Call a Specialist Today! 888-785-4405

Sophos XG 310
Unleash the full potential of your network

Sophos XG 310 Front and Back View

Sophos XG Series
XG 310 Base Appliance
XG 310 HW Appliance
- 8 GE ports, 1 expansion bay for optional FleXi Port module, 2 SFP ports, SSD + Base License (incl. FW, VPN & Wireless) for unlimited users + power cable
#XG31TCHUS
Our Price: $2,995.00
XG 310 TotalProtect 24x7
XG TotalProtect includes: Appliance and FullGuard subscription (Network Protection, Web Protection, Email Protection, Webserver Protection and Enhanced Support)
XG 310 TotalProtect 24x7, 1-year
#XB311CSUS
Our Price: $5,825.00
Add to Cart to see price!
XG 310 TotalProtect 24x7, 2-year
#XB312CSUS
Our Price: $7,948.00
Add to Cart to see price!
XG 310 TotalProtect 24x7, 3-year
#XB313CSUS
Our Price: $9,788..00
Add to Cart to see price!
XG 310 EnterpriseProtect 24x7
XG EnterpriseProtect includes: Appliance and EnterpriseGuard subscription (Network Protection, Web Protection and Enhanced Support)
XG 310 EnterpriseProtect 24x7, 1-year
#NB311CSUS
Our Price: $5,045.00
XG 310 EnterpriseProtect 24x7, 2-year
#NB312CSUS
Our Price: $6,582.00
XG 310 EnterpriseProtect 24x7, 3-year
#NB313CSUS
Our Price: $7,914.00

More pricing below, click here!

Overview:

Sophos XG Firewall takes an innovative approach across all areas of network security. From the way firewalls are managed, to the way they report information and how they work with other security systems around them, giving you an unprecedented level of simplicity, insight, and advanced threat protection.

With an interface designed to eliminate unnecessary complexity, it enables you to use the powerful features without needing to become an IT security expert.

Advanced protection kept simple

Most firewall products make you set up and manage policies across multiple modules or screens. Not Sophos. We provide a powerful unified policy model that allows you to manage, view, filter, and sort all your user, application and network policies on a single screen.

Potent, powerful … fast

You get all the next-gen firewall features you need plus features you can’t get anywhere else - including our revolutionary Security Heartbeat™, full web application firewall, and complete email anti-spam, encryption and DLP. No extra hardware. No extra cost. Simply choose what you want to deploy

On-box reports included as standard

With hundreds of built-in reports you’ll know exactly what’s happening with your users and your network. You get detailed reports as standard, stored locally with no separate tools required. And our unique User Threat Quotient reports show you which of your users are putting your security at risk.

More-in-one protection

We’ve engineered XG Firewall to deliver outstanding performance. Our appliances are built using Intel multi-core technology, solid-state drives, and accelerated in-memory content scanning. In addition Sophos FastPath packet optimization technology ensures you’ll always get maximum throughput.

Simply manage multiple firewalls

Sophos Firewall Manager provides a single console for the complete central management of multiple SF-OS firewalls. And if you also want to consolidate reporting across multiple SF-OS, Sophos UTM v9.x and Cyberoam OS appliances then with Sophos iView, you can.

Policy templates get you protected fast

Pre-defined policy templates let you protect common applications like Microsoft Exchange or SharePoint fast. Simply select them from a list, provide some basic information and the template takes care of the rest. It sets all the inbound/outbound firewall rules and security settings for you automatically - displaying the final policy in a statement in plain English.

Patented Layer-8 Identity control

User identity takes enforcement to a whole new layer with our patented Layer-8 identity based policy technology enabling user level controls over applications, bandwidth and other network resources regardless of IP-address, location, network or device. It literally takes firewall policy to a whole new layer

Flexible deployment, no compromise

Unlike our competitors whether you choose hardware, software, or virtual we don’t make you compromise - every feature is available on every model and form- factor

Automated user risk reports

The Sophos User Threat Quotient (UTQ) indicator is a unique feature which provides actionable intelligence on user behavior. Our firewall correlates each user’s surfing habits and activity with advanced threat triggers and history to identify users with risk-prone behavior.

A revolution in advanced threat protection - Sophos Security Heartbeat™

An industry first, our Security Heartbeat links your endpoints and your firewall to combine their intelligence and identify systems compromised by previously unknown threats. The Heartbeat status is integrated into security policy settings to instantly trigger actions at both endpoint and network levels to isolate or limit access until systems are healthy again. This feature requires Sophos Cloud Endpoint Protection Advanced or Sophos Cloud Enduser Protection.

XG Firewall Overview

Compare Models:

Our XG Series hardware appliances are purpose-built with the latest multi-core Intel technology, generous RAM provisioning, and solid-state storage. Whether you’re protecting a small business or a large datacenter, you’re getting industry leading performance.

