remote access client (Windows) and configuration files (other OS)
Hotspot access information
Change user name and password
View personal internet usage
Access quarantined messages (requires Email Protection)

Base VPN Options

Site-to-site VPN: SSL, IPSec, 256- bit AES/3DES, PFS, RSA, X.509 certificates, pre-shared key
L2TP and PPTP
Remote access: SSL, IPsec, iPhone/iPad/ Cisco/Andriod VPN client support
SSL client for Windows and configuration download via user portal

IPSec Client (sold separately)

Authentication: Pre-Shared Key (PSK), PKI (X.509), Smartcards, Token and XAUTH
Encryption: AES (128/192/256), DES, 3DES (112/168), Blowfish, RSA (up to 2048 Bit), DH groups 1/2/5/14, MD5 and SHA-256/384/512
Intelligent split-tunneling for optimum traffic routing
NAT-traversal support
Client-monitor for graphical overview of connection status
Multilingual: German, English, and French

Sandstom Protection Subscription

Sandstorm Cloud Sandbox Protection

Full integration into your Sophos security solution dashboard
Inspects executables and documents containing executable content
Windows executables (including .exe, .com, and .dll)
Word documents (including .doc, .docx, docm and .rtf)
PDF documents
Archives containing any of the file types listed above
(ZIP, BZIP, GZIP, RAR, TAR, LHA/LZH, 7Z, Microsoft Cabinet)
Supports more than 20 file types
Dynamic malware behavior analysis runs files in real environments
In-depth malicious file reports and dashboard file release capability
Average analysis time less than 120 seconds
Flexible user and group policy options on file type, exclusions, and actions on analysis
Supports one-time download links

Network Protection Subscription

Intrusion Prevention (IPS)

High-performance, next-gen IPS deep packet inspection engine with selective IPS patterns for maximum performance and protection
Thousands of signatures
Support for custom IPS signatures
Flexible IPS policy deployment as part of any network or user policy with full customization

ATP and Security Heartbeat™

Advanced Threat Protection (Detect and block network traffic attempting to contact command and control servers using multi-layered DNS, AFC, and firewall)
Sophos Security Heartbeat™ instantly identifies compromised endpoints including the host, user, process, incident count, and time of compromise
Sophos Security Heartbeat™ policies can limit access to network resources or completely isolate compromised systems until they are cleaned up

Remote Ethernet Device (RED) VPN

Central Management of all RED devices
No configuration: Automatically connects through a cloud-based provisioning service
Secure encrypted tunnel using digital X.509 certificates and AES256-encryption
Virtual Ethernet for reliable transfer of all traffic between locations
IP address management with centrally defined DHCP and DNS Server configuration
Remotely de-authorize RED devices after a select period of inactivity
Compression of tunnel traffic
VLAN port configuration options (RED 50)

Clientless VPN

Sophos unique encrypted HTML5 self-service portal with support for RDP, HTTP, HTTPS, SSH, Telnet, and VNC

Web Protection Subscription

Web Protection and Control

Fully transparent proxy for anti- malware and web-filtering
Enhanced Advanced Threat Protection
URL Filter database with millions of sites across 92 categories, backed by SophosLabs
Surfing quota time policies per user/group
Access time polices per user/group
Malware scanning: block all forms of viruses, web malware, trojans, and spyware on HTTP/S, FTP and web-based email
Advanced web malware protection with JavaScript emulation
Live Protection real-time, in-the-cloud lookups for the latest threat intelligence
Second independent malware detection engine (Avira) for dual-scanning
Real-time or batch mode scanning
Pharming Protection
HTTP and HTTPS scanning and enforcement on any network and user policy with fully customizable rules and exceptions
SSL protocol tunnelling detection and enforcment
Certificate validation
High performance web content caching
Forced caching for Sophos Endpoint updates
File type filtering by mime-type, extension and active content types (e.g. Activex, applets, cookies, etc.)
YouTube for Schools enforcement
SafeSearch enforcement

Application Protection and Control

Enhanced application control with signatures and Layer 7 patterns for thousands of applications
Micro app discovery and control
Application control based on category, characteristics (e.g., bandwidth and productivity consuming), technology (e.g., P2P) and risk level
Per-user or network rule application control policy enforcement

Web and App Traffic Shaping

Enhanced traffic shaping (QoS) options by web category or application to limit or guarantee upload/download or total traffic priority and bitrate individually or shared

