Sophos SG 125
Unleash the full potential of your network

Overview:

With bandwidth requirements constantly increasing, network security appliances need to do more than ever before. The Sophos SG Series appliances are built to provide optimal performance, versatility and efficiency to meet all your security needs.

The Sophos SG Series appliances are designed to provide the optimal balance between performance and protection – for diverse IT environments. Whether you need a solution for a small remote office, want to protect your school campus, or are a global organization requiring high-availability and enterprise-grade features, our SG Series appliances are an ideal fit.

Versatile

Appliances to suit every environment

Our broad product line-up makes it easy for you to choose the right appliance. A higher model number indicates higher throughput and an increased number of ports or connectivity options.

And as every software subscription is available on every appliance, you can flexibly size the solution to fit your budget and your individual security needs. Next-generation firewall features or all-in-one security on a single box, it’s your choice.

Rapid

Proven performance on all models

Our appliances are built upon the most advanced Intel technology. Optimized use of multi-core processors allows consolidation of your security solutions without a performance trade-off.

With faster than ever firewall, IPS and VPN throughput, our SG Series appliances effortlessly handle multiple tasks simultaneously. Plus, you can easily scale up by dynamically clustering up to 10 units without external load balancers.

Responsive

Technology built to process data in real-time

Your network is constantly changing so your protection needs to be adaptive. All our appliances have integrated high-speed hard drives (in many cases SSDs) for local storage of spam quarantine data and faster access to comprehensive reports and real-time logs.

Accelerated in-memory content scanning in secure proxy mode makes your defenses more effective and efficient.

Reliable

Engineered for business – today and tomorrow

Using the latest Intel technology, our products provide the utmost in flexibility. Add to your protection as you need it - without changing or upgrading your hardware. That means you benefit from future software and performance enhancements which guarantees the best possible value for money.

Redundancy features such as an additional hard-drive or power supply are available on the 1U SG 450 and on both of our 2U appliances.

Modular

Flexible configuration options on many models

Configure your hardware to suit your infrastructure and change it as and when you need to. Our optional FleXi Port LAN modules give you the freedom to select the connectivity you need – copper, fiber, 10GbE – you decide.

FleXi Port modules are interchangeable within a range, e.g. 1U, so, for example, you can use the same module with all of your 1U appliances which saves you money if you upgrade to a higher model at a later date.

Connected

Full wireless coverage – for every office

Our SG 100 Series desktop models with integrated wireless are a very tidy solution for even the most compact office space. As the access point is built in, you do not require any extra hardware. Should you need additional coverage or have a larger space, you can add Sophos access points.

Every one of our appliances has a built-in wireless controller for you to connect Sophos access points and manage them simply from your central management console.

Compare Models:

This is what you get with every Sophos SG Series firewall:

• The latest Intel multi-core technology for optimal performance and efficiency
• The same security features available on every size of appliance
• Built-in HDD or SSD as storage for local quarantine data, logs and reporting
• FleXi Port modules available for all 1U and 2U appliances (interchangeable within a range, e.g. 1U)
• Free Sophos UTM Manager (SUM) to manage multiple appliances
• Possibility to dynamically cluster up to 10 appliances of the same kind – without external load balancers

Model		Tech. Specs			Throughput
	Form Factor	Ports/Slots (Max Ports)	w-model 802.11 wireless	Swappable Components	Firewall (Mbps)	VPN (Mbps)	NGFW (Mbps)	AV-proxy (Mbps)
SG 105(w)	desktop	4	a/b/g/n	n/a	1,500	325	350	90
SG 115(w)	desktop	4	a/b/g/n	n/a	2,300	425	500	120
SG 125(w)	desktop	8	a/b/g/n/ac	n/a	3,100	500	750	200
SG 135(w)	desktop	8	a/b/g/n/ac	n/a	6,000	1,000	1,500	350
SG 210	1U	6/1 (14)	n/a	n/a	11,000	1,000	2,000	500
SG 230	1U	6/1 (14)	n/a	n/a	13,000	2,000	3,000	800
SG 310	1U	10/1 (18)	n/a	n/a	17,000	3,000	5,000	1,200
SG 330	1U	10/1 (18)	n/a	n/a	20,000	4,000	6,000	1,500
SG 430	1U	8/3 (24)	n/a	n/a	25,000	4,000	7,000	2,000
SG 450	1U	8/3 (24)	n/a	opt. Power	27,000	5,000	8,000	2,500
SG 550	2U	8/4 (32)	n/a	Power, SSD, Fan	45,000	8,000	12,000	3,500
SG 650	2U	8/6 (48)	n/a	Power, SSD, Fan	65,000	10,000	16,000	5,000