Product Matrix


Model   Tech. Specs Throughput
  Form Factor Ports/Slots (Max Ports) w-model 802.11 wireless Swappable Components Firewall (Mbps) VPN (Mbps) NGFW (Mbps) AV-proxy (Mbps)
XG 85(w) desktop 4 a/b/g/n n/a 2000 200 235 330
XG 105(w) desktop 4 a/b/g/n n/a 3000 300 270 430
XG 115(w) desktop 4 a/b/g/n n/a 3,500 350 310 520
XG 125(w) desktop 8 a/b/g/n/ac n/a 5,000 410 360 590
XG 135(w) desktop 8 a/b/g/n/ac n/a 7,000 950 880 1,400
XG 210 1U 6/1 (14) n/a n/a 14,000 1,350 1,700 2,300
XG 230 1U 6/1 (14) n/a n/a 18,000 1,500 2,420 2,800
XG 310 1U 10/1 (18) n/a n/a 25,000 2,500 2,700 3,300
XG 330 1U 10/1 (18) n/a n/a 30,000 3,200 4,220 6,000
XG 430 1U 8/3 (24) n/a n/a 37,000 4,800 4,800 6,500
XG 450 1U 8/3 (24) n/a opt. Power 45,000 5,500 5,000 7,000
XG 550 2U 8/4 (32) n/a Power, SSD, Fan 65,000 8,400 9,000 10,000
XG 650 2U 8/6 (48) n/a Power, SSD, Fan 85,000 9,000 10,000 13,000
XG 750 2U 8/8 (64) n/a Power, SSD, Fan 100,000 11,000 11,800 17,000

Sophos XG Firewall TotalProtect Plus Bundle

For the ultimate in protection, value, and peace-of-mind, get our convenient TotalProtect Plus bundle.

What you get TotalProtect Plus Bundle
Base Firewall Firewall, IPsec and SSL VPN, Wireless Protection (APs sold separately)
Network Protection IPS, RED, HTML5 VPN, ATP, Security Heartbeat
Web Protection Anti-malware, Web and App visibility, control, and protection
Email Protection Anti-spam, SPX Email Encryption, and DLP
Web Server Protection Web Application Firewall and reverse proxy
Sandstorm Protection next-gen cloud-sandbox technology
Enhanced Support 24x7 support, security and software updates, adv. exchange warranty
XG Series Hardware Appliance Multi-core Intel processor, solid-state storage, flexible connectivity

XG Firewall Features:

Sophos XG Firewall

Highlights

  • Purpose-built user interface with interactive control center
  • Optimized three-clicks-to-anywhere navigation
  • Policy Control Center Widget monitors policy activity for business, user and network policies and tracks unused, disabled, changed and new policies
  • New unified policy model enabling all business, user and network policies to be managed on a single screen with powerful filtering and search options
  • Policy Templates for common business applications like Microsoft Exchange, SharePoint, Lync, and much more defined in XML enabling customization and sharing.
  • Policy natural language descriptions and at- a-glance policy enforcement indicators
  • Custom IPS, Web, App, and Traffic Shapping (QoS) settings per user or network policy on a single screen
  • Layer-8 user identity awareness across key areas of the firewall
  • Sophos Security Heartbeat connecting Sophos endpoints with the Firewall to share health status and telemetry to enable instant identification of unhealty or compromised endpoints
  • Policy support for Sophos Security Heartbeat to automatically isolate or limit network access to compromised endpoints
  • User Threat Quotient for identifying risky users based on recent browsing behavior and ATP triggers
  • Application Risk Meter provides and overall risk factor based on the risk level of applications on the network
  • Configuration API for all features for RMM/PSA integration
  • Discover Mode (TAP mode) for seamless integration for trials and PoCs
  • Full-featured centralized management with Sophos Firewall Manager available as a hardware, software, or virtual appliance
  • New virtual and software licensing model based on CPU and Memory resources

Base Firewall

General Management

  • Purpose-built streamlined user interface
  • Three-clicks-to-anywhere navigation
  • Self-documenting menu system
  • Advanced trouble-shooting tools in GUI (e.g., Packet Capture)
  • High Availability (HA) support clustering two devices in active-active or active-passive mode.
  • Full command-line-interface (CLI) accessible from GUI
  • Role-based administration
  • Automated firmware update notification with easy automated update process and roll-back features
  • Reusable system object definitions for networks, services, hosts, time periods, users and groups, clients and servers
  • Self-service user portal
  • Configuration change tracking
  • Flexible device access control for services by zones
  • Email or SNMP trap notification options
  • SNMP and Netflow support
  • Central managment support from Sophos Firewall Manager or Sophos Cloud Firewall Manager
  • Backup and restore configurations: locally, via FTP or email; on-demand, daily, weekly or monthly
  • API for third party integration
  • Remote access option for Sophos Support
  • Cloud-based license management via MySophos

Firewall, Networking, and Routing

  • Stateful deep packet inspection firewall
  • FastPath Packet Optimization
  • User, group, time, or network based policies
  • Access time polices per user/group
  • Enforce policy across zones, networks, or by service type
  • Zone isolation and zone-based policy support.
  • Default zones for LAN, WAN, DMZ, LOCAL, VPN, and WiFi
  • Custom zones on LAN or DMZ
  • Customizable NAT policies with IP masquerading
  • Flood protection: DoS, DDoS and portscan blocking
  • Country blocking by geo-IP
  • Routing: static, multicast (PIM-SM) and dynamic (RIP, BGP, OSPF)
  • Upstream proxy support
  • Protocol independent multicast routing with IGMP snooping
  • Bridging with STP support and ARP broadcast forwarding
  • VLAN DHCP support and tagging
  • Multiple bridge support
  • WAN link balancing: multiple Internet connections, auto-link health check, automatic failover, automatic and weighted balancing, and granular multipath rules
  • Wireless WAN support (n/a in virtual deployments)
  • 802.3ad interface link aggregation
  • Full configuration of DNS, DHCP and NTP
  • Dynamic DNS
  • IPv6 support with tunnelling support including 6in4, 6to4, 4in6, and IPv6 rapid deployment (6rd) through IPSec