Email Protection Subscription

Email Protection and Control

E-mail scanning with SMTP, POP3, and IMAP support
Reputation service with spam outbreak monitoring based on patented Recurrent- Pattern-Detection technology
Block spam and malware during the SMTP transaction
Second independent malware detection engine (Avira) for dual-scanning
Live Protection real-time, in-the-cloud lookups for the latest threat intelligence
Automatic signature and pattern updates
File-Type detection/blocking/scanning of attachments
Accept, reject or drop over-sized messages
Detects phishing URLs within e-mails
Use pre-defined content scanning rules or create your own custom rules based on a variety of criteria
TLS Encryption support for SMTP, POP, and IMAP
Append signature automatically to all outbound messages
Email archiver

Email Quarantine Management

Spam quarantine digest and notifications options
Malware and spam quarantines with search and filter options by date, sender, recipient, subject, and reason with option to release and delete messages
Self-serve user portal for viewing and releasing quarantined messages

Email Encryption and DLP

Patent-pending SPX encryption for one-way message encryption
Recipient self-registration SPX password management
Add attachments to SPX secure replies
Completely transparent, no additional software or client required
DLP engine with automatic scanning of emails and attachments for sensitive data
Pre-packaged sensitive data type content control lists (CCLs) for PII, PCI, HIPAA, and more, maintained by SophosLabs

Web Server Protection Subscription

Web Application Firewall Protection

Reverse proxy
URL hardening engine with deep-linking and directory traversal prevention
Form hardening engine
SQL injection protection
Cross-site scripting protection
Dual-antivirus engines (Sophos and Avira)
HTTPS (SSL) encryption offloading
Cookie signing with digital signatures
Path-based routing
Outlook anywhere protocol support
Reverse authentication (offloading) for form-based and basic authentication for server access
Virtual server and physical server abstraction
Integrated load balancer spreads visitors across multiple servers
Skip individual checks in a granular fashion as required
Match requests from source networks or specified target URLs
Support for logical and/or operators
Assists compatibility with various configurations and non-standard deployments
Options to change Web Appliaction FIrewall performance parameters
Scan size limit option
Allow/Block IP ranges
Wildcard support for server paths
Automatically append a prefix/suffix for authentication

Logging and Reporting

NOTE: Individual log, report, and widget availability depends on enabled software subcriptions.

Hundreds of on-box reports with custom report options: Dashboards (Traffic, Security, and User Threat Quotient), Applications (App Risk, Blocked Apps, Search Engines, Web Servers, FTP), Network and Threats (IPS, ATP, Wireless, Security Heartbeat), VPN, Email, Compliance (HIPAA, GLBA, SOX, FISMA, PCI, NERC CIP v3, CIPA)
Current Activity Monitoring: system health, live users, IPsec connections, remote users, live connections, wireless clients, quarantine, and DoS attacks
Report anonymization
Report scheduling to multiple recipients by report group with flexible frequency options
Export reports as HTML, PDF, Excel (XLS)
Report bookmarks
Full log viewer with retention customization by category

XG Firewall Features by Subscription Summary

		FullGuard Plus
Features (as listed above)			FullGuard
Features (as listed above)			EnterpriseGuard
	Base Firewall	Sandstorm Protection	Network Protection	Web Protection	Email Protection	Web Server Protection
General Management (incl. HA)
Firewall, Networking and Routing
Base Traffic Shaping and Quotas
Secure Wireless
Authentication
Self-Serve User Portal
Base VPN Options
IPSec Client	Sold seperately
Sandstorm Protection
Intrusion Prevention (IPS)
ATP and Security Heartbeat™
Remote Ethernet Device (RED) VPN
Clientless VPN
Web Protection and Control
Application Protection and Control
Web and App Traffic Shaping
Email Protection and Control
Email Quarantine Management
Email Encryption and DLP
Web Application Firewall Protection
Logging and Reporting

Download the Sophos XG Firewall Features Data Sheet (PDF).

Specifications:

Based upon the award-winning Sophos SG Series, our XG Series firewalls come pre-loaded with the Sophos Firewall OS to provide optimal performance to meet today’s network security requirements.

