TLS 1.3 Decryption
Remove an enormous blind spot with intelligent TLS inspection that's fast and effective, supporting the latest standards with extensive exceptions and point-and-click policy tools.
Next-generation firewall
Sophos XGS Series Firewalls
High-performance protection for SMBs and enterprises. Easy to deploy, powerful against threats, and built for your growing network.
Next-generation protection for evolving threats
Modern networks face sophisticated threats that traditional firewalls can't stop. Encrypted traffic hides malware. Cloud applications bypass inspection. Remote workers connect from anywhere.
Sophos XGS Series Firewalls deliver the performance and protection you need for today's distributed, encrypted networks. The Xstream architecture accelerates critical traffic while inspecting threats at wire speed.
From desktop models for small offices to enterprise rackmount appliances, XGS firewalls provide consistent protection across your organization.
Recognized by the analysts, labs, and customers that matter
Leader
Gartner® Magic Quadrant™, Network Firewalls
Best MSP Security Solution
SE Labs 2025
#1 Firewall Solution
G2, Spring 2026
Customers’ Choice
Gartner Peer Insights, Network Firewalls
GARTNER and Magic Quadrant are registered trademarks of Gartner, Inc. and/or its affiliates and are used herein with permission. All rights reserved. Gartner does not endorse any vendor, product, or service depicted in its research.
Xstream Protection capabilities
Sophos Firewall's Xstream architecture protects your network from the latest threats while accelerating your important SaaS, SD-WAN, and cloud application traffic.
Deep Packet Inspection
Stop the latest ransomware and breaches with high-performance streaming deep packet inspection, including next-gen IPS, web protection, and app control.
Application Acceleration
Accelerate your SaaS, SD-WAN, and cloud traffic such as VoIP, video, and other trusted applications automatically, putting them on the Xstream FastPath.
Xstream SD-WAN
Enable extreme network performance, flexibility, and resiliency with performance-based routing and point-and-click orchestration.
Synchronized Security
Share threat intelligence between endpoints and firewalls for automated threat response and network isolation of compromised devices.
AI-Powered Threat Protection
Deep learning and sandboxing powered by SophosLabs Intelix identify and block zero-day threats and advanced malware.
Purpose-built for performance
The XGS Series delivers Xstream performance at every price point to power the protection you need for today's diverse, distributed, and encrypted networks.
- Powered by Xstream — Accelerate and offload your important SaaS, SD-WAN, and cloud traffic at the hardware level with integrated Xstream Flow Processors
- High-Speed Connectivity — Customize your firewall's versatile connectivity options with add-on modules for high-speed copper, fiber, PoE, and Wi-Fi
- Purpose-Built Performance — Dual processor architecture, generous memory provisioning, and high-performance solid-state storage handle the most demanding workloads
Xstream SD-WAN
The latest SD-WAN capabilities in Sophos Firewall enable extreme network performance, flexibility, and resiliency.
- Xstream FastPath Acceleration — Accelerate SD-WAN IPsec VPN tunnel flows taking full advantage of the hardware crypto capabilities
- Performance-Based Routing — Automatically optimize routing based on WAN Link performance (latency, jitter, loss) in real time
- Point-and-Click Orchestration — Easily set up complex hub-and-spoke or full mesh SD-WAN overlay networks with full tunnel redundancy
XGS Series Models
Choose the right firewall for your organization's performance and connectivity requirements.
XGS Series 1U Rackmount
Performance and versatile connectivity options to meet the security infrastructure needs of larger SMB and mid-sized organizations.
Sophos XGS 2100
- Form Factor: 1U
- Firewall Throughput: 30,000 Mbps
- Concurrent Connections: 6,500,000
Sophos XGS 2300
- Form Factor: 1U
- Firewall Throughput: 39,000 Mbps
- Concurrent Connections: 6,500,000
Sophos XGS 3100
- Form Factor: 1U
- Firewall Throughput: 47,000 Mbps
- Concurrent Connections: 12,260,000
Sophos XGS 3300
- Form Factor: 1U
- Firewall Throughput: 58,000 Mbps
- Concurrent Connections: 13,700,000
Sophos XGS 4300
- Form Factor: 1U
- Firewall Throughput: 75,000 Mbps
- Concurrent Connections: 16,600,000
Sophos XGS 4500
- Form Factor: 1U
- Firewall Throughput: 80,000 Mbps
- Concurrent Connections: 17,200,000
XGS Series 2U Rackmount
No-compromise performance, connectivity, and redundancy to power the most demanding distributed enterprise networks.
Sophos XGS 5500
- Form Factor: 2U
- Firewall Throughput: 100,000 Mbps
- Concurrent Connections: 32,400,000
Sophos XGS 6500
- Form Factor: 2U
- Firewall Throughput: 120,000 Mbps
- Concurrent Connections: 39,900,000
Sophos XGS 7500
- Form Factor: 2U
- Firewall Throughput: 160,000 Mbps
- Concurrent Connections: 48,000,000
Sophos XGS 8500
- Form Factor: 2U
- Firewall Throughput: 190,000 Mbps
- Concurrent Connections: 58,000,000
Solutions that fit your network
Sophos Firewall adapts to your network, so you don't need to adapt your network to the firewall.
Enterprise
Enterprise-grade protection, performance, visibility, and SD-WAN features for today's most demanding networks.
Remote Workers
Easy and scalable solution to enable your remote workers and protect your network with Zero Trust Network Access.
Cloud
If you have public cloud infrastructure or hybrid networks that need protection, we have a cloud firewall solution for you.
All-in-One
Simpler, consolidated, affordable protection for a small office with the best protection and value.
Retail and Branch
Retail and distributed organizations with lots of branch offices have unique challenges that Sophos Firewall and SD-RED can solve.
Schools
Education institutions have special requirements for compliance and protection that Sophos Firewall has been purpose-built to address.
How to buy
Flexible licensing options
XGS firewalls are available with various subscription bundles including Network Protection, Xstream Protection, and Complete Protection. Choose the right combination based on your security requirements.
Available in 1-year and multi-year terms with volume discounts for larger deployments.
New for MSPs
Firewall as a Service (HWaaS)
Managed Service Providers can now deploy XGS Series firewalls with no upfront hardware cost, billed monthly through Sophos MSP Flex. One predictable monthly price includes the XGS appliance, standard shipping, and Xstream Protection.
- No upfront hardware cost — pay monthly through MSP Flex
- XGS hardware + Xstream Protection in one monthly price
- 12-month minimum commitment, then month-to-month
Sophos Firewall HWaaS is available to MSPs in the U.S. and Canada through participating distributors, starting July 1, 2026. Eligible XGS models and pricing available on request.
Related products and services
Extend your network security with complementary Sophos solutions.
Sophos Endpoint
Advanced protection for laptops, desktops, and servers. Integrates with XGS firewalls through Synchronized Security.
Explore Sophos EndpointSophos Managed Detection and Response
24/7 threat hunting and incident response from Sophos experts. Monitors firewall telemetry alongside endpoint and network data.
Discover Sophos MDRSophos Wireless Access Points
Secure Wi-Fi access points with seamless integration to Sophos Firewall for unified management and synchronized security.
View access pointsLegacy XGS Desktop Models
Previous generation desktop models. For current models, see the links above.
Questions about XGS Firewalls?
Our firewall specialists can help you select the right XGS model and subscription bundle for your network requirements.
Contact a firewall specialist