Base Traffic Shaping and Quotas

  • Flexible network or user based traffic shaping (QoS) (enhanced Web and App traffic shaping options are included with the Web Protection Subscription)
  • Set user-based traffic quotas on upload/download or total traffic and cyclical or non-cyclical
  • Real-time VoIP optimization

Secure Wireless

  • Simple plug-and-play deployment of Sophos wireless access points (APs) — automatically appear on the firewall control center
  • Central monitor and manage all APs and wireless clients through the built-in wireless controller
  • Bridge APs to LAN, VLAN, or a separate zone with client isolation options
  • Multiple SSID support per radio including hidden SSIDs
  • Support for the latest security and encryption including WPA2 Personal and Enterprise
  • Support for IEEE 802.1X (RADIUS authentication)
  • Support for 802.11r (fast transition)
  • Hotspot support for (custom) vouchers, password of the day, or T&C acceptance
  • Wireless guest Internet access with walled garden options
  • Time-based wireless network access
  • Wireless repeating and bridging meshed network mode with supported APs
  • Automatic channel selection background optimization
  • Support for HTTPS login
  • Rogue AP detection

Authentication

  • Transparent, proxy authentication (NTLM/ Kerberos) or client authentication
  • Authentication via: Active Directory, eDirectory, RADIUS, LDAP and TACACS+
  • Server authentication agents for Active Directory SSO, STAS, SATC
  • Client authentication agents for Windows, Mac OS X, Linux 32/64
  • Authentication certificates for iOS and Android
  • Single sign-on: Active directory, eDirectory
  • Authentication services for IPSec, L2TP, PPTP, SSL
  • Captive Portal

User Self-Serve Portal

  • Download the Sophos Authentication Client
  • Download SSL remote access client (Windows) and configuration files (other OS)
  • Hotspot access information
  • Change user name and password
  • View personal internet usage
  • Access quarantined messages (requires Email Protection)

Base VPN Options

  • Site-to-site VPN: SSL, IPSec, 256- bit AES/3DES, PFS, RSA, X.509 certificates, pre-shared key
  • L2TP and PPTP
  • Remote access: SSL, IPsec, iPhone/iPad/ Cisco/Andriod VPN client support
  • SSL client for Windows and configuration download via user portal

IPSec Client (sold separately)

  • Authentication: Pre-Shared Key (PSK), PKI (X.509), Smartcards, Token and XAUTH
  • Encryption: AES (128/192/256), DES, 3DES (112/168), Blowfish, RSA (up to 2048 Bit), DH groups 1/2/5/14, MD5 and SHA-256/384/512
  • Intelligent split-tunneling for optimum traffic routing
  • NAT-traversal support
  • Client-monitor for graphical overview of connection status
  • Multilingual: German, English, and French

Sandstom Protection Subscription

Sandstorm Cloud Sandbox Protection

  • Full integration into your Sophos security solution dashboard
  • Inspects executables and documents containing executable content
  • Windows executables (including .exe, .com, and .dll)
  • Word documents (including .doc, .docx, docm and .rtf)
  • PDF documents
  • Archives containing any of the file types listed above
  • (ZIP, BZIP, GZIP, RAR, TAR, LHA/LZH, 7Z, Microsoft Cabinet)
  • Supports more than 20 file types
  • Dynamic malware behavior analysis runs files in real environments
  • In-depth malicious file reports and dashboard file release capability
  • Average analysis time less than 120 seconds
  • Flexible user and group policy options on file type, exclusions, and actions on analysis
  • Supports one-time download links

Network Protection Subscription

Intrusion Prevention (IPS)

  • High-performance, next-gen IPS deep packet inspection engine with selective IPS patterns for maximum performance and protection
  • Thousands of signatures
  • Support for custom IPS signatures
  • Flexible IPS policy deployment as part of any network or user policy with full customization

ATP and Security Heartbeat™

  • Advanced Threat Protection (Detect and block network traffic attempting to contact command and control servers using multi-layered DNS, AFC, and firewall)
  • Sophos Security Heartbeat™ instantly identifies compromised endpoints including the host, user, process, incident count, and time of compromise
  • Sophos Security Heartbeat™ policies can limit access to network resources or completely isolate compromised systems until they are cleaned up

Remote Ethernet Device (RED) VPN

  • Central Management of all RED devices
  • No configuration: Automatically connects through a cloud-based provisioning service
  • Secure encrypted tunnel using digital X.509 certificates and AES256-encryption
  • Virtual Ethernet for reliable transfer of all traffic between locations
  • IP address management with centrally defined DHCP and DNS Server configuration
  • Remotely de-authorize RED devices after a select period of inactivity
  • Compression of tunnel traffic
  • VLAN port configuration options (RED 50)

Clientless VPN

  • Sophos unique encrypted HTML5 self-service portal with support for RDP, HTTP, HTTPS, SSH, Telnet, and VNC