XG Series 2U (Large Office / Data Center)	XG 550	XG 650	XG 750
Firewall throughput	65 Gbps	85 Gbps	100 Gbps
NGFW throughput	9 Gbps	10 Gbps	11.8 Gbps
VPN throughput	8.4 Gbps	9 Gbps	11 Gbps
IPS throughput	17 Gbps	20 Gbps	22 Gbps
Antivirus throughput (proxy)	10 Gbps	13 Gbps	17 Gbps
Ethernet interfaces	(8) GbE copper (default module)	(8) GbE copper (default module)	(8) GbE copper (default module)
FleXi port slots	4	6	8
FleXi port modules (optional)*	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+ 4 port 10 GE SFP+ 4 port SFP plus 4 port GE copper LAN bypass	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+ 4 port 10 GE SFP+ 4 port SFP plus 4 port GE copper LAN bypass	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+ 4 port 10 GE SFP+ 4 port SFP plus 4 port GE copper LAN bypass

XG Series 1U (Mid-size Office)	XG 210	XG 230	XG 310	XG 330	XG 430	XG 450
Firewall throughput	14 Gbps	18 Gbps	25 Gbps	30 Gbps	37 Gbps	45 Gbps
VPN throughput	1.35 Gbps	1.5 Gbps	2.5 Gbps	3.2 Gbps	4.8 Gbps	5.5 Gbps
IPS throughput	2.7 Gbps	4.2 Gbps	5.5 Gbps	8.5 Gbps	9 Gbps	10 Gbps
Antivirus throughput (proxy)	2.3 Gbps	2.8 Gbps	3.3 Gbps	6 Gbps	6.5 Gbps	7 Gbps
Ethernet interfaces	(6) GbE copper	(6) GbE copper	(8) GbE copper (2) GbE SFP	(8) GbE copper (2) GbE SFP	(8) GbE copper (default module)	(8) GbE copper (default module)
FleXi port slots	1	1	1	1	3	3
FleXi port modules (optional)*	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+ 4 port 10 GE SFP+ 4 port GE copper LAN bypass	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+ 4 port 10 GE SFP+ 4 port GE copper LAN bypass	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+ 4 port 10 GE SFP+ 4 port GE copper LAN bypass	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+ 4 port 10 GE SFP+ 4 port GE copper LAN bypass	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+ 4 port 10 GE SFP+ 4 port GE copper LAN bypass	8 port GE copper 8 port GE SFP 2 port 10 GE SFP+ 4 port 10 GE SFP+ 4 port GE copper LAN bypass

*Transceivers (mini GBICs) sold separately.

XG Series Desktop (Small Office)	XG 85/85w	XG 105/105w	XG 115/115w	XG 125/125w	XG 135/135w
Firewall throughput	2 Gbps	3 Gbps	3.5 Gbps	5 Gbps	7 Gbps
VPN throughput	200 Mbps	300 Mbps	350 Mbps	410 Mbps	950 Mbps
IPS throughput	510 Mbps	700 Mbps	900 Mbps	1 Gbps	1.75 Gbps
Antivirus throughput (proxy)	330 Mbps	430 Mbps	520 Mbps	590 Mbps	1.4 Gbps
Ethernet interfaces	(4) GbE copper	(4) GbE copper	(4) GbE copper	(8) GbE copper	(8) GbE copper
Wireless standards (w models only)	802.11a/b/g/n 2.4 or 5 GHz	802.11a/b/g/n 2.4 or 5 GHz	802.11a/b/g/n 2.4 or 5 GHz	802.11a/b/g/n/ac 2.4 or 5 GHz	802.11a/b/g/n/ac 2.4 or 5 GHz
Number of antennas	2	3	3	3	3
Number of radios	1	1	1	1	1
MIMO capabilities	2x2:2	3x3:3	3x3:3	3x3:3	3x3:3

How to Buy:

Every appliance comes with our Base Firewall as standard which includes IPSec and SSL VPN and comprehensive Wireless Protection. You can extend protection with our total protection bundles or by adding protection modules individually.

Network Protection	Wireless Protection	Web Protection
All the protection you need to stop sophisticated attacks and advanced threats while providing secure network access to those you trust.	Set up, manage and secure wireless networks in just minutes with the UTM’s built-in wireless controller that works with our full range of wireless access points.	Comprehensive protection from the latest web threats and powerful policy tools ensures your users are secure and productive online.
Security Heartbeat™	Email Protection	Web Server Protection
Links your Sophos endpoints with your firewall to deliver unparalleled protection from advanced threats and reduce the time and complexity of responding to security incidents.	Full SMTP and POP message protection from spam, phishing and data loss with our unique all-in-one protection that combines policy-based email encryption with DLP and anti-spam.	Harden your web servers and business applications against hacking attempts while providing secure access to external users with reverse proxy authentication.