Deployment:

SG Series Appliances - Small

These desktop firewalls offer exceptional performance for models in this class and are available with the same broad set of security features as all our other appliances. The following diagrams show typical deployments in this range using both integrated wireless LAN and external access points.

Specifications:

These powerful firewall appliances offer 1U performance with a desktop form factor and price. If you have a small business or branch offices to protect and are working on a tight budget, these models are the ideal choice. They are also available with integrated 802.11ac wireless LAN for optimal coverage and connectivity for your mobile workers. Built upon the latest Intel architecture, our software makes optimal use of the multi-core technology to provide excellent throughput for all your key processes. These models come equipped with 8 GbE copper ports built-in and, as with all our firewalls, up to 10 appliances can be dynamically clustered for greater scalability.

SG Series Appliances: SG 125, SG 125w, SG 135, SG 135 Wireless
Front View	Performance	SG 125(w)	SG 135(w)
	Firewall throughput	3.1 Gbps	6 Gbps
	VPN throughput	500 Mbps	1 Gbps
	IPS throughput	750 Mbps	1.5 Gbps
	Antivirus throughput (proxy)	200 Mbps	350 Mbps
	Concurrent connections	2,000,000	2,000,000
	New connections/sec	24,000	36,000
	Maximum licensed users	unrestricted	unrestricted
	Wireless Specification (SG 125 Wireless & SG 135 Wireless only)
	No. of antennas	3 external	3 external
	MIMO capabilities	3 x 3:3	3 x 3:3
	Wireless interface	802.11a/b/g/n/ac (2.4 GHz / 5 GHz)	802.11a/b/g/n/ac (2.4 GHz / 5 GHz)
Back View	Physical interfaces
	Hard drive (local quarantine/logs)	integrated HDD	integrated HDD
	Ethernet interfaces (fixed)	8 GE copper	8 GE copper
	I/O ports	2 x USB 2.0 1 x COM (RJ45) 1 x VGA	2 x USB 2.0 1 x COM (RJ45) 1 x VGA
	Power supply	External auto ranging DC: 12V, 100-240VAC, 50-60 Hz	External auto ranging DC: 12V, 100-240VAC, 50-60 Hz

Physical specifications		Environment
Mounting	Rackmount kit available (to be ordered separately)	Power consumption	12.46W, 49.3 BTU/hr (idle) 26.16W, 89.2 BTU/hr (full load)
Dimensions Width x Depth x Height	288 x 186.8 x 44 mm 11.38 x 7.35 x 1.73 inches	Operating temperature	0-40°C (operating) -20 to +80°C (storage)
Weight	1.7 kg / 3.75 lbs (unpacked) 2.82 kg / 6.22 lbs (packed)	Humidity	10%-90%, non-condensing
Safety Certifications
Certifications	CE, FCC Class B, CB, VCCI, C-Tick, UL, CCC

Flexible licensing options:

Total Protect bundles

Most Sophos customers choose our Total Protect bundles. They give you everything you need to secure your organization in one easy-to-manage license: an SG appliance, a FullGuard subscription, and your technical support.

FullGuard

FullGuard combines all our core licenses in one cost-effective subscription for complete security: Essential Firewall, Network Protection, Web Protection, Email Protection, Wireless Protection and Web Server Protection.

