Sophos XG 105
Unleash the full potential of your network

Features:

Network Protection

All the protection you need to stop sophisticated attacks and advanced threats while providing secure network access to those you trust.

Next-gen Intrusion Prevention System

Provides advanced protection from all types of modern attacks. It goes beyond traditional server and network resources to protect users and apps on the network as well.

Advanced Threat Protection

Instant identification and immediate response to today’s most sophisticated attacks. Multi-layered protection identifies threats instantly and Security Heartbeat™ provides an emergency response.

Security Heartbeat

Creates a link between your Sophos Central protected endpoints and your firewall to identify threats faster, simplify investigation and minimize impact from attacks. Easily incorporate Heartbeat status into firewall policies to automatically isolate compromised systems.

Advanced VPN technologies

Adds unique and simple VPN technologies including our clientless HTML5 self-service portal that makes remote access incredibly simple or utilize our exclusive light-weight secure RED (Remote Ethernet Device) VPN technology.

Web Protection

Comprehensive web protection and application control with powerful and flexible policy tools ensure your networked users are secure and productive.

Powerful user and group web policy

Provides enterprise-level Secure Web Gateway policy controls to easily manage sophisticated user and group web controls. Apply policies based upon uploaded web keywords indicating inappropriate use or behavior.

Advanced Web Threat Protection

Backed by SophosLabs, our advanced engine provides the ultimate protection from today’s polymorphic and obfuscated web threats. Innovative techniques like JavaScript emulation, behavioral analysis, and origin reputation help keep your network safe.

High performance transparent proxy

Optimized for top performance, our transparent proxy technology provides ultra-low latency inspection and HTTPS scanning of all traffic for threats and compliance.

Application Control and QoS

Enables user-aware visibility and control over thousands of applications with granular policy and traffic-shaping (QoS) options based on application category, risk, and other characteristics. Synchronized Application Control automatically identifies all the unknown, evasive, and custom application on your network.

Sandstorm Protection

Sophos Sandstorm uses next-gen cloud-sandbox technology to give your organization an essential layer of security against ransomware and zero-day attacks.

No Additional Hardware

It integrates with your XG Firewall and is cloud-delivered so there’s no additional hardware required. Sophos Sandstorm blocks evasive threats like ransomware, disguised as executables, PDFs, and Microsoft Office documents — sending them to a cloud-sandbox to be detonated and observed in a safe environment.

Better Protected, Better Informed

Threat intelligence is fed back to your XG Firewall and the file blocked or permitted. The process takes just a couple of minutes with minimal impact for the user. And Sandstorm gives you detailed threat reports for every incident so you know exactly what’s going on.

Email Protection

Full SMTP and POP message protection from spam, phishing and data loss with our unique all-in-one protection that combines policy-based email encryption with DLP and anti-spam.

Integrated Message Transfer Agent

Ensures always-on business continuity for your email, allowing the firewall to automatically queue mail in the event servers become unavailable.

Live Anti-Spam

Provides protection from the latest spam campaigns, phishing attacks, and malicious attachments.

Self-serve Quarantine

Gives employees direct control over their spam quarantine, saving you time and effort.

SPX Email Encryption

Unique to Sophos, SPX makes it easy to send encrypted email to anyone, even those without any kind of trust infrastructure using our patent-pending password-based encryption technology.

Data Loss Prevention

Policy based DLP can automatically trigger encryption or block/notify based on the presence of sensitive data in emails leaving the organization.

Web Server Protection

Harden your web servers and business applications against hacking attempts with a full-featured Web Application Firewall while providing secure access with reverse proxy authentication.

Business Application Policy Templates

Pre-defined policy templates let you protect common applications like Microsoft Exchange Outlook Anywhere or SharePoint quickly and easily.

Protection from the latest hacks and attacks

With a variety of advanced protection technologies including URL and form hardening, deep-linking and directory traversal prevention, SQL injection and cross-site scripting protection, cookie signing and more.

Reverse proxy

With authentication options, SSL offloading, and server load balancing ensure maximum protection and performance for your servers being accessed from the internet.

How to Buy:

Every XG Firewall comes equipped with Base Firewall functionality including IPSec, SSL VPN, and Wireless Protection. You can extend protection with our bundles or by adding protection modules individually.

A simple approach to comprehensive support

We build products that are simple yet comprehensive. And, we take the same approach with our support. With options ranging from basic technical support to those including direct access to senior support engineers and customized delivery.

Synchronized Security:

Security Heartbeat™ - Your firewall and your endpoints are finally talking

Sophos XG Firewall is the only network security solution that is able to fully identify the user and source of an infection on your network and automatically limit access to other network resources in response. This is made possible with our unique Sophos Security Heartbeat™ that shares telemetry and health status between Sophos endpoints and your firewall.

The good news is, this all happens automatically, and is successfully helping numerous businesses and organizations to save time and money in protecting their environments today.

Synchronized App Control - Revealing the unknown

Using Security Heartbeat we can do much more than just see the health status of an endpoint. We also have a solution to one of the biggest problems most network administrators face today - lack of visibility into network traffic.

Synchronized App Control automatically identifies, classifies and controls custom, evasive, and generic web applications which are currently going unidentified. Because these applications become visible, policies can also be applied to them, putting them fully under your control.

But there’s more..

Synchronized Security can connect much more than just your firewall and your endpoints. Using Sophos Central as our synchronized security platform, we are adding many more solutions to improve your protection.

Sophos XG Series Appliances – at a glance:

Our XG Series hardware appliances are purpose-built with the latest multi-core Intel technology, generous RAM provisioning, and solid-state storage. Whether you’re protecting a small business or a large datacenter, you’re getting industry leading performance.

Product Matrix

* 2nd Wi-Fi module option on 135w only (requires XG v17 MR6)

Sophos XG Firewall Value Bundles

For the ultimate in protection, value, and peace-of-mind, get one of our convenient Value Bundles.

XG 105(w), XG 115(w) Specifications:

These desktop firewall appliances offer an excellent price-to-performance ratio making them ideal for small businesses or branch offices. They are available with or without integrated 802.11ac wireless LAN, so you can even have an all-inone network security and hotspot solution without the need for additional hardware. Of course, you can also add external access points. With Intel multi-core technology designed for best performance and efficiency in a small form factor, these models come equipped with 4 GbE copper ports built-in and 1 shared SFP interface, e.g. for use with our optional DSL modem or an SFP Fiber transceiver to connect the device to a server or switch. An optional second power supply provides an unmatched redundancy option in this product segment.

¹ General: Max. throughput measured under ideal test conditions using SF-OS 17.0 with App-classification disabled using industry standard Spirent /Avalanche performance test and Ixia test tools. Actual performance may vary depending on network conditions and activated services.* SFP transceivers sold separately

Rackmount:

The RM-SR-T1 is a rack mount kit for the Sophos SG/XG 85, 105 & 115. The rack mount kit makes these Sophos models fit in a 19'' rack. The RM-SR-T1 has all the network connections from the rear on the front panel. The unit is 1.3U high. The total height is 2U with the additional supplied front plate. The RM-SR-T1 model is delivered in RAL 5010 (blue). Other colours can be delivered on project basis.

Documentation:

Download the Sophos XG Series Data Sheet (PDF).

Download the Sophos XG Series Sizing Guidelines (PDF).