A simple approach to comprehensive support

We build products that are simple yet comprehensive. And, we take the same approach with our support. With options ranging from basic technical support to those including direct access to senior support engineers and customized delivery.

Licenses Names	Standard Included with purchase	Enhanced Included in all bundles	Enhanced Plus
Support Via telephone and email	For 90 days (business hours only)	Included (24x7)	VIP Access (24x7)
Security Updates & Patches For the life of the product	Included with an active software subscription	Included with an active software subscription	Included with an active software subscription
Software Feature Updates & Upgrades	Included 90-days	Included	Included
Consulting Remote consultation on your firewall configuration and security with a Sophos Senior Technical Support Engineer			Included (up to 4 hours)
Warranty and RMA For all hardware appliances	1 year (return / replace)	Advance Exchange (max. 5 years)	Advance Exchange (max. 5 years)
Technical Account Manager Dedicated named technical account manager		Optional (extra cost)	Optional (extra cost)
Endpoint Protection Antivirus, HIPS, Device Control	Yes	Optional	Optional

Rackmount:

RM-SR-T1

List Price: $139.00
Our Price: $119.00

The RM-SR-T1 is a rack mount kit for the Sophos SG/XG 85, 105 & 115. The rack mount kit makes these Sophos models fit in a 19'' rack. The RM-SR-T1 has all the network connections from the rear on the front panel. The unit is 1.3U high. The total height is 2U with the additional supplied front plate. The RM-SR-T1 model is delivered in RAL 5010 (blue). Other colours can be delivered on project basis.

Specifications
Color	RAL 5010 Gentian Blue
Height	1.3U 2U with the supplied front plate
Dimensions (height x width x depth)	59 x 482 x 217mm
Number of connections brought to the front	5
Console port to the front	Yes
Cables	5x 0.5m cables
Couplers	5x RJ45 couplers
Supported Models	- Sophos SG/XG 85 - Sophos SG/XG 105 - Sophos SG/XG 115
What's in the box	- 1x SoRack + RJ45 couplers - 1x Rackmount.IT front plate - Cables - Assembly materials - Installation guide
EAN	8718868918338
UPC	852754006339

Documentation:

Download the Sophos XG Series Data Sheet (PDF).

Download the Sophos XG Series Sizing Guidelines (PDF).

Pricing Notes:

If your existing XG appliance does not have an active subscription or license, you will need to purchase a new license.
If you currently have an active subscription with an existing SG appliance, you can renew that subscription license by purchasing the renewal.
AP warranty is not included for the XG Wireless Subscriptions and will need to be purchased separately
Pricing and product availability subject to change without notice.
XG TotalProtect
Includes: Appliance and FullGuard subscription (Network Protection, Web Protection, Email Protection, Webserver Protection and Enhanced Support)
XG TotalProtect Plus
Include Appliance, FullGuard Plus subscription (Network Protection, Web Protection, Email Protection, Webserver Protection, Enhanced Support and Sandstorm)
XG EnterpriseProtect
Includes: Appliance and EnterpriseGuard subscription (Network Protection, Web Protection and Enhanced Support)
XG EnterpriseGuard
Includes: Network Protection, Web Protection and Enhanced Support
XG FullGuard
Includes Network Protection, Web Protection, Email Protection, Webserver Protection and Enhanced Support
XG FullGuard Plus
Includes Network Protection, Web Protection, Email Protection, Webserver Protection, Enhanced Support and Sandstorm
Security Heartbeat functionality is available when XG Firewall Network Protection, EnterpriseGuard or FullGuard subscription is used in conjunction with Central Endpoint Advanced, Cloud Enduser Protection and Intercept X licences.

Sophos XG 105 Series

XG 105 Base Appliance

XG 105 Appliance
- 4 GE ports, SSD + Base License (incl. FW, VPN & Wireless) + power cable

#XG1ATCHUS
Our Price: $440.00

XG 105 TotalProtect 24x7

XG TotalProtect includes: Appliance and FullGuard subscription (Network Protection, Web Protection, Email Protection, Webserver Protection and Enhanced Support)

XG 105 TotalProtect 24x7, 1-year

#XB1A1CSUS
Our Price: $638.00
Add to Cart to see price!

