Sophos Xstream Protection Bundles
Sophos Firewall’s Xstream architecture delivers extreme levels of protection, performance, and visibility.

Xstream TLS Inspection

Industry leading performance, flexibility, and transparency into all the encrypted traffic on your network.

Xstream DPI Engine

Deep packet threat protection in a single streaming engine for AV, IPS, Web, App control, and TLS Inspection.

Xstream Network FastPath

Automatic and policy based intelligent offloading of trusted traffic processing at wire speed.

No compromise performance to serve thousands of users
Our hardware appliances are engineered from the core to serve high-performance networks. The new XGS 7500 and XGS 8500 models come with a range of connectivity including built-in, high-speed QSFP28 ports to support up to 100 Gbps, and offer up to 34 Gbps with full Threat Protection.

Scalability to address changing requirements
Our flexible product concept not only offers the flexibility to adapt and extend connectivity to address changing requirements, we also have a programmable architecture to continually accelerate performance over time.

Powering your journey to the cloud
Whether you’re still fully on-prem, running a hybrid infrastructure, or well on your way to the cloud, our architecture design ensures your investment in Sophos Firewall is future-proofed and enables a seamless transition to a cloud-enabled world - whenever you're ready.

Network Protection

• Xstream TLS Inspection: TLS 1.3 inspection with prepackaged exceptions
• Xstream DPI engine: streaming deep-packet inspection
• IPS: Next-gen Intrusion Prevention
• ATP: Advanced Threat Protection
• Synchronized Security Heartbeat: integration with Sophos Endpoints to identify and isolate threats
• Clientless VPN: HTML5
• SD-RED VPN: Manage SD-RED devices

Web Protection

• Web Control: by user, group, category, URL, keyword
• Web Threat Protection: malware, PUA, malicious JavaScript, pharming
• App Control: by user, group, category, risk, and more
• Synchronized App Control: integration with Sophos endpoints to identify unknown apps
• Reporting: Extensive web and app reporting

Zero-Day-Protection

• Zero-Day Threat Protection: analyze all unknown files using AI, ML, and sandboxing
• Powered by SophosLabs Intelix: cloud-based intelligence and analysis
• Machine Learning: using multiple deep learning models
• Cloud Sandboxing: dynamic runtime analysis of unknown files
• Reporting: Extensive threat intelligence analysis reporting

Sophos Central Management

• Group Firewall Management: Synchronized policy across firewall groups
• Backup and firmware updates: storage and scheduling
• Zero-touch deployment: for new firewalls from the cloud

Sophos Central Orchestration

• SD-WAN Orchestration: Point and click Site-to-Site VPN Orchestration
• Cloud Firewall Reporting: Multi-firewall reporting with save, schedule and export reports (30-day data retention)
• XDR and MDR Connector: Support for XDR and MDR services

Enchanced Support

• 24/7 support
• Feature Updates
• Advanced replacement hardware warranty for term