Web Protection Subscription

Web Protection and Control

  • Fully transparent proxy for anti- malware and web-filtering
  • Enhanced Advanced Threat Protection
  • URL Filter database with millions of sites across 92 categories, backed by SophosLabs
  • Surfing quota time policies per user/group
  • Access time polices per user/group
  • Malware scanning: block all forms of viruses, web malware, trojans, and spyware on HTTP/S, FTP and web-based email
  • Advanced web malware protection with JavaScript emulation
  • Live Protection real-time, in-the-cloud lookups for the latest threat intelligence
  • Second independent malware detection engine (Avira) for dual-scanning
  • Real-time or batch mode scanning
  • Pharming Protection
  • HTTP and HTTPS scanning and enforcement on any network and user policy with fully customizable rules and exceptions
  • SSL protocol tunnelling detection and enforcment
  • Certificate validation
  • High performance web content caching
  • Forced caching for Sophos Endpoint updates
  • File type filtering by mime-type, extension and active content types (e.g. Activex, applets, cookies, etc.)
  • YouTube for Schools enforcement
  • SafeSearch enforcement

Application Protection and Control

  • Enhanced application control with signatures and Layer 7 patterns for thousands of applications
  • Micro app discovery and control
  • Application control based on category, characteristics (e.g., bandwidth and productivity consuming), technology (e.g., P2P) and risk level
  • Per-user or network rule application control policy enforcement

Web and App Traffic Shaping

  • Enhanced traffic shaping (QoS) options by web category or application to limit or guarantee upload/download or total traffic priority and bitrate individually or shared

Email Protection Subscription

Email Protection and Control

  • E-mail scanning with SMTP, POP3, and IMAP support
  • Reputation service with spam outbreak monitoring based on patented Recurrent- Pattern-Detection technology
  • Block spam and malware during the SMTP transaction
  • Second independent malware detection engine (Avira) for dual-scanning
  • Live Protection real-time, in-the-cloud lookups for the latest threat intelligence
  • Automatic signature and pattern updates
  • File-Type detection/blocking/scanning of attachments
  • Accept, reject or drop over-sized messages
  • Detects phishing URLs within e-mails
  • Use pre-defined content scanning rules or create your own custom rules based on a variety of criteria
  • TLS Encryption support for SMTP, POP, and IMAP
  • Append signature automatically to all outbound messages
  • Email archiver

Email Quarantine Management

  • Spam quarantine digest and notifications options
  • Malware and spam quarantines with search and filter options by date, sender, recipient, subject, and reason with option to release and delete messages
  • Self-serve user portal for viewing and releasing quarantined messages

Email Encryption and DLP

  • Patent-pending SPX encryption for one-way message encryption
  • Recipient self-registration SPX password management
  • Add attachments to SPX secure replies
  • Completely transparent, no additional software or client required
  • DLP engine with automatic scanning of emails and attachments for sensitive data
  • Pre-packaged sensitive data type content control lists (CCLs) for PII, PCI, HIPAA, and more, maintained by SophosLabs

Web Server Protection Subscription

Web Application Firewall Protection

  • Reverse proxy
  • URL hardening engine with deep-linking and directory traversal prevention
  • Form hardening engine
  • SQL injection protection
  • Cross-site scripting protection
  • Dual-antivirus engines (Sophos and Avira)
  • HTTPS (SSL) encryption offloading
  • Cookie signing with digital signatures
  • Path-based routing
  • Outlook anywhere protocol support
  • Reverse authentication (offloading) for form-based and basic authentication for server access
  • Virtual server and physical server abstraction
  • Integrated load balancer spreads visitors across multiple servers
  • Skip individual checks in a granular fashion as required
  • Match requests from source networks or specified target URLs
  • Support for logical and/or operators
  • Assists compatibility with various configurations and non-standard deployments
  • Options to change Web Appliaction FIrewall performance parameters
  • Scan size limit option
  • Allow/Block IP ranges
  • Wildcard support for server paths
  • Automatically append a prefix/suffix for authentication

Logging and Reporting

NOTE: Individual log, report, and widget availability depends on enabled software subcriptions.

  • Hundreds of on-box reports with custom report options: Dashboards (Traffic, Security, and User Threat Quotient), Applications (App Risk, Blocked Apps, Search Engines, Web Servers, FTP), Network and Threats (IPS, ATP, Wireless, Security Heartbeat), VPN, Email, Compliance (HIPAA, GLBA, SOX, FISMA, PCI, NERC CIP v3, CIPA)
  • Current Activity Monitoring: system health, live users, IPsec connections, remote users, live connections, wireless clients, quarantine, and DoS attacks
  • Report anonymization
  • Report scheduling to multiple recipients by report group with flexible frequency options
  • Export reports as HTML, PDF, Excel (XLS)
  • Report bookmarks
  • Full log viewer with retention customization by category

XG Firewall Features by Subscription Summary


FullGuard Plus

Features (as listed above)
FullGuard
EnterpriseGuard
Base Firewall Sandstorm Protection Network Protection Web Protection Email Protection Web Server Protection
General Management (incl. HA)
Firewall, Networking and Routing
Base Traffic Shaping and Quotas
Secure Wireless
Authentication
Self-Serve User Portal
Base VPN Options
IPSec Client Sold seperately
Sandstorm Protection
Intrusion Prevention (IPS)
ATP and Security Heartbeat™
Remote Ethernet Device (RED) VPN
Clientless VPN
Web Protection and Control
Application Protection and Control
Web and App Traffic Shaping
Email Protection and Control
Email Quarantine Management
Email Encryption and DLP
Web Application Firewall Protection
Logging and Reporting

Download the Sophos XG Firewall Features Data Sheet (PDF).