XG 105 TotalProtect 24x7, 2-year

#XB1A2CSUS
Our Price: $787.00
Add to Cart to see price!

XG 105 TotalProtect 24x7, 3-year

#XB1A3CSUS
Our Price: $915.00
Add to Cart to see price!

XG 105 EnterpriseProtect 24x7

XG EnterpriseProtect includes: Appliance and EnterpriseGuard subscription (Network Protection, Web Protection and Enhanced Support)

XG 105 EnterpriseProtect 24x7, 1-year

#NB1A1CSUS
Our Price: $593.00

XG 105 EnterpriseProtect 24x7, 2-year

#NB1A2CSUS
Our Price: $708.00

XG 105 EnterpriseProtect 24x7, 3-year

#NB1A3CSUS
Our Price: $808.00

XG 105 TotalProtect Plus 24x7

XG TotalProtect Plus includes Appliance, FullGuard Plus subscription (Network Protection, Web Protection, Email Protection, Webserver Protection, Enhanced Support and Sandstorm)

XG 105 TotalProtect Plus, 1-year (US power cord)

#XP1A1CSUS
Our Price: $693.00
Add to Cart to see price!

XG 105 TotalProtect Plus, 2-year (US power cord)

#XP1A2CSUS
Our Price: $884.00
Add to Cart to see price!

XG 105 TotalProtect Plus, 3-year (US power cord)

#XP1A3CSUS
Our Price: $1,048.00
Add to Cart to see price!

Sophos XG 105 Subscriptions

XG 105 FullGuard Subscription with 24x7 Support - New License

XG FullGuard includes Network Protection, Web Protection, Email Protection, Webserver Protection and Enhanced Support

For new purchases only

XG 105 FullGuard Subscription with 24x7 Support, 1 Year
*For new purchases only.

#XF1A1CSEA
Our Price: $220.00

XG 105 FullGuard Subscription with 24x7 Support, 2 Years
*For new purchases only.

#XF1A2CSEA
Our Price: $385.00

XG 105 FullGuard Subscription with 24x7 Support, 3 Years
*For new purchases only.

#XF1A3CSEA
Our Price: $528.00

XG 105 FullGuard Plus with Enhanced Support 24x7

XG FullGuard Plus includes Network Protection, Web Protection, Email Protection, Webserver Protection, Enhanced Support and Sandstorm

XG 105 FullGuard Plus with Enhanced Support - 1 Year

#XF1A1CSES
Our Price: $275.00

XG 105 FullGuard Plus with Enhanced Support - 2 Year

#XF1A2CSES
Our Price: $482.00

XG 105 FullGuard Plus with Enhanced Support - 3 Year

#XF1A3CSES
Our Price: $661.00

XG 105 EnterpriseGuard Subscription - New License

XG EnterpriseGuard includes: Network Protection, Web Protection and Enhanced Support

For new purchases only

XG 105 EnterpriseGuard Subscription, 1 Year
*For new purchases only.

#NG1A1CSEA
Our Price: $170.00

XG 105 EnterpriseGuard Subscription, 2 Years
*For new purchases only.

#NG1A2CSEA
Our Price: $298.00

XG 105 EnterpriseGuard Subscription, 3 Years
*For new purchases only.

#NG1A3CSEA
Our Price: $409.00

XG 105 Network Protection - New License

XG 105 Network Protection, 1 Year
*For new purchases only.

#XN1A1CSAA
Our Price: $43.00

XG 105 Network Protection, 2 Years
*For new purchases only.

#XN1A2CSAA
Our Price: $75.00

XG 105 Network Protection, 3 Years
*For new purchases only.

#XN1A3CSAA
Our Price: $102.00

XG 105 Web Protection - New License

XG 105 Web Protection, 1 Year
*For new purchases only.

#XB1A1CSAA
Our Price: $77.00

XG 105 Web Protection, 2 Years
*For new purchases only.

#XB1A2CSAA
Our Price: $134.00

XG 105 Web Protection, 3 Years
*For new purchases only.

#XB1A3CSAA
Our Price: $184.00

XG 105 Email Protection - New License

XG 105 Email Protection, 1 Year
*For new purchases only.

#XM1A1CSAA
Our Price: $62.00

XG 105 Email Protection, 2 Year
*For new purchases only.