BasicGuard

Our BasicGuard subscription incorporates all the essential security features you need for your small business. Should you want to extend your protection even further, you can upgrade to a FullGuard license at any time. BasicGuard is only available with the SG 105, SG 115, SG 105 Wireless and SG 115 Wireless appliances.

Individual modules

All our modules are also available as individual subscriptions. Simply choose the ones you need.

License Options
Modules	Individual Subscriptions	BasicGuard	FullGuard
Essential Firewall - Free Network Firewall, NAT, Native Windows Remote Access	Yes	Full	Full
Network Protection IPSec/SSL, ATP, VPN, IPS, DoS Protection	Yes	Basic	Full
Web Protection URL Filtering, Application Control, Dual Engine Antivirus	Yes	Basic	Full
Email Protection Anti-spam, Email Encryption and DLP, Dual Engine Antivirus	Yes	Basic	Full
Wireless Protection Wireless Controller, Multi-SSID Support, Captive Portal	Yes	Basic	Full
Webserver Protection Web Application Firewall, Reverse Proxy, Antivirus	Yes	-	Full
Endpoint Protection Antivirus, HIPS, Device Control	Yes	Optional	Optional

Extend your security:

• Sophos RED: Simply secure your branch offices by forwarding all traffic to the central Sophos UTM. Installation requires no technical training and there is no ongoing maintenance.
• Sophos WiFi Access Points: Configurationless access points are instantly protected by the UTM, letting you create secure networks for your employees or guest hotspots for your visitors.
• VPN Clients: Secure SSL or IPsec VPNs provide mobile and home workers with secure remote access from any location at any time.
• Free UTM Manager: Centrally manage multiple UTM devices through IPsec VPN tunnels; deploy policies in just a few clicks.

RM-SR-T2 Rackmount:

The RM-SR-T2 gives you the ability to mount your Sophos desktop firewalls in a 19" rack. The rack is tailored specifically for the listed models to guarantee a perfect fit. In addition, the connections are brought to the front for easy access. The power supply is fixed to prevent an accidental loss of power.

Assembly will take about 5 minutes. Simply slide your Sophos device in the kit, place the retainers, connect the supplied cables to the keystones and fix the power supply to the rack.

Other colors can be delivered on project basis.

Please note: This model is not compatible with the new Sophos Rev. 3 firewalls. Check out the new RM-SR-T3 (SG) and RM-SR-T6 (XG) for the newer version of the firewall.

Specifications
Color	RAL 5010 Gentian Blue
Height	1.3U 2U with the supplied front plate
Dimensions (height x width x depth)	59 x 482 x 217mm
Number of connections brought to the front	9
Console port to the front	Yes
Cables	9x 0.5m cables
Couplers	9x RJ45 couplers
Supported Models	- Sophos SG/XG 125 - Sophos SG/XG 135
What's in the box	- 1x SoRack + RJ45 couplers - 1x Rackmount.IT front plate - Cables - Assembly materials - Installation guide
EAN	8718868918345
UPC	852754006346

RM-SR-T3 Rackmount:

The RM-SR-T3 gives you the ability to mount your Sophos desktop firewalls in a 19" rack. The rack is tailored specifically for the listed models to guarantee a perfect fit. In addition, the connections are brought to the front for easy access. The power supply is fixed to prevent an accidental loss of power. Assembly will take about 5 minutes. Simply slide your Sophos device in the kit, place the retainers, connect the supplied cables to the keystones and fix the power supply to the rack. Other colors can be delivered on project basis.

Specifications
Color	RAL 9003 Signal White
Height	1.3U 2U with the supplied front plate
Dimensions (height x width x depth)	59 x 482 x 217mm
Number of connections brought to the front	10
Console port to the front	Yes
Cables	10x 0.5m cables
Couplers	10x RJ45 couplers
Supported Models	- Sophos SG 125 Rev. 3 - Sophos SG 135 Rev. 3
What's in the box	- 1x SoRack + RJ45 couplers - 1x Rackmount.IT front plate - Cables - Assembly materials - Installation guide
EAN	8718868918529
UPC	852754006520

Documentation:

Download the Sophos SG Series Data Sheet (PDF).