Specifications:

Based upon the award-winning Sophos SG Series, our XG Series firewalls come pre-loaded with the Sophos Firewall OS to provide optimal performance to meet today’s network security requirements.

XG Series 2U
(Large Office / Data Center)
XG 550
XG 650
XG 750
Firewall throughput 65 Gbps 85 Gbps 100 Gbps
NGFW throughput 9 Gbps 10 Gbps 11.8 Gbps
VPN throughput 8.4 Gbps 9 Gbps 11 Gbps
IPS throughput 17 Gbps 20 Gbps 22 Gbps
Antivirus throughput (proxy) 10 Gbps 13 Gbps 17 Gbps
Ethernet interfaces (8) GbE copper
(default module)
(8) GbE copper
(default module)
(8) GbE copper
(default module)
FleXi port slots 4 6 8
FleXi port modules (optional)* 8 port GE copper
8 port GE SFP
2 port 10 GE SFP+
4 port 10 GE SFP+
4 port SFP plus 4 port GE copper LAN bypass
8 port GE copper
8 port GE SFP
2 port 10 GE SFP+
4 port 10 GE SFP+
4 port SFP plus 4 port GE copper LAN bypass
8 port GE copper
8 port GE SFP
2 port 10 GE SFP+
4 port 10 GE SFP+
4 port SFP plus 4 port GE copper LAN bypass

XG Series 1U
(Mid-size Office)
XG 210
XG 230
XG 310
XG 330
XG 430
XG 450
Firewall throughput 14 Gbps 18 Gbps 25 Gbps 30 Gbps 37 Gbps 45 Gbps
VPN throughput 1.35 Gbps 1.5 Gbps 2.5 Gbps 3.2 Gbps 4.8 Gbps 5.5 Gbps
IPS throughput 2.7 Gbps 4.2 Gbps 5.5 Gbps 8.5 Gbps 9 Gbps 10 Gbps
Antivirus throughput (proxy) 2.3 Gbps 2.8 Gbps 3.3 Gbps 6 Gbps 6.5 Gbps 7 Gbps
Ethernet interfaces (6) GbE copper (6) GbE copper (8) GbE copper
(2) GbE SFP
(8) GbE copper
(2) GbE SFP
(8) GbE copper
(default module)
(8) GbE copper
(default module)
FleXi port slots 1 1 1 1 3 3
FleXi port modules (optional)* 8 port GE copper
8 port GE SFP
2 port 10 GE SFP+
4 port 10 GE SFP+
4 port GE copper
LAN bypass
8 port GE copper
8 port GE SFP
2 port 10 GE SFP+
4 port 10 GE SFP+
4 port GE copper
LAN bypass
8 port GE copper
8 port GE SFP
2 port 10 GE SFP+
4 port 10 GE SFP+
4 port GE copper
LAN bypass
8 port GE copper
8 port GE SFP
2 port 10 GE SFP+
4 port 10 GE SFP+
4 port GE copper
LAN bypass
8 port GE copper
8 port GE SFP
2 port 10 GE SFP+
4 port 10 GE SFP+
4 port GE copper
LAN bypass
8 port GE copper
8 port GE SFP
2 port 10 GE SFP+
4 port 10 GE SFP+
4 port GE copper
LAN bypass

*Transceivers (mini GBICs) sold separately.

XG Series Desktop
(Small Office)
XG 85/85w
XG 105/105w
XG 115/115w
XG 125/125w
XG 135/135w
Firewall throughput 2 Gbps 3 Gbps 3.5 Gbps 5 Gbps 7 Gbps
VPN throughput 200 Mbps 300 Mbps 350 Mbps 410 Mbps 950 Mbps
IPS throughput 510 Mbps 700 Mbps 900 Mbps 1 Gbps 1.75 Gbps
Antivirus throughput (proxy) 330 Mbps 430 Mbps 520 Mbps 590 Mbps 1.4 Gbps
Ethernet interfaces (4) GbE copper (4) GbE copper (4) GbE copper (8) GbE copper (8) GbE copper
Wireless standards
(w models only)
802.11a/b/g/n
2.4 or 5 GHz
802.11a/b/g/n
2.4 or 5 GHz
802.11a/b/g/n
2.4 or 5 GHz
802.11a/b/g/n/ac
2.4 or 5 GHz
802.11a/b/g/n/ac
2.4 or 5 GHz
Number of antennas 2 3 3 3 3
Number of radios 1 1 1 1 1
MIMO capabilities 2x2:2 3x3:3 3x3:3 3x3:3 3x3:3

How to Buy:

Every appliance comes with our Base Firewall as standard which includes IPSec and SSL VPN and comprehensive Wireless Protection. You can extend protection with our total protection bundles or by adding protection modules individually.