#XM1A2CSAA
Our Price: $108.00

XG 105 Email Protection, 3 Year
*For new purchases only.

#XM1A3CSAA
Our Price: $148.00

XG 105 Webserver Protection - New License

XG 105 Webserver Protection, 1 Year
*For new purchases only.

#XS1A1CSAA
Our Price: $61.00

XG 105 Webserver Protection, 2 Years
*For new purchases only.

#XS1A2CSAA
Our Price: $106.00

XG 105 Webserver Protection, 3 Years
*For new purchases only.

#XS1A3CSAA
Our Price: $146.00

XG 105 Sandstorm ransomware and advanced persistent threat (APT) Protection - New License

XG 105 Sandstorm Protection, 1 Year
*For new purchases only.

#SX1A1CSAA
Our Price: $62.00

XG 105 Sandstorm Protection, 2 Years
*For new purchases only.

#SX1A2CSAA
Our Price: $108.00

XG 105 Sandstorm Protection, 3 Years
*For new purchases only.

#SX1A3CSAA
Our Price: $148.00

Sophos XG 105 Subscription Renewals

XG 105 FullGuard Subscription with 24x7 Support - Renewal

XG FullGuard includes Network Protection, Web Protection, Email Protection, Webserver Protection and Enhanced Support

For new purchases only

XG 105 FullGuard Subscription with 24x7 Support, 1 Year - Renewal

#XF1A1CTEA
Our Price: $209.00

XG 105 FullGuard Subscription with 24x7 Support, 2 Years - Renewal

#XF1A2CTEA
Our Price: $366.00

XG 105 FullGuard Subscription with 24x7 Support, 3 Years - Renewal

#XF1A3CTEA
Our Price: $502.00

XG 105 FullGuard Plus Subscription with 24x7 Support - Renewal

XG FullGuard Plus includes Network Protection, Web Protection, Email Protection, Webserver Protection, Enhanced Support and Sandstorm

XG 105 FullGuard Plus with Enhanced Support - 1 Year - RENEWAL

#XF1A1CTES
Our Price: $262.00

XG 105 FullGuard Plus with Enhanced Support - 2 Year - RENEWAL

#XF1A2CTES
Our Price: $458.00

XG 105 FullGuard Plus with Enhanced Support - 3 Year - RENEWAL

#XF1A3CTES
Our Price: $628.00

XG 105 EnterpriseGuard Subscription - Renewal

XG EnterpriseGuard includes: Network Protection, Web Protection and Enhanced Support

For new purchases only

XG 105 EnterpriseGuard Subscription, 1 Year - Renewal

#NG1A1CTEA
Our Price: $162.00

XG 105 EnterpriseGuard Subscription, 2 Years - Renewal

#NG1A2CTEA
Our Price: $283.00

XG 105 EnterpriseGuard Subscription, 3 Years - Renewal

#NG1A3CTEA
Our Price: $389.00

XG 105 Network Protection - Renewal

XG 105 Network Protection, 1 Year - Renewal

#XN1A1CTAA
Our Price: $41.00

XG 105 Network Protection, 2 Years - Renewal

#XN1A2CTAA
Our Price: $71.00

XG 105 Network Protection, 3 Years - Renewal

#XN1A3CTAA
Our Price: $97.00

XG 105 Web Protection - Renewal

XG 105 Web Protection, 1 Year - Renewal

#XB1A1CTAA
Our Price: $73.00

XG 105 Web Protection, 2 Years - Renewal

#XB1A2CTAA
Our Price: $128.00

XG 105 Web Protection, 3 Years - Renewal

#XB1A3CTAA
Our Price: $175.00

XG 105 Email Protection - Renewal

XG 105 Email Protection, 1 Year - Renewal

#XM1A1CTAA
Our Price: $59.00

XG 105 Email Protection, 2 Year - Renewal

#XM1A2CTAA
Our Price: $103.00

XG 105 Email Protection, 3 Year - Renewal

#XM1A3CTAA
Our Price: $141.00

XG 105 Webserver Protection - Renewal

XG 105 Webserver Protection, 1 Year - Renewal

#XS1A1CTAA
Our Price: $58.00

XG 105 Webserver Protection, 2 Years - Renewal

#XS1A2CTAA
Our Price: $101.00

XG 105 Webserver Protection, 3 Years - Renewal

#XS1A3CTAA
Our Price: $138.00

XG 105 Sandstorm ransomware and advanced persistent threat (APT) defense solution - Renewal

XG 105 Sandstorm Protection, 1 Year - Renewal

#SX1A1CTAA
Our Price: $59.00

XG 105 Sandstorm Protection, 2 Years - Renewal

#SX1A2CTAA
Our Price: $102.00

XG 105 Sandstorm Protection, 3 Years - Renewal

#SX1A3CTAA
Our Price: $140.00

Sophos XG 105 Enhanced Support

XG 105 Enhanced Plus Support

For new purchases only

XG 105 Enhanced Plus Support, 1 Year

#EP1A1CEAA
Our Price: $109.00

XG 105 Enhanced Plus Support, 1 Year - RENEWAL

#EP1A1CFAA
Our Price: $103.00

XG 105 Enhanced Plus Support, 2 Years

#EP1A2CEAA
Our Price: $191.00

XG 105 Enhanced Plus Support, 2 Years - RENEWAL

#EP1A2CFAA
Our Price: $181.00

XG 105 Enhanced Plus Support, 3 Years

#EP1A3CEAA
Our Price: $261.00

XG 105 Enhanced Plus Support, 3 Years - RENEWAL

#EP1A3CFAA
Our Price: $248.00

XG 105 Enhanced Support

For new purchases only

XG 105 Enhanced Support, 1 Year

#EN1A1CEAA
Our Price: $66.00

XG 105 Enhanced Support, 1 Year - RENEWAL

#EN1A1CFAA
Our Price: $63.00

XG 105 Enhanced Support, 2 Years

#EN1A2CEAA
Our Price: $116.00

XG 105 Enhanced Support, 2 Years - RENEWAL

#EN1A2CFAA
Our Price: $110.00

XG 105 Enhanced Support, 3 Years

#EN1A3CEAA
Our Price: $158.00

XG 105 Enhanced Support, 3 Years - RENEWAL

#EN1A3CFAA
Our Price: $150.00

XG 105 Enhanced to Enhanced Plus Support Upgrade

XG 105 Enhanced to Enhanced Plus Support Upgrade, 1 Year

#EP1A1CEUP
Our Price: $43.00

XG 105 Enhanced to Enhanced Plus Support Upgrade, 1 Year - RENEWAL

#EP1A1CFUP
Our Price: $41.00

XG 105 Enhanced to Enhanced Plus Support Upgrade, 2 Years

#EP1A2CEUP
Our Price: $75.00

XG 105 Enhanced to Enhanced Plus Support Upgrade, 2 Years - RENEWAL

#EP1A2CFUP
Our Price: $71.00

XG 105 Enhanced to Enhanced Plus Support Upgrade, 3 Years

#EP1A3CEUP
Our Price: $103.00

XG 105 Enhanced to Enhanced Plus Support Upgrade, 3 Years - RENEWAL

#EP1A3CFUP
Our Price: $98.00

Sophos XG 105 Accessories

Rackmount Kit

Sophos XG 105(w) Rackmount Kit

#RMEZTCH1A
Our Price: $80.00

Rack Mount Kit for Sophos SG/XG 85, 105 & 115

#RM-SR-T1
List Price: $139.00
Our Price: $119.00

Sophos XG 105 Unleash the full potential of your network

Overview:

Advanced protection kept simple

Potent, powerful … fast

On-box reports included as standard

More-in-one protection

Simply manage multiple firewalls

Policy templates get you protected fast

Patented Layer-8 Identity control

Flexible deployment, no compromise

Automated user risk reports

A revolution in advanced threat protection - Sophos Security Heartbeat™

Compare Models:

Sophos XG Firewall TotalProtect Plus Bundle

XG Firewall Features:

Sophos XG Firewall

Base Firewall

Sandstom Protection Subscription

Network Protection Subscription

Web Protection Subscription

Email Protection Subscription

Web Server Protection Subscription

Logging and Reporting

XG Firewall Features by Subscription Summary

Specifications:

How to Buy:

Network Protection

Wireless Protection

Web Protection

Security Heartbeat™

Email Protection

Web Server Protection

A simple approach to comprehensive support

Rackmount:

RM-SR-T1

Documentation:

Sophos XG 105 Series

Sophos XG 105 Subscriptions

Sophos XG 105 Subscription Renewals

Sophos XG 105 Enhanced Support

Sophos XG 105 Accessories

Sophos XG 105
Unleash the full potential of your network