Network Protection

Network Protection

Wireless Protection

Wireless Protection

Web Protection

Web Protection

All the protection you need to stop sophisticated attacks and advanced threats while providing secure network access to those you trust. Set up, manage and secure wireless networks in just minutes with the UTM’s built-in wireless controller that works with our full range of wireless access points. Comprehensive protection from the latest web threats and powerful policy tools ensures your users are secure and productive online.
Security Heartbeat™

Security Heartbeat™

Email Protection

Email Protection

Web Server Protection

Web Server Protection

Links your Sophos endpoints with your firewall to deliver unparalleled protection from advanced threats and reduce the time and complexity of responding to security incidents. Full SMTP and POP message protection from spam, phishing and data loss with our unique all-in-one protection that combines policy-based email encryption with DLP and anti-spam. Harden your web servers and business applications against hacking attempts while providing secure access to external users with reverse proxy authentication.

A simple approach to comprehensive support

We build products that are simple yet comprehensive. And, we take the same approach with our support. With options ranging from basic technical support to those including direct access to senior support engineers and customized delivery.

Licenses Names Standard
Included with purchase
Enhanced
Included in all bundles
Enhanced Plus
Support
Via telephone and email
For 90 days
(business hours only)
Included
(24x7)
VIP Access
(24x7)
Security Updates & Patches
For the life of the product
Included with an active software subscription Included with an active software subscription Included with an active software subscription
Software Feature Updates & Upgrades Included 90-days Included Included
Consulting
Remote consultation on your firewall configuration and security with a Sophos Senior Technical Support Engineer
    Included (up to 4 hours)
Warranty and RMA
For all hardware appliances
1 year (return / replace) Advance Exchange
(max. 5 years)
Advance Exchange
(max. 5 years)
Technical Account Manager
Dedicated named technical account manager
  Optional
(extra cost)
Optional
(extra cost)
Endpoint Protection
Antivirus, HIPS, Device Control
Yes Optional Optional

Documentation:

Download the Sophos XG Series Data Sheet (PDF).

Download the Sophos XG Series Sizing Guidelines (PDF).

Pricing Notes:

  • If your existing XG appliance does not have an active subscription or license, you will need to purchase a new license.
  • If you currently have an active subscription with an existing SG appliance, you can renew that subscription license by purchasing the renewal.
  • AP warranty is not included for the XG Wireless Subscriptions and will need to be purchased separately
  • Pricing and product availability subject to change without notice.
  • XG TotalProtect
    Includes: Appliance and FullGuard subscription (Network Protection, Web Protection, Email Protection, Webserver Protection and Enhanced Support)
  • XG TotalProtect Plus
    Include Appliance, FullGuard Plus subscription (Network Protection, Web Protection, Email Protection, Webserver Protection, Enhanced Support and Sandstorm)
  • XG EnterpriseProtect
    Includes: Appliance and EnterpriseGuard subscription (Network Protection, Web Protection and Enhanced Support)
  • XG EnterpriseGuard
    Includes: Network Protection, Web Protection and Enhanced Support
  • XG FullGuard
    Includes Network Protection, Web Protection, Email Protection, Webserver Protection and Enhanced Support
  • XG FullGuard Plus
    Includes Network Protection, Web Protection, Email Protection, Webserver Protection, Enhanced Support and Sandstorm
  • Security Heartbeat functionality is available when XG Firewall Network Protection, EnterpriseGuard or FullGuard subscription is used in conjunction with Central Endpoint Advanced, Cloud Enduser Protection and Intercept X licences.

XG 310 Base Appliance
XG 310 HW Appliance
- 8 GE ports, 1 expansion bay for optional FleXi Port module, 2 SFP ports, SSD + Base License (incl. FW, VPN & Wireless) for unlimited users + power cable
#XG31TCHUS
Our Price: $2,995.00
XG 310 TotalProtect 24x7
XG TotalProtect includes: Appliance and FullGuard subscription (Network Protection, Web Protection, Email Protection, Webserver Protection and Enhanced Support)
XG 310 TotalProtect 24x7, 1-year
#XB311CSUS
Our Price: $5,825.00
Add to Cart to see price!
XG 310 TotalProtect 24x7, 2-year
#XB312CSUS
Our Price: $7,948.00
Add to Cart to see price!
XG 310 TotalProtect 24x7, 3-year
#XB313CSUS
Our Price: $9,788..00
Add to Cart to see price!
XG 310 EnterpriseProtect 24x7
XG EnterpriseProtect includes: Appliance and EnterpriseGuard subscription (Network Protection, Web Protection and Enhanced Support)
XG 310 EnterpriseProtect 24x7, 1-year
#NB311CSUS
Our Price: $5,045.00
XG 310 EnterpriseProtect 24x7, 2-year
#NB312CSUS
Our Price: $6,582.00
XG 310 EnterpriseProtect 24x7, 3-year
#NB313CSUS
Our Price: $7,914.00
XG 310 TotalProtect Plus 24x7
XG TotalProtect Plus includes Appliance, FullGuard Plus subscription (Network Protection, Web Protection, Email Protection, Webserver Protection, Enhanced Support and Sandstorm)
XG 310 TotalProtect Plus, 1-year (US power cord)
#XP311CSUS
Our Price: $6,796.00
Add to Cart to see price!
XG 310 TotalProtect Plus, 2-year (US power cord)
#XP312CSUS
Our Price: $9,646.00
Add to Cart to see price!
XG 310 TotalProtect Plus, 3-year (US power cord)
#XP313CSUS
Our Price: $12,117.00
Add to Cart to see price!
XG 310 FullGuard Subscription with 24x7 Support - New License
XG FullGuard includes Network Protection, Web Protection, Email Protection, Webserver Protection and Enhanced Support
For new purchases only
XG 310 FullGuard Subscription with 24x7 Support, 1 Year
*For new purchases only.
#XF311CSEA
Our Price: $3,145.00
XG 310 FullGuard Subscription with 24x7 Support, 2 Years
*For new purchases only.
#XF312CSEA
Our Price: $5,503.00
XG 310 FullGuard Subscription with 24x7 Support, 3 Years
*For new purchases only.
#XF313CSEA
Our Price: $7,547.00
XG 310 FullGuard Plus with Enhanced Support Subscription with 24x7 Support - New License
XG FullGuard Plus includes Network Protection, Web Protection, Email Protection, Webserver Protection, Enhanced Support and Sandstorm
XG 310 FullGuard Plus with Enhanced Support - 1 Year
#XF311CSES
Our Price: $4,115.00
XG 310 FullGuard Plus with Enhanced Support - 2 Year
#XF312CSES
Our Price: $7,201.00
XG 310 FullGuard Plus with Enhanced Support - 3 Year
#XF313CSES
Our Price: $9,876.00
XG 310 EnterpriseGuard Subscription - New License
XG EnterpriseGuard includes: Network Protection, Web Protection and Enhanced Support
For new purchases only
XG 310 EnterpriseGuard Subscription, 1 Year
*For new purchases only.
#NG311CSEA
Our Price: $2,278.00
XG 310 EnterpriseGuard Subscription, 2 Years
*For new purchases only.
#NG312CSEA
Our Price: $3,986.00
XG 310 EnterpriseGuard Subscription, 3 Years
*For new purchases only.
#NG313CSEA
Our Price: $5,466.00
XG 310 Network Protection - New License
XG 310 Network Protection, 1 Year
*For new purchases only.
#XN311CSAA
Our Price: $747.00
XG 310 Network Protection, 2 Years
*For new purchases only.
#XN312CSAA
Our Price: $1,307.00
XG 310 Network Protection, 3 Years
*For new purchases only.
#XN313CSAA
Our Price: $1,792.00
XG 310 Web Protection - New License
XG 310 Web Protection, 1 Year
*For new purchases only.
#XB311CSAA
Our Price: $1,343.00
XG 310 Web Protection, 2 Years
*For new purchases only.
#XB312CSAA
Our Price: $2,350.00
XG 310 Web Protection, 3 Years
*For new purchases only.
#XB313CSAA
Our Price: $3,223.00
XG 310 Email Protection - New License
XG 310 Email Protection, 1 Year
*For new purchases only.
#XM311CSAA
Our Price: $1,080.00
XG 310 Email Protection, 2 Year
*For new purchases only.
#XM312CSAA
Our Price: $1,890.00
XG 310 Email Protection, 3 Year
*For new purchases only.
#XM313CSAA
Our Price: $2,592.00
XG 310 Webserver Protection - New License
XG 310 Webserver Protection, 1 Year
*For new purchases only.
#XS311CSAA
Our Price: $890.00
XG 310 Webserver Protection, 2 Years
*For new purchases only.
#XS312CSAA
Our Price: $1,557.00
XG 310 Webserver Protection, 3 Years
*For new purchases only.
#XS313CSAA
Our Price: $2,135.00
XG 310 Sandstorm Ransomware and APT Protection - New License
XG 310 Sandstorm Protection, 1 Year
*For new purchases only.
#SX311CSAA
Our Price: $1,078.00
XG 310 Sandstorm Protection, 2 Years
*For new purchases only.
#SX312CSAA
Our Price: $1,887.00
XG 310 Sandstorm Protection, 3 Years
*For new purchases only.
#SX313CSAA
Our Price: $2,588.00
XG 310 FullGuard Subscription with 24x7 Support - Renewal
XG FullGuard includes Network Protection, Web Protection, Email Protection, Webserver Protection and Enhanced Support
For new purchases only
XG 310 FullGuard Subscription with 24x7 Support, 1 Year - Renewal
#XF311CTEAA
Our Price: $2,988.00
XG 310 FullGuard Subscription with 24x7 Support, 2 Years - Renewal
#XF312CTEAA
Our Price: $5,228.00
XG 310 FullGuard Subscription with 24x7 Support, 3 Years - Renewal
#XF313CTEAA
Our Price: $7,170.00
XG 310 FullGuard Plus with Enhanced Support Subscription with 24x7 Support - Renewal
XG FullGuard Plus includes Network Protection, Web Protection, Email Protection, Webserver Protection, Enhanced Support and Sandstorm
XG 310 FullGuard Plus with Enhanced Support - 1 Year - RENEWAL
#XF311CTES
Our Price: $3,909.00
XG 310 FullGuard Plus with Enhanced Support - 2 Year - RENEWAL
#XF312CTES
Our Price: $6,841.00
XG 310 FullGuard Plus with Enhanced Support - 3 Year - RENEWAL
#XF313CTES
Our Price: $9,382.00
XG 310 EnterpriseGuard Subscription - Renewal
XG EnterpriseGuard includes: Network Protection, Web Protection and Enhanced Support
For new purchases only
XG 310 EnterpriseGuard Subscription, 1 Year - Renewal
#NG311CTEAA
Our Price: $2,164.00
XG 310 EnterpriseGuard Subscription, 2 Years - Renewal
#NG312CTEAA
Our Price: $3,786.00
XG 310 EnterpriseGuard Subscription, 3 Years - Renewal
#NG313CTEAA
Our Price: $5,193.00
XG 310 Network Protection - Renewal
XG 310 Network Protection, 1 Year - Renewal
#XN311CTAA
Our Price: $709.00
XG 310 Network Protection, 2 Years - Renewal
#XN312CTAA
Our Price: $1,241.00
XG 310 Network Protection, 3 Years - Renewal
#XN313CTAA
Our Price: $1,702.00
XG 310 Web Protection - Renewal
XG 310 Web Protection, 1 Year - Renewal
#XB311CTAA
Our Price: $1,276.00
XG 310 Web Protection, 2 Years - Renewal
#XB312CTAA
Our Price: $2,233.00
XG 310 Web Protection, 3 Years - Renewal
#XB313CTAA
Our Price: $3,062.00
XG 310 Email Protection - Renewal
XG 310 Email Protection, 1 Year - Renewal
#XM311CTAA
Our Price: $1,026.00
XG 310 Email Protection, 2 Year - Renewal
#XM312CTAA
Our Price: $1,796.00
XG 310 Email Protection, 3 Year - Renewal
#XM313CTAA
Our Price: $2,463.00
XG 310 Webserver Protection - Renewal
XG 310 Webserver Protection, 1 Year - Renewal
#XS311CTAA
Our Price: $845.00
XG 310 Webserver Protection, 2 Years - Renewal
#XS312CTAA
Our Price: $1,479.00
XG 310 Webserver Protection, 3 Years - Renewal
#XS313CTAA
Our Price: $2,028.00
XG 310 Sandstorm Ransomware and APT Protection - Renewal
XG 310 Sandstorm Protection, 1 Year - Renewal
#SX311CTAA
Our Price: $1,024.00
XG 310 Sandstorm Protection, 2 Years - Renewal
#SX312CTAA
Our Price: $1,793.00
XG 310 Sandstorm Protection, 3 Years - Renewal
#SX313CTAA
Our Price: $2,458.00
XG 310 Enhanced Plus Support
For new purchases only
XG 310 Enhanced Plus Support, 1 Year
#EP311CEAA
Our Price: $741.00
XG 310 Enhanced Plus Support, 1 Year - RENEWAL
#EP311CFAA
Our Price: $704.00
XG 310 Enhanced Plus Support, 2 Years
#EP312CEAA
Our Price: $1,297.00
XG 310 Enhanced Plus Support, 2 Years - RENEWAL
#EP312CFAA
Our Price: $1,232.00
XG 310 Enhanced Plus Support, 3 Years
#EP313CEAA
Our Price: $1,779.00
XG 310 Enhanced Plus Support, 3 Years - RENEWAL
#EP313CFAA
Our Price: $1,690.00
XG 310 Enhanced Support
For new purchases only
XG 310 Enhanced Support, 1 Year
#EN311CEAA
Our Price: $449.00
XG 310 Enhanced Support, 1 Year - RENEWAL
#EN311CFAA
Our Price: $427.00
XG 310 Enhanced Support, 2 Years
#EN312CEAA
Our Price: $786.00
XG 310 Enhanced Support, 2 Years - RENEWAL
#EN312CFAA
Our Price: $747.00
XG 310 Enhanced Support, 3 Years
#EN313CEAA
Our Price: $1,078.00
XG 310 Enhanced Support, 3 Years - RENEWAL
#EN313CFAA
Our Price: $1,024.00
XG 310 Enhanced to Enhanced Plus Support Upgrade
XG 310 Enhanced to Enhanced Plus Support Upgrade, 1 Year
#EP311CEUP
Our Price: $292.00
XG 310 Enhanced to Enhanced Plus Support Upgrade, 1 Year - RENEWAL
#EP311CFUP
Our Price: $277.00
XG 310 Enhanced to Enhanced Plus Support Upgrade, 2 Years
#EP312CEUP
Our Price: $511.00
XG 310 Enhanced to Enhanced Plus Support Upgrade, 2 Years - RENEWAL
#EP312CFUP
Our Price: $485.00
XG 310 Enhanced to Enhanced Plus Support Upgrade, 3 Years
#EP313CEUP
Our Price: $701.00
XG 310 Enhanced to Enhanced Plus Support Upgrade, 3 Years - RENEWAL
#EP313CFUP
Our Price: $666.00
Rackmount Ears
RED 50 Rackmount Ears 1U
#R50ZTCH1U
Our Price: $12.00
LAN Modules & Transceivers
4 port GbE copper - 2 Bypass groups FleXi Port module
- for SG/XG 2xx/3xx/4xx only
#SGCZTCHF4
Our Price: $495.00
8 port GbE copper FleXi Port module
- for SG/XG 2xx/3xx/4xx only
#SGIZTCHC8
Our Price: $695.00
8 port GbE SFP FleXi Port module
- for SG/XG 2xx/3xx/4xx only
#SGIZTCHF8
Our Price: $695.00
2 port 10 GbE SFP+ FleXi Port module
- for SG/XG 2xx/3xx/4xx only
#SGIZTCHF2
Our Price: $795.00
4 port 10 GbE SFP+ FleXi Port module
- for SG/XG 2xx/3xx/4xx only
#SGIZTCHF4
Our Price: